Lost Key Procedure: What to Do When a Key Goes Missing

A lost key procedure is the set of steps you follow the moment a key is reported missing: confirm it's really gone, find out what it opens and who held it last, decide whether to rekey, and record the outcome. Agree the steps before a key goes missing, so nobody has to improvise while a master key is out there somewhere.

Most teams don't have one. They have a moment of panic, a search of a few desk drawers, and then a quiet decision to "keep an eye out." This guide gives you the procedure itself, a lost key report you can copy, and a simple rule for the question everyone argues about: do we have to change the locks?

Why a lost key needs a written procedure

When a key goes missing, three things work against you.

• Time. The longer it takes to decide, the longer a lock stays open to whoever has the key. A procedure removes the debate.
• Embarrassment. The person who lost it wants to search a bit longer before admitting it. A clear, non-punitive reporting rule gets you the news on day one instead of day ten.
• Missing information. You can't decide on rekeying until you know what the key opens and who has held it. If that information lives in someone's head or a half-filled sign-out sheet, the decision gets made on a guess.

Your key control policy should already say that lost keys trigger an assessment. This article is the assessment, written out step by step.

The lost key procedure, step by step

Step 1: Report it the same day

Make the rule simple: anyone who can't find a key they're responsible for reports it the same working day, to one named role (facilities, the office manager, the site lead). No blame for reporting. The cost of a late report is almost always higher than the cost of the lost key.

Ask for four facts on the spot: which key, when they last had it for certain, where they've been since, and whether the key was on a ring with anything identifying (a tag with the address, a company fob, a building name).

Step 2: Search for a fixed window

Give the search a deadline. One to three working days is common for standard keys. For a master key or anything that opens a safe, server room or alarm panel, the window is hours, not days.

Check the obvious places in order: the holder's car, bag and desk; the last site they worked at; colleagues who might have been handed it; the key box itself, in case it was returned to the wrong hook. Many "lost" keys turn out to be with a colleague, which is why the next step matters.

Step 3: Check the key's history

Before you declare anything lost, look at the record. Who has held this key, when did it last come back, and is it actually recorded as out with the person who reported it? A good log answers this in seconds. If your key log book or system shows the key was handed back last Thursday, you have a different problem: a key that was returned but never made it to the hook.

Step 4: Find out what the key opens

List every door, cabinet and gate the key works on. For a master key, that can be a whole building. Note whether any of those locks protect people (residential units, changing rooms), high-value stock, or sensitive information. This list drives the rekeying decision.

Step 5: Declare it lost and decide on rekeying

When the search window closes, declare the key lost. Don't leave it in "probably around somewhere" status. Then apply the rekeying rule you agreed in advance (see the table below) and act on it.

Step 6: Record everything and close it out

Write down what was lost, when, the decision you made, who approved it, and what it cost. Retire the lost key in your register so it can never be handed out again on paper. If you rekeyed, register the new keys and record who now holds them.

When to rekey after a lost key

The argument about rekeying is the slowest part of most incidents. Settle it now with a table like this one.

Key type	Example	Rule
Master or grand master	Opens every door on a floor or building	Always rekey the affected locks
Restricted	Safe, server room, pharmacy cabinet, cash room	Always rekey
Standard with an identifying tag	Office key on a ring labelled with the address	Rekey, the key can be matched to the door
Standard, untagged, lost somewhere low-risk	Storeroom key dropped on a site visit	Manager's documented decision
Low-risk	Locker, filing cabinet, bike shed	Replace the key, note it, no rekey
Any key, theft suspected or holder left on bad terms	Key not returned by a former employee	Always rekey

Two rules make this table work. First, "restricted means automatic rekey" is not up for debate during an incident. Second, any middle-ground decision gets written down with a name next to it. If the lock is later opened by someone who shouldn't have had access, you'll want to show that the decision was made deliberately, not forgotten.

Lost key report template

Copy this into a document or form. One per incident.

Lost key report

Key: [ID and plain-language name, e.g. MK-02, Master, Building B, 2nd floor]

Reported by: [name, role, phone]

Reported to: [name, role] Date and time reported: [ ]

Last known for certain: [date, time, place]

Was the key tagged or identifiable? Yes / No. Details: [ ]

Locks this key opens: [list]

Custody history checked: Yes / No. Last recorded holder: [ ] Last recorded return: [ ]

Search window ends: [date] Outcome: Found / Declared lost

Rekeying decision: Rekey / Replace only / No action. Reason: [ ]

Approved by: [name] Cost: [locksmith, replacement keys]

Register updated: Old key retired [ ] New keys registered [ ] New holders recorded [ ]

Keep completed reports with your key records. They are the first thing an insurer or auditor will ask for after an incident, and they make your next key audit much easier to reconcile.

Who pays for a lost key?

This is a policy question, not a legal one, and the answer varies by organization. Common approaches:

• The organization absorbs it for genuine accidents by employees. This keeps reporting fast, which is worth more than the cost of a locksmith.
• A fixed replacement charge for low-risk keys, written into the key agreement people sign when they first receive keys.
• The contractor's company pays when an external holder loses a key, agreed in the contract before any keys are issued. Our guide to contractor key management covers how to set that up.

Whatever you choose, write it down before it happens. Deciding who pays after the fact turns a lock problem into a people problem.

How to lose fewer keys in the first place

A procedure handles the incident. A few habits reduce how often you need it.

• Due dates on every handout. A key with a due date gets noticed when it's late. A key without one can be missing for months before anyone looks.
• No person-to-person handoffs. Keys go back to the checkout point between holders, so the record always names the person who really has it.
• Untagged keys. A ring labelled with the street address turns a lost key into an open door. Use an ID that means something to you and nothing to a stranger.
• Collect keys before people leave. Departing staff are a common source of keys that are never returned. The employee offboarding checklist makes this part of every last day.

Where guardable fits in the procedure

The slowest step in any lost key procedure is step 3: finding out who actually had the key. On paper, that means flipping through months of sheets. In guardable, every key is registered as a unique item with its own history.

• Who held it, and when. Every handout and return is recorded with who handed it out, who took it and the exact time. You see the key's full custody history on one page instead of reconstructing it.
• What's out right now. Each handout is an order against a named client (an employee, a contractor, a company) with a planned return date. Anything past that date flags itself as overdue on the dashboard, the orders list and the client's page, often before anyone realizes the key is missing.
• Reminders before keys go missing. Overdue reminder emails can go out to the holder, so late keys get chased while the holder still remembers where they put them.
• One login per person. Pricing is per workspace with unlimited users, so everyone who hands keys out has their own account and the history shows who recorded each step.

Frequently asked questions

What should I do if an employee loses a key?

Have them report it the same day, search for a short fixed window, check the key's custody history and list every lock it opens. Then declare it lost and apply your pre-agreed rekeying rule. Record the decision, the approver and the cost, and retire the key in your register.

Do I have to change the locks if a key is lost?

Always rekey for master keys, restricted keys and any key that was tagged with an address or not returned by a former employee. For standard keys, a responsible manager makes a documented risk decision. Low-risk keys like lockers usually only need replacing.

How long should we search before declaring a key lost?

One to three working days is common for standard keys. For masters and restricted keys, make it hours. A fixed window matters more than its exact length, because it stops a missing key from sitting in limbo.

What should a lost key report include?

The key ID and name, who reported it and when, the last time it was definitely seen, whether it was identifiable, every lock it opens, its custody history, the rekeying decision with the approver, the cost, and confirmation that the register was updated.

---

Know who had the key before you call the locksmith. Start tracking your keys in guardable for free: a permanent history per key, overdue keys flagged automatically, up to 50 items, unlimited orders and unlimited users. No credit card, no time limit.