Smart locks and keyless access: what you actually need

More and more guests arrive outside office hours and expect to get in without waiting for anyone. That leaves a property with a choice: keep handing over keys in person, or move to digital access. There are three routes — keybox, keypad lock or connected smart lock — and they are not equivalent. This guide covers what keyless access really requires, the one risk worth avoiding, and the duties that stay with you either way.

Keybox, keypad lock or connected smart lock

Before buying hardware, it helps to know what each option actually solves.

• Keybox: a combination box holding the physical key. Cheap and works anywhere, but there is still only one key and the combination has to be changed by hand for every guest.
• Keypad lock: the guest types a PIN on the door. No keys floating around, no app to install, and it works even if the guest has no signal.
• Connected smart lock: opens from the smartphone, and access can be granted and revoked remotely, without going on site.

In practice many properties combine them: a smart lock on the room door, with a PIN or keybox as the fallback.

What it actually takes to work

This is where most disappointments come from: a “smart” lock is not automatically reachable from the internet.

• A network link: many locks only speak Bluetooth, meaning a few metres of range. To open them remotely or connect them to a property system you need a gateway (a small WiFi bridge) or a lock that is already connected.
• WiFi coverage near the door: the bridge has to sit within a few metres of the lock. In corridors with thick walls or in basements, test it before you commit.
• Batteries: almost every lock runs on them. You need a replacement reminder and an emergency mechanical key within reach.
• A fallback that always works: a door PIN or a keybox beats any integration on the day the connection is down.

The number one risk: codes that stay valid

The most common problem with self-access is not technical, it is organisational: the code given to a guest keeps working after they leave. If it has been the same for months, dozens of people who are no longer on the property know it. The rule is simple: one code per stay, switching itself off at check-out. If deactivation is manual, sooner or later someone forgets — and at that point it stops being about convenience and becomes about safety and your responsibility towards the other guests.

What digital access does not remove

Opening the door from a phone changes nothing about Italian obligations. They stay the same:

• Identifying guests before granting access: documents must be collected and checked even if nobody shows up at a desk.
• Reporting to the Police through Alloggiati Web within the required deadline.
• Tourist tax to collect, pay to the Municipality and declare.
• CIN and the property’s other compliance duties.

The right order is always the same: data first, access second. Access that switches itself on only after online check-in and payment turns that rule into something automatic, rather than something to remember.

How HotelOnlineAI handles it

In our system the guest opens the room and the main entrance with one tap from their own area, or with a PIN if the door has a keypad lock: you do not need a smart lock to start. Access switches itself on only once the stay is paid and has started, and switches off automatically at check-out — nothing to deactivate by hand. Every opening is logged, so you know who opened what and when. The property sets it all up from the back office and it works with the main smart locks on the market.

In short

Keyless access pays off when it removes work without adding risk: a code valid only for the stay, automatic switch-off on departure, a fallback that works without a connection, and guest data collected before arrival rather than after. Start from the flow — online check-in, payment, access — and choose the hardware afterwards: that order is what separates a property that saves time from one that spends it chasing codes.