Are smart locks safe?
A well-chosen smart lock can be as safe as the deadbolt it replaces, but it adds risks a key lock does not have: a weak account password, an unpatched lock, forgotten guest codes and dead batteries. Pick a lock with a physical key backup, use a long unique password with two-step sign-in, keep the firmware updated and prune access codes.
Free to ask. Local shops send quotes, and you pay only when you book one.
By Kasra Taheri, Founder, LoclisPublished
Researched and drafted with AI, then checked claim by claim against the sources listed below before it was published. Prices and rules change; the dates beside each source say when it was last checked.
Step by step
Read when to stop and call a pro, further down this page, before you start.
Step 1: Choose a lock with a physical backup
Pick a lock that also has a key or a jumpstart port, so a dead battery or a dead network does not lock you out.[1]
Step 2: Make the account password long and unique
Use a different password of at least 16 characters for the lock's app account, ideally from a password manager.[3]
Step 3: Turn on two-step sign-in
Turn on multifactor authentication for the lock's account if the app offers it.[4]
Step 4: Turn on updates
Accept firmware upgrades and turn on automatic updates in the app's settings.[5]
Step 5: Replace the default codes
Create your own access codes and keep the default codes somewhere safe.[2]
Step 6: Give each person their own code
Give guests and workers a separate code so you can delete one without changing the rest.
Step 7: Review codes and users regularly
Delete codes for people who no longer need access, and review who has the app.
Step 8: Reset a used lock
If a lock was installed on another door or in a previous home, perform a factory default reset before you reuse it.[2]
Step 9: Watch the battery alerts
Replace the batteries when the low-battery alert comes.[1]
The physical lock
A smart lock is still a deadbolt, so start with the hardware. Schlage says each of its smart locks has received top ratings from BHMA, the hardware industry's testing body, for security, durability and finish.[1] Ask any brand which grade a specific model holds, and look for the grade on the box. Whatever you buy, install the reinforcement plate and strike that come in the box, and make sure the door and frame are solid, because the best lock fails in a weak frame.
Pick a lock with a way in when the electronics fail. Schlage says its smart locks give low-battery alerts before the batteries die, and that its electronic locks also offer a physical key or a jumpstart port as backup access.[1] A lock with no key and no backup power option can leave you outside.
The account and the network
Smart locks can be attacked remotely, and people know it: NIST's 2020 report on smart home privacy and security quotes a participant with a smart door lock who worried that someone who hacked the system could easily open the front door.[6] Three habits cover most of the risk.
A strong, unique password. CISA says: "Using an easy-to-guess password is like locking the door but leaving the key in the lock."[3] A strong password follows all three of these tips: at least 16 characters, random, and unique to each account.[3] A password manager makes that practical.
Two-step sign-in. CISA says MFA increases security—it can make us significantly safer online.[4] Even if an unauthorized user steals your password, they won’t be able to meet the second step requirement to access your accounts.[4] If your lock's app offers two-step sign-in, turn it on.
Updates. Be sure to accept any available firmware upgrades.[2] CISA explains why: many software updates are created to fix security risks,[5] and it advises you to turn on the automatic updates in the device’s or application’s security settings.[5]
Codes and access
Most smart lock trouble is not hacking but forgotten access. Give each person their own code so you can delete one without changing the rest, and clear out guest and contractor codes when the job is over. Keep the default codes: Schlage's manual says not to remove the code stickers from the back of the lock,[2] and that a lock previously installed on another door needs a factory default reset first.[2] Do the same when you buy a used lock or move out of a house.
Be careful with who has the app. Anyone with an account that can unlock the door can do it from anywhere, so remove old household members and shared accounts.
Who installs it matters too
Installing locks or deadbolts, mechanical or electronic locking devices, for the general public is listed as locksmith services in Virginia law.[7] If you hire someone, ask who will do the work and what they will do with the codes and the app account. The account should be yours, set up with your email and your password, not theirs. If you want to do it yourself, read how to install a smart lock, and for the price, how much a smart lock costs installed in Virginia.
Stop and call a pro if
- You think someone has used your lock without permission. Change the password, remove all codes and users and call the manufacturer. For a break-in, call 911.
- The lock locks or unlocks by itself, or the bolt will not extend smoothly. Check alignment and batteries, then call a locksmith.
- The door or frame is damaged around the lock, which weakens any lock you fit.
- You are locked out and the key and backup do not work. Call a locksmith rather than forcing the door.
- The lock needs wiring you are not comfortable with. Hire a licensed electrician.
Getting help in Virginia
Browse Security & Smart Home and see more smart home answers.
When you want a pro to fit or check a lock, describe the job once and local pros quote it.
Common questions
- Can a smart lock be hacked?
- Any connected device can be attacked, which is why NIST's 2020 smart home report records a user with a smart door lock worrying that someone who hacked the system could open the front door. Your best defences are a strong unique password, two-step sign-in and keeping the lock's firmware updated.
- What happens if the battery dies?
- Schlage says its smart locks give low-battery alerts before the batteries die, and that its electronic locks also offer a physical key or a jumpstart port as backup access. Replace batteries when the alert comes, and keep a key somewhere other than inside the house.
- What if I lose my phone?
- Use a keypad code or key to get in, then sign in to the lock's account from another device and remove the lost phone. Two-step sign-in on the account helps stop someone else from using it.
- Is a smart lock more secure than a key lock?
- It depends on the lock. Physical strength is rated by BHMA grades, which Schlage cites for its smart locks, while the electronic side depends on your password, updates and code habits. A well-installed, well-maintained smart lock is at least as safe as a good deadbolt.
- Should I hire someone to install it?
- Only if the door needs work or you would rather not. Installing locks and electronic locking devices for the public is listed as locksmith services in Virginia law, so ask any installer whether they are registered.
Sources
- [1] Smart Locks, Smart Deadbolts & Smart Levers, Schlage, an Allegion brand. Checked October 27, 2026.
- [2] Schlage Sense Installation Instructions (P516-990), Schlage, an Allegion brand. Checked October 27, 2026.
- [3] Use Strong Passwords, Cybersecurity and Infrastructure Security Agency (CISA). Checked October 27, 2026.
- [4] Turn On MFA, Cybersecurity and Infrastructure Security Agency (CISA). Checked October 27, 2026.
- [5] Update Software, Cybersecurity and Infrastructure Security Agency (CISA). Checked October 27, 2026.
- [6] User Perceptions of Smart Home Privacy and Security (NISTIR 8330), National Institute of Standards and Technology. Checked October 27, 2026.
- [7] Va. Code § 9.1-138, Definitions (private security services), Code of Virginia, Virginia General Assembly. Checked October 27, 2026.
Want a pro to handle it?
Describe the job once. Licensed local businesses send quotes, and you pay only when you book one.
Get a quote from a local pro