An Employee Left With Your Keys: What to Do Next
An employee clocks out for the last time, hands back a badge, maybe signs a form, and drives off still holding a key ring that opens your front door, your back office, and possibly a storage room with inventory in it. Nobody planned it that way. It just happens because keys get handed out over months or years and nobody keeps a running list of who has what. The exit interview ends, the paperwork gets filed, and the actual metal that opens your building goes home in someone's pocket. What you do in the days right after that moment determines whether it's a non-issue or a standing risk that lingers for months.
Why Unreturned Keys Are A Real Security Gap
A key doesn't expire when someone stops being your employee. It still turns the same lock it turned yesterday, and it will keep turning that lock indefinitely unless you change the lock itself or get every copy back and accounted for. That's the part that catches owners off guard: a badge can be deactivated in a system with one click, but a physical key has no off switch. If it isn't in your hand, it's still live.
The risk isn't only about someone coming back with bad intentions, though that does happen often enough to plan around. More often the concern is quieter: a key that gets lost, loaned to a roommate, left in a jacket that ends up at a thrift store, or simply forgotten about entirely. Once a key leaves your control, you lose visibility into where it goes next, and that uncertainty is the actual gap, not any specific worst-case scenario. A business with one unreturned key from a former employee has an unknown number of people who could theoretically walk in unnoticed, and unknown is the part that should bother you.
When A Simple Key Return Is Enough
Not every departure calls for changing hardware. If the exit was routine, the relationship ended on good terms, the employee returns every key when they leave, and you can verify that count against how many were issued in the first place, then a simple return usually closes the loop. This works best in smaller operations where you know exactly how many keys exist for a given door and who has each one, so a returned key brings the count back to zero rather than leaving a guess.
A key return is also reasonable when the key in question only opens something low-value or already monitored another way, a supply closet with nothing sensitive in it, for instance, rather than a main entry or a room with cash, records, or equipment. In those cases, a signed handoff and a quick confirmation that the count matches is proportionate to the actual risk.
When A Rekey Is The Safer Call
The calculation changes the moment any of the following is true. The departure was contentious, or the employee showed any sign of resentment on the way out. A key wasn't returned, or you're not fully certain every copy was accounted for, since employees sometimes cut duplicates without telling anyone. The key opens a main entrance, an office with financial records, a storage area with valuable inventory, or any space you'd rather not have an unknown number of copies floating around for. Or you simply don't have a reliable count of how many keys exist for that lock in the first place, which is common in businesses that have changed hands, expanded, or gone through several rounds of hiring without a formal key log.
In any of those situations, a rekey is the only method that actually closes the gap, because it makes every existing key for that lock stop working the moment the new pins go in. A returned key only accounts for the copy you know about; a rekey accounts for every copy, known or not. Think of it the way you'd think of a password after a shared account gets compromised: changing the password on your end is the only step that matters, regardless of how many people had the old one or where those copies ended up.
How Master Key Systems Limit The Damage Next Time
A single master key that opens every door in a building is efficient day-to-day and a serious liability the moment one person with that master key leaves under bad circumstances. A better structure gives each employee a key that opens only what their role requires: front-counter staff gets the front, a warehouse lead gets the warehouse, and a smaller set of supervisors carry a master key that opens everything. When someone in a limited role leaves, you're rekeying one door or a small zone rather than the entire building, and the operational disruption shrinks along with the actual exposure.
This kind of tiered system also makes an unreturned key far less dangerous by design. A departing line employee holding a key that only opens a break room and a supply closet is a minor inconvenience to replace. A departing manager holding a master that opens every interior door is a different order of problem entirely, which is exactly why the number of people who carry a true master should stay small and deliberate rather than grow by default as titles get handed out. A high-security keyway, the kind used in restricted systems like Medeco, adds another layer here, since blanks for those keys aren't available at a hardware store counter, which limits how easily a current or former employee can get an unauthorized duplicate cut without your knowledge.
Access Logs And Credential Tracking Reduce The Guesswork
If your building uses a keypad, key fob, or card system alongside or instead of physical keys, the offboarding conversation gets easier in one important way: an electronic credential can be deactivated remotely, on the spot, without touching a single lock. That single fact is why more businesses are shifting at least their main entry to some form of electronic access even while keeping traditional keys for interior doors. The trade-off is that electronic hardware exposed to extreme outdoor heat tends to drain batteries and stress internal components faster than the same hardware kept indoors, so an exterior keypad or fob reader warrants a maintenance check on a schedule, not just a reactive one after it stops responding.
The other advantage of an access log is knowing who came and went, and when. A key doesn't leave a record behind; a card swipe or a code entry does. That log is what tells you, after the fact, whether a former employee's credential was ever used again after their last shift, information a physical key can't give you. Even a basic system that timestamps entries turns "we think everyone's accounted for" into something you can actually check rather than assume.
A Practical Offboarding Checklist
Build this into every departure, planned or otherwise, so it's a routine step rather than something you scramble to remember under pressure.
- Pull the key log (or start one now if none exists) and confirm exactly how many keys were ever issued for each door that employee had access to.
- Collect every physical key at the time of departure and count them against that log before the employee leaves the property.
- Deactivate any keypad code, fob, or card credential tied to that person immediately, not at the end of the week.
- Flag any door where the count doesn't match or where a key was reported lost at any point during that person's employment.
- Decide, using the criteria above, whether a full rekey is warranted for any flagged door.
- Review who currently holds a true master key and confirm that list is still as short as it needs to be.
- Update the key log itself so it reflects reality going forward, not just the moment right after this departure.
Running through this list every time takes a few minutes. Skipping it is how businesses end up with three or four unaccounted-for keys floating around from employees who left over the past couple of years, each one a small, forgotten gap in an otherwise secure building.
Frequently Asked Questions
As soon as reasonably possible, ideally the same day or the next business day. The window where an unreturned key poses the most risk is right after the departure, while the reason for the exit is still fresh and access hasn't been cut off in any other way.
No. Deactivating an electronic credential only closes that specific access path. If the same employee also held a physical key to any door, that key is still live until the lock is rekeyed or every copy is confirmed returned.
Yes, in most cases a locksmith can rekey multiple locks to a single new key or to a coordinated master system in one visit, which keeps day-to-day operations simple while still closing the gap left by a departure.
Start with a fresh key log today rather than trying to reconstruct history perfectly. Count every key currently in circulation for each door, compare that to what a rekey would reset to zero, and treat any door with an unclear count as a priority for rekeying.
No. Even a small operation with two or three doors benefits from separating a general-access key from a master that opens everything, since it limits what any single departure exposes.
A quarterly check is a reasonable habit for most small operations, confirming that the number of keys in circulation still matches the log and that the list of people holding a master key hasn't quietly grown.
Handling a departure well isn't about assuming the worst of anyone who leaves. It's about treating physical access the same way you'd treat any other credential that once belonged to someone who no longer works for you: accounted for, current, and limited to what's actually needed today. A short checklist, a clear line for when a return is enough versus when a rekey is warranted, and a key system that limits exposure by role turns what could be an ongoing worry into a routine part of letting someone go.
Had an employee leave and keep their keys — Get your locks rekeyed or your master key system reviewed before it becomes a liability. KwikPick Lock and Safe serves the Phoenix West Valley. Call (623) 300-1889.
