Smart locks and keyless access: what you actually need

More and more guests arrive outside office hours and expect to get in without waiting for anyone. That leaves a property with a choice: keep handing over keys in person, or move to digital access. There are three routes — keybox, keypad lock or connected smart lock — and they are not equivalent. This guide covers what keyless access really requires, the one risk worth avoiding, and the duties that stay with you either way.

Keybox, keypad lock or connected smart lock

Before buying hardware, it helps to know what each option actually solves.

• Keybox: a combination box holding the physical key. Cheap and works anywhere, but there is still only one key and the combination has to be changed by hand for every guest.
• Keypad lock: the guest types a PIN on the door. No keys floating around, no app to install, and it works even if the guest has no signal.
• Connected smart lock: opens from the smartphone, and access can be granted and revoked remotely, without going on site.

In practice many properties combine them: a smart lock on the room door, with a PIN or keybox as the fallback.

What it actually takes to work

This is where most disappointments come from: a “smart” lock is not automatically reachable from the internet.

• A network link: many locks only speak Bluetooth, meaning a few metres of range. To open them remotely or connect them to a property system you need a gateway (a small WiFi bridge) or a lock that is already connected.
• WiFi coverage near the door: the bridge has to sit within a few metres of the lock. In corridors with thick walls or in basements, test it before you commit.
• Batteries: almost every lock runs on them. You need a replacement reminder and an emergency mechanical key within reach.
• A tested fallback: define how authorised guests and staff can gain access if the connection, power or main device fails.

The number one risk: codes that stay valid

The most common problem with self-access is not technical, it is organisational: the code given to a guest keeps working after they leave. If it has been the same for months, dozens of people who are no longer on the property know it. The rule is simple: one code per stay, switching itself off at check-out. If deactivation is manual, sooner or later someone forgets — and at that point it stops being about convenience and becomes about safety and your responsibility towards the other guests.

What digital access does not remove

Opening the door from a phone changes nothing about Italian obligations. They stay the same:

• Identifying guests before granting access: documents must be collected and checked even if nobody shows up at a desk.
• Reporting to the Police through Alloggiati Web within the required deadline.
• Tourist tax to collect, pay to the Municipality and declare.
• CIN and the property’s other compliance duties.

Before authorising access, complete the identification and other checks required for your procedure. Automated access rules depend on compatible hardware and configuration; collecting data or receiving payment does not by itself complete identity verification or reporting.

HotelOnlineAI for your guest welcome

HotelOnlineAI includes digital access options to assess with compatible devices and the property’s requirements. During the pilot program we can review your setup and agree on the relevant support. Access choices, identification procedures and emergency arrangements need to be defined for each property.

In short

Assess keyless access against the property’s real process: guest identification, authorised access, code expiry, staff checks and an emergency alternative. Verify hardware compatibility and test the procedure before use; digital access does not remove technical or organisational risks.