Access control in a private residence is four systems that most people treat as one: the door locks, the vehicle gate, the garage, and the list of who holds a credential. They fail differently and answer to different rules. Plan them together, decide early what each does when power or internet drops, and check what building code requires at your egress door and what the safety standard requires at your gate before specifying hardware.
What actually counts as access control in a house?
Four layers. The perimeter is the vehicle gate and any pedestrian gate beside it, and it carries the most safety regulation while getting thought about last. The entry is the front door, the side door and the door from the garage into the house, and this is where building code applies. The credential is whatever opens something, from a metal key to a fingerprint, and every one you add is another thing to revoke later. The record is the log of who came and went, which nobody asks for at design stage and everybody wants after a delivery goes missing.
Planned as four layers it stays manageable. Bought as four products it becomes four apps.
What does California code require of the lock on your main door?
The California Residential Code requires every dwelling to have at least one egress door, and section R311.2 requires that door to be readily openable from inside the residence without the use of a key or special knowledge or effort. City building departments restate the sentence in their own handouts, Pasadena's among them. It is state code, not a local rule.
Two consequences. A double cylinder deadbolt, needing a key on both sides, does not belong there, and it is a common wrong fix after a break in through adjacent glass. And any smart lock on that door needs inside operation that works with no power, no phone and no code. A thumbturn qualifies, a keypad on the inside face does not, because a code is special knowledge.
Other exterior doors are not held to that section. The egress door is.
Should a lock fail open or stay locked when the power drops?
This decides most access control arguments.
Fail safe hardware unlocks when it loses power, used where a person could be trapped behind it. Fail secure hardware stays locked, used where property matters more than passage and there is always a mechanical way out from the inside.
Most residential smart locks sidestep the argument, because the bolt is mechanical and the motor only turns it. Lose the batteries and the bolt stays where it was, and the thumbturn still works. That is the right behaviour for a house.
Gates are the opposite case. A gate that fails locked with no manual release will hold a car inside the property during an evacuation. Every automatic gate needs a release a person can work in the dark without a tool, and everyone in the household should have used it once. In a canyon or a fire zone that is not a comfort feature. The same logic runs through the rest of the house, covered in what happens when the power goes out.
What does UL 325 require at an automatic vehicle gate?
The safety standard for gate operators is ANSI/CAN/UL 325. A residential driveway gate serving one to four single families is a Class I installation under it.
The requirement that surprises people: a gate operator must have a minimum of two independent entrapment protection means for each entrapment zone, per Table 32.1 of the standard. Not one. Two. And the same type of device cannot be used for both.
The standard names five types:
- Type A, the inherent entrapment protection system built into the operator itself
- Type B1, a non contact sensor, meaning a photoelectric sensor or equivalent
- Type B2, a contact sensor, meaning an edge device or equivalent
- Type C, an inherent force limiting, adjustable clutch or pressure relief device
- Type D, an actuating device that requires continuous pressure to keep the gate moving
Minimum quantities from the same table: a horizontal slide gate needs two opening and two closing. A horizontal swing gate needs two and two, with a narrow exception where one direction genuinely has no entrapment zone. A vertical lift gate needs one opening and two closing.
Why this matters on a real driveway: the operator's own force sensing counts as only one of the two. If your gate has nothing but the operator and a single photo eye across the drive, one of your zones is very likely short.
How do locks and gates join the rest of the house?
Three routes, and they are not equivalent.
Matter is the interoperability layer. Door Lock is a defined device type in the Matter 1.0 Device Library Specification under ID 0x000A, described as a device used to secure a door that can be actuated manually or remotely. Matter runs over Ethernet, WiFi and Thread, using Bluetooth Low Energy only to commission. A lock that speaks Matter is likelier to still work with whatever controller you own in five years.
Native drivers are what a Savant, Control4 or Lutron dealer reaches for first, because they expose more than lock and unlock. Lock state, battery level and which user code was used are what let you build useful behaviour, such as a notification when the housekeeper code is used outside its window.
Cloud only locks need care: if the manufacturer's service is the only path between the lock and the house, their outage is your outage.
Whichever route, locks and cameras belong on a segmented network, for reasons we set out in whether smart home devices need their own network.
What has to be pre wired, and what can wait?
The credentials are easy to change later. The copper is not.
Pull while the walls and the driveway are open: conduit and power to every gate post, network cable to the gate, the intercom position and any exterior keypad, power at the garage door operator, and a spare conduit to the gate that nothing goes through today.
Doors are more forgiving, since most residential smart locks are battery powered and retrofit onto a standard bore. What you cannot retrofit cheaply is a door position sensor in a solid door, or power to a door in the middle of a stone wall. Decide those before the finish carpenter arrives. The wider list is in our pre wire checklist.
How many credentials is too many?
However many you can name from memory. Codes grow quietly: builder, housekeeper, dog walker, a contractor from three years ago. If nobody can list them, nobody revokes them. Give every credential a name rather than a number, put an expiry on temporary access the moment it is issued, and read the list out loud twice a year.
Frequently asked questions
Is a smart lock less secure than a normal deadbolt?
The bolt and the strike do the security work and those are mechanical on both. What changes is the attack surface, since a smart lock adds a wireless path and a set of codes. Fit a good grade deadbolt, reinforce the strike into the framing, and manage the codes.
What happens when the batteries die?
Nothing sudden. Locks warn for weeks at falling battery level, and the bolt holds position when they finally go. Keep a mechanical key off the property.
Can I put a keypad deadbolt on my front door?
Yes, provided the inside face opens without a key, special knowledge or effort, per the egress requirement above. A keypad outside with a thumbturn inside is fine. A keypad on both faces is not.
Does my existing gate meet UL 325?
Look at what protects each entrapment zone. If it is the operator's own force sensing plus one photo eye, that is probably short of the two independent means the standard sets out. A gate installer can confirm what is fitted and what type each device is.
Planning entry for a Los Angeles property
Ermine designs and installs lighting, shading, networks, cameras and access control on the Los Angeles Westside, and pre wires new builds before the walls close. Call (888) 818 9996 or use the contact page at erminehub.com.