Locksmith Permits, Codes & Inspections in CA: What You Need to Know

Locksmith Permits, Codes & Inspections in CA: What You Need to Know

Installing a high-security deadbolt on a San Francisco multi-unit building’s primary egress door without checking fire-code compliance can result in a mandatory re-installation order from the city, at the owner’s expense. We see this happen regularly: a property manager upgrades hardware on a Marina District apartment building, only to discover the new lock requires a thumbturn on the inside that the previous hardware didn’t have. The city inspector flags it during a routine fire-safety review. The owner pays twice: once for the initial install, again for the correction. This guide walks through exactly which California lock installations require permits, which are exempt, and how San Francisco’s fire and ADA codes change what hardware you can legally install. For related reading, see our Locksmith Warning Signs: A San Francisco Homeowner’s Reference Guide. By the end, you’ll know how to avoid the re-installation trap and what documentation your insurer expects.

Call (833) 589-8078

Quick Answer

Most single-family residential lock changes in California require no permit. A permit is typically required when lock hardware alters a fire-rated door assembly, changes egress on a multi-unit or commercial building, or modifies hardware on an ADA-governed entry. The locksmith doing the work must hold a BSIS license issued by the California Bureau of Security and Investigative Services. Permits are issued by the local building department, and in San Francisco, the Department of Building Inspection and SFFD both have jurisdiction over specific hardware changes.

Table of Contents

• Which California Lock Installations Require a Permit
• Which Lock Installations Are Exempt From Permits
• San Francisco Fire & Egress Codes for Multi-Unit Buildings
• ADA Latch & Lever Compliance in California
• What BSIS Licensing Means and Why It Matters
• How to Document Lock Work for Insurance Compliance
• Common Mistakes to Avoid
• When to Call a Professional

Which California Lock Installations Require a Permit

California building codes treat door hardware as part of the fire-rated assembly, not as a standalone fixture. That distinction drives most permit requirements. When you alter hardware on a fire-rated door, you’re technically modifying a life-safety component, and that triggers review. Here’s the breakdown by property type.

Residential single-family homes: Rekeying, deadbolt replacement, and most handle-set changes do not require a permit in any California jurisdiction we work in, including San Francisco. The door’s structural rating isn’t typically in play. One exception: if you’re converting a door that’s part of a required egress path from the garage into the living space, that door’s hardware may fall under the California Residential Code sections dealing with egress from sleeping rooms.

Commercial properties: Any lock change on a fire-rated door assembly requires review. This includes offices, retail spaces, restaurants, and warehouses. If the door has a fire label, you cannot alter its hardware without either a permit or documentation that the new hardware matches the fire rating of the original. In San Francisco, the Department of Building Inspection requires a permit for hardware changes on fire-rated doors in commercial occupancies. The San Francisco Fire Department adds a second layer: egress doors must remain operable from the inside without special knowledge, key, or tool.

Mixed-use buildings: These are where we see the most confusion in San Francisco. A mixed-use building with retail on the ground floor and apartments above has two code regimes stacked. The residential units follow residential code; the ground-floor commercial space follows commercial fire code. A lock change on the commercial entry needs permit review. A rekey on the upstairs unit does not. But the building’s shared front entry door falls under commercial egress requirements, because it serves occupancy of both types.

Which Lock Installations Are Exempt From Permits

The exemptions matter as much as the requirements. Most of what a San Francisco homeowner or renter needs falls into the exempt category, and we want that to be clear.

Exempt in virtually all California jurisdictions:

• Rekeying existing locks without changing hardware. This is a key-and-pin change only, and no permit applies anywhere in the state.
• Replacing a standard deadbolt or knob on a single-family home with a comparable unit. Like-for-like swaps on non-fire-rated doors are exempt.
• Adding a secondary lock, like a chain guard or surface bolt, to a residential door where egress rules don’t apply.
• Installing a new key on an existing lock cylinder. Rekeying is invisible to code compliance because nothing about the door changes.
• Replacing a car key or programming a transponder. Vehicle locks have no building-code dimension at all.

San Francisco follows this pattern. We’ve rekeyed hundreds of residential units in neighborhoods like Noe Valley, the Richmond, and Bernal Heights without a permit ever being required for the rekey itself. The door stayed the same. The lock stayed the same. Only the key changed.

The distinction is worth stating plainly: permits respond to hardware changes, not key changes. If you’re changing pins, you’re exempt. If you’re changing the lock body, hinges, strike plate backing, or door slab, you may need review.

San Francisco Fire & Egress Codes for Multi-Unit Buildings

San Francisco has fire-code DNA unlike almost any other California city. Dense Victorian housing stock, narrow corridors, shared stairways, and buildings from the 1890s sitting next to new construction all create a regulatory patchwork. The San Francisco Fire Department enforces egress requirements that supersede generic California standards in specific ways.

The core SFFD rule: every door in a path of egress must be openable from the inside by a single motion, without a key, without special knowledge, and without more than 15 pounds of force. That’s not a suggestion. It’s a fire-safety line drawn in the wake of the 1906 earthquake and maintained rigorously since.

For multi-unit building entries, this creates a specific hardware profile. Any deadbolt or lock on an egress door must have an interior thumbturn, not a keyed cylinder on both sides. A double-cylinder deadbolt on a shared entry door in San Francisco can get the owner a correction notice from SFFD. The same hardware on a single-family home is legal, but the moment the door serves multiple units, the thumbturn rule applies.

SFFD also requires that panic hardware on assembly occupancies release with no more than 15 pounds of force. When we replace hardware on buildings with three or more units in neighborhoods like the Mission or Upper Haight, we coordinate with owners about what SFFD’s last inspection flagged. Many older San Francisco buildings have accumulated non-compliant hardware over decades of ad-hoc repairs.

One practical example: a landlord in the Sunset District replaced a broken entry lockset with a high-security deadbolt that keyed from both sides. The goal was security. The result was a fire-safety correction from SFFD within two months. The re-installation cost more than the original job. That’s the avoidable cost this guide exists to prevent.

ADA Latch & Lever Compliance in California

The Americans with Disabilities Act and California’s Unruh Civil Rights Act both apply to lock hardware on commercial and mixed-use properties. California is stricter than federal ADA on some points, and San Francisco’s Department of Building Inspection enforces state standards aggressively during commercial inspections.

The core ADA hardware rule: door hardware on accessible routes must be operable with one hand, without tight grasping, pinching, or twisting of the wrist, and with no more than 5 pounds of force. That rule excludes round knobs on commercial entries. It requires lever handles or push-type hardware.

For a commercial property owner in San Francisco, this means a round-knob lockset on a storefront entry is a code violation waiting for an inspection to find. We’ve replaced knob hardware on commercial entries in the Financial District and South of Market where the previous hardware predated the current enforcement cycle. The property managers often didn’t know they were out of compliance until a tenant mentioned an ADA concern or an inspector flagged it.

ADA compliance also touches latch-throw distance, lock height, and the space around the door. Locks must sit between 34 and 48 inches from the floor. The door must have adequate clear floor space on both sides. When Citadel works on commercial rekeying projects in San Francisco, we check these dimensions as part of the job, not as an afterthought.

Multi-unit residential buildings have a partial ADA obligation. The common entries and any leasing office must comply. Individual residential units are generally exempt, though California’s Fair Employment and Housing Act adds protections for tenants who request reasonable modifications. We’ve seen property owners in Russian Hill work with tenants on lever-handle retrofits that satisfied both parties without triggering a full ADA review.

What BSIS Licensing Means and Why It Matters

California is one of the most strictly regulated states for locksmith work, and the credential that matters is the BSIS license. BSIS stands for the Bureau of Security and Investigative Services, a division of the California Department of Consumer Affairs. Any person performing locksmith services for compensation in California must hold a BSIS locksmith company license, and individual technicians must be registered with the bureau.

This is not a general contractor’s license. A GC license allows a contractor to build a building. It does not authorize locksmith work. We regularly encounter property managers in San Francisco who assume their contractor can handle lock changes as part of a renovation. The contractor often can’t legally do it, and if the hardware change runs into fire-code or ADA issues, the contractor’s lack of locksmith-specific training becomes a liability.

The BSIS licensing process requires a criminal background check, and the bureau maintains a public database where any consumer can verify a locksmith’s license status. That database is the single most underused consumer-protection tool in California locksmith work. We tell every customer: check the license before you hand over a key. The BSIS website takes two minutes.

Here’s the step-by-step we recommend for verifying any locksmith in California, including us:

1. Go to the BSIS license lookup page on the California Department of Consumer Affairs website.
2. Enter the company name or license number (every legitimate locksmith will have both on hand).
3. Confirm the license is active, not expired or suspended.
4. Check that the individual technician’s registration matches the company on file.
5. If anything doesn’t match, do not proceed with the job.

This matters more in San Francisco than almost anywhere else. The city’s density attracts out-of-state operators doing unlicensed lock work, particularly on emergency lockout calls where customers are under pressure. Our Emergency Locksmith in Mountain View service exists precisely because we’ve seen what happens when unlicensed operators take those calls. The BSIS number is the difference between a licensed professional and a person with a drill.

How to Document Lock Work for Insurance Compliance

Insurance companies in California don’t ask for much after a standard residential rekey. They ask for a lot after a break-in claim, a high-value property policy renewal, or a commercial liability event. What they ask for is documentation that the lock work was done correctly, by a licensed professional, with hardware appropriate to the risk profile.

What insurers commonly require in California:

• Service invoice with the locksmith’s name and license number. The BSIS number must appear on the invoice. An insurer verifying a claim will check it against the state database.
• Hardware specification sheet. For high-value residential properties and commercial buildings, insurers want to know the lock grade and brand. Schlage and Medeco hardware carries specific ANSI/BHMA grades that affect premium calculations. We provide spec sheets for every hardware installation we complete.
• Rekeying certificate. After a rekey, the document should state how many locks were rekeyed, how many keys were cut, and that no other keys exist for the new configuration. This matters after a divorce, tenant turnover, or lost key event.
• Photo documentation. Before and after photos of installed hardware are the simplest piece of evidence that the work happened and meets code. We take them on every install.

For high-value property coverage in San Francisco, where a Pacific Heights home or a Cow Hollow commercial space might carry a seven-figure policy, insurers often require a specific hardware standard. A Medeco deadbolt on the primary entry is a different underwriting profile than a Kwikset from the hardware aisle. We’ve walked property owners through exactly what their policy rider requires, then installed hardware that satisfies it. The documentation follows the same discipline: the invoice names the hardware, the grade, the BSIS license, and the installation date.

Here’s the practical recordkeeping sequence we recommend:

1. Keep the original service invoice in digital form, backed up off-site.
2. Store hardware spec sheets with the invoice, not in a separate folder.
3. Photograph the installed hardware from the edge of the door to show latch engagement.
4. Record the rekeying details: date, lock count, key count, and new key code.
5. Give a copy to your insurer when they ask, and keep the original for yourself.

This is the 20% that protects your premium and your claim. The 80% is choosing the right hardware in the first place.

Common Mistakes to Avoid

• Installing a double-cylinder deadbolt on a multi-unit entry. In San Francisco, this violates SFFD egress rules. The inside must have a thumbturn. We’ve seen correction notices issued for exactly this in apartment buildings across the Richmond and Sunset.
• Using round knobs on commercial doors. ADA compliance requires lever hardware or push-type operation. A round knob on a storefront in San Francisco is a violation waiting for a complaint or inspection.
• Hiring a general contractor for lock work. A GC license does not authorize locksmith services in California. The BSIS license is the specific credential. Using an unlicensed person voids most insurance documentation requirements.
• Replacing hardware without checking the fire rating. Fire-rated doors in California are tested as complete assemblies. Swapping the hardware changes the assembly and requires re-verification. Missing this step can void a fire rating and trigger a failed inspection.
• Failing to document rekeying after a tenant change. San Francisco has strong tenant protections. A landlord who cannot prove a rekey occurred between tenants faces disputes that could have been prevented with an invoice and a key log.
• Assumming all high-security locks are code-compliant. A Medeco deadbolt is pick-resistant, but if installed on an egress door without a thumbturn, it still fails fire code. Security and code compliance are separate requirements, and both must be met.
• Skipping the BSIS license check on an emergency call. The pressure of a lockout in the Mission at midnight makes anyone rush, but the two-minute license check protects against unlicensed operators who charge for work they shouldn’t be doing.

When to Call a Professional

Call a locksmith when the hardware change touches anything beyond a like-for-like swap on a single-family home. That includes any work on fire-rated doors, any commercial or mixed-use entry, anything where ADA compliance might apply, and any situation where your insurance policy requires documented professional installation. The cost of a professional is a fraction of the re-installation cost after a failed inspection. Citadel Locksmith home provides free estimates in San Francisco, and we’ll tell you on the phone whether your job needs a permit review or falls into the exempt category. We work with the brands serious about security, including Schlage, Medeco, and Abloy, which means we can align your hardware choice with both code requirements and your actual security needs. One call covers your car, your home, and your emergency. Call (833) 589-8078 for a free estimate.

Frequently Asked Questions

The Bottom Line

California distinguishes between key changes and hardware changes, and that single distinction drives almost every permit, code, and inspection question in locksmith work. Rekeying is exempt almost everywhere. Hardware changes on fire-rated doors, commercial entries, and multi-unit egress paths require review, and in San Francisco, SFFD enforces egress rules that make some residential hardware choices illegal on shared entries. ADA lever requirements apply to commercial and mixed-use properties statewide. The professional doing the work needs a BSIS license specifically, not a contractor’s license. Document everything for your insurer: license number, hardware grade, installation date, and photos. When you work with a locksmith who understands these requirements upfront, you avoid the re-installation order, the failed inspection, and the premium spike. Explore more guides & resources to stay informed. When you work with one who doesn’t, you find out at the worst possible moment.

Written by the team at Citadel Locksmith, serving San Francisco since 2011.