What a hotel lock is supposed to do today
Twenty years ago a hotel lock was a mechanical cylinder with a brass key. Ten years ago it was an electric hotel lock that read a magnetic strip card encoded at reception. Today, a hotel lock is expected to be a network-aware device that receives access decisions from the PMS in real time, supports multiple credential types, keeps an audit trail, and continues to work when the property's internet drops.
The hardware side is the easier half. The hard part is the integration layer - the software contract between the reservation system and the locks. That is where most "smart" lock projects fall apart.
Standalone hotel locks vs PMS-integrated locks
A standalone smart lock opens doors but does not know who is booked into which room. The owner provisions credentials by hand: enter the guest name, set the start date, set the end date, send the code. The PMS lives in a separate browser tab. When the booking changes, the lock does not change with it.
A PMS-integrated lock listens to the reservation as the source of truth. Booking assigned to room 204 from June 12 to June 15 means a credential exists for room 204 from June 12 to June 15 - and it is created and revoked automatically. The owner never touches the lock interface. The booking is the key.
What hotel pms lock integration should cover
- Automatic access creation when a reservation is assigned to a room.
- Automatic access revocation after checkout, cancellation, reassignment or unassignment.
- Real-time smart lock control for room doors, main entrances and common doors.
- Multiple credential types: QR, Apple Wallet, Google Wallet, NFC, and a mobile app for guests who prefer it.
- Separate guest access and staff access management, with different permissions.
- Audit trail of access events for compliance and incident review.
- Offline access so guests can still enter their room when the property's internet is down.
Risks of running a disconnected lock
A disconnected lock looks fine on day one. It starts to hurt as the property grows or as bookings get edited. The classic failure modes are: a cancelled guest still has a working credential because nobody revoked it; a moved booking opens the wrong room because the lock was provisioned manually; a "room change" is impossible to do without inconveniencing the guest because two separate credentials are needed.
A connected lock - one that listens to the PMS - removes all of these. The reservation is the contract. The lock obeys the reservation.
What to check before buying a hotel lock system
- Does the lock integrate with the PMS you actually use, or only with the lock vendor's own (much weaker) PMS?
- How fast is revocation? Seconds, minutes, or "next time the lock syncs"?
- Does it support offline access for the property's internet outages?
- What is the credential mix? QR, Wallet, NFC, mobile app? A single credential type is a single point of failure.
- Does it cover only room doors, or also the main entrance and common doors?
- Is there a clear audit log? Who entered which door at what time?
- How is the hardware powered? Battery-only locks are simpler to install but more demanding to maintain.
Common mistakes
- Buying locks first and PMS second. You end up locked to whatever the vendor's PMS supports.
- Treating the lock as "just hardware." The integration layer is at least half the value.
- Skipping the main entrance. If only room doors are smart, your night-time guests still cannot get into the building.
- No backup plan for connectivity outages. A lock that fails closed during an internet outage is unacceptable.
- Mixing lock brands across the same property in the hope of saving money. You inherit two separate access systems and double the support surface.
Image placeholder
/assets/blog/placeholders/orion-smart-lock-door-placeholder.webp