Renters

Key lockbox or keypad lock for a short-term rental?

A lockbox hands over a key that can be copied; a keypad hands over a code you can kill. Which one you may actually use is often decided by the building.

8 min read Updated August 2026

Keypad deadbolt on a rental cottage front door with a wall-mounted key safe beside the frame

A guest lands at 11:40pm, the host is forty minutes away, and something at the door has to let a stranger in without a person standing behind it. Two devices do that job. One is a steel box on a railing with a key inside it. The other is a keypad on the door itself. Hosts argue about which is better as though it were a budget question, when in most buildings the answer is settled by things that have nothing to do with price.

What each one actually is

A key lockbox is a zinc or steel shell holding a physical key, opened by a four-wheel dial or a set of pushbuttons. It hangs from a railing by a shackle, screws flat to a wall, or clamps around the door handle. No batteries, no radio, no account, and nothing to update.

A keypad lock puts the credential on the door. The guest types a number and the bolt moves. Some models are offline, programmed by standing at the door with the cover off, and some connect by Wi-Fi or a bridge so codes can be issued and killed from a phone anywhere.

The real difference is not cost. It is whether a copyable physical object leaves your control at every changeover.

What a lockbox is bad at

The key can be copied. Most residential keys are duplicated at a hardware store counter in a few minutes for a couple of dollars, and unless the cylinder uses a restricted keyway there is no way to prevent it. A guest who wanted a copy has had the key in their pocket for four days. Revoking that access is not a code change, it is a rekey.

The code has the same problem in a milder form. It goes out by message, sits in that thread permanently, and changing it means physically walking to the box and re-setting the wheels. Hosts who live an hour away, or who share the property with a cleaner and a co-host, quietly stop bothering after a while, which is how a code ends up unchanged for a season.

Then there is the box itself. Cheap dial mechanisms can be worked open by someone patient, and a shackle model hanging on a rail can be attacked with the rail as leverage. Freezing rain seizes the wheels. None of that rules a lockbox out, but it is a reason to buy a heavier one and mount it to something solid.

What a keypad lock is bad at

Batteries, first and mostly. It is the one failure a remote host cannot fix, and the warning tends to arrive in the wrong place: in an app nobody opened, or on a display a guest saw and did not mention. Change them on a calendar rather than on a warning, and do it at a changeover rather than mid-stay.

Wear is the quieter one. A keypad used by strangers several times a week ends up with four buttons visibly cleaner than the rest, which reduces a four-digit code to a small number of guesses. Vary the digits between codes so the wear spreads, and wipe the pad at turnover.

Cold and driven rain reach the pad before they reach anything else, and the symptoms split between a pad that does nothing at all and a pad that lights up and rejects the code. That distinction is worth having straight before you try to talk a guest through it by phone, and it is covered in the guide to a keypad lock that has stopped working.

Black combination key lockbox hanging from a weathered wooden porch railing above a coiled garden hose

Where the choice is made for you

For a large share of hosts this is not a comparison at all, because one of the two options is not permitted.

The building or the HOA

Condo boards and homeowner associations frequently ban boxes hung on railings, gates, fences and light poles, all of which are common property rather than yours. Fire departments object to anything clamped to a gas riser or a standpipe. Some buildings go the other way and require one specific approved box, or run keys through a front desk instead. Ask the board in writing before you hang anything, and expect the rule to be about the common area rather than your door.

The city

Several US cities regulate short-term rentals in ways that reach the front step, including restrictions on visible lockboxes attached to street furniture and public poles, which in some places get cut off. These ordinances change frequently, so check the current rule for your own city rather than a summary written a few years ago.

When the host is also a tenant

If you host from a unit you rent, swapping the deadbolt is a lease question before it is a hardware question, and the lease usually has more to say about it than you expect. What a typical clause restricts, and how to ask, is set out in the article on changing the locks in an apartment. A lockbox often survives that conversation where a new deadbolt does not, and a retrofit that leaves the existing cylinder and keys in place is the usual middle path.

The building door nobody mentions

A keypad solves the last door. If the guest also needs a lobby key, a fob, a garage remote, an elevator card or a mail key, something physical still has to change hands, and no amount of code scheduling helps. That is the case where a box earns its place even in a building that would rather not have one, and it is worth asking whether a lobby fob can be held at a desk instead.

Fobs are usually building property, and replacing a lost one is a charge that lands on somebody, so say so in the house rules.

What each one costs you over a year

Consumer combination lockboxes are commonly sold somewhere in the region of $20 to $60, with heavier wall-mounted key safes above that. Keypad deadbolts start around the price of a decent mechanical deadbolt for a basic offline model and run to several hundred dollars for a connected one. Both ranges move with the market and with the season, so treat them as orders of magnitude and check current pricing yourself.

The recurring cost is the part hosts underestimate. A lockbox means a trip to the property at every changeover if you rotate the code honestly, so four bookings a month is four trips. A keypad is one entry in an app per booking, batteries once or twice a year, and a separate code for the cleaner whose use you can actually see. That last point decides it for hosts running more than one unit.

A traveler's hand pressing the lit keypad of a door lock at night, suitcase on the corridor carpet

Running one as primary and the other as backup

Experienced hosts mostly refuse the question. The keypad is the primary method, published in the check-in message with a code that expires with the booking, and a physical key sits in a box as the documented fallback for the night the lock goes quiet.

A few habits make that arrangement work rather than double the risk. Keep the backup box out of sight from the street and away from the door it opens. Never put the backup code in the listing or the automated arrival message; send it in the message thread on the night it is needed, then change it. Test the fallback once a quarter by opening the box and turning the key in the lock, because an untested spare is the classic failure at midnight.

If the keypad is going to be the primary, the specification matters more than the brand: how many codes it holds, whether codes can be scheduled to start and expire on their own, and what it does when the internet drops mid-stay. Those criteria are set out in the checklist for what a short-term rental lock has to do that a home lock does not.

Common questions

Are lockboxes safe for a short-term rental?

The box is rarely the weak point. A heavy one mounted to solid wall is difficult enough to be uninteresting. The exposure is the key inside it, which can be copied during a stay and cannot be revoked afterwards without rekeying the cylinder. Judge the risk on that, not on the strength of the shell.

Do I have to change the code after every guest?

With a keypad, most locks let a code expire on its own at checkout, so there is nothing to remember. With a lockbox it is a manual job, and the honest minimum is to change it after any stay where the code went out in a message or was overheard on the step.

What happens if the lock battery dies while a guest is out?

They stand at a door that does nothing, usually late and usually in the rain. This is what the backup key is for, and why the fallback belongs in writing before it is needed rather than improvised over the phone. Most locks keep a mechanical keyway on the outside face, and a few offer external contacts that take a 9V battery long enough to open the door.

Does a keypad lock still work if the Wi-Fi goes down?

Codes live on the lock, so a guest with a working code gets in whether the router is up or not. What stops is everything you do remotely: issuing a new code, expiring an old one, seeing who came in and when. A host away from the property should plan for that gap rather than assume the app is always available.

The short version

Ask the building and the city first, because plenty of hosts have no choice to make. A lockbox is cheap, needs no power and works in an outage, but it hands out a copyable key and costs you a trip every time you rotate the code. A keypad revokes access instantly and gives the cleaner their own code, at the price of batteries and a lock you may not be allowed to fit. If the guest needs a lobby fob as well, a box is going on the wall regardless. Most hosts settle on a keypad as the primary method with a key in a box as the tested backup, and never publish the backup code in advance.