Why It Matters
Key exchange sounds simple — hand over the keys, done. In practice it's one of the most liability-prone moments in a tenancy. An undocumented handoff creates disputes about who had access, when, and whether locks were changed between tenants. Best practice ties key exchange directly to the move-in checklist at the start of a tenancy and to the security deposit return at the end. Every key issued should be numbered, logged, and signed for. Every key returned should be confirmed in writing before the deposit is processed. Landlords who skip this step often find themselves arguing about unauthorized key copies months later — or facing a tenant claim that they never received all promised keys on day one. For remote investors, smart locks have largely replaced physical key exchanges by eliminating the coordination problem entirely.
At a Glance
- What it is: The formal transfer and documentation of physical keys or access codes at tenancy start and end
- When it happens: Move-in day (landlord to tenant) and move-out day (tenant to landlord)
- What to document: Key count, type (door, mailbox, garage, common areas), tenant signature, and date
- Lock change requirement: Most states require a lock change or rekey between tenants — verify local law
- Smart lock alternative: Keypad codes or app-based access eliminate physical key logistics entirely
How It Works
At move-in, key exchange is part of the onboarding package. The landlord or property manager should prepare a key log before the tenant arrives: list every key being issued (front door, back door, mailbox, storage unit, garage), assign each a unique identifier if possible, and have the tenant sign to confirm receipt. This log should be attached to or referenced in the lease signing paperwork. Handing keys over before the lease is signed creates a gray area — the tenant has access but is not yet contractually bound. Issue keys only after the lease is executed, the first month's rent is collected, and the move-in checklist is completed.
At move-out, key return is a precondition for closing out the tenancy. Before processing the security deposit return, confirm that all issued keys have been returned. Compare the count against the original key log. If keys are missing, deduct replacement and rekey costs from the deposit — most states allow this, provided you have written documentation of what was originally issued. The tenant should sign a key return receipt, and you should note the date and condition of each key returned. Do not process the deposit until keys are in hand; once a deposit is returned, leverage to recover unreturned keys disappears.
Lock changes and rekeying sit between tenancies. Regardless of whether all keys were returned, professional key management practice is to rekey or replace locks between every tenancy. Some states (California, Texas, and others) require it by law. Even if all five keys came back, you cannot verify whether copies were made. A rekey costs $25–75 per lock — far less than the liability from a prior tenant retaining access. If you use smart locks, this step is replaced by a credential reset: delete the outgoing tenant's code and generate a new one for the incoming tenant before move-in day.
Real-World Example
Simone owns a four-unit building in Columbus, Ohio. When a tenant in Unit 2 gave notice, she pulled the original key log from move-in: three keys issued (front door, back door, mailbox), signed by the tenant on the lease date.
On move-out day, Simone met the tenant with a move-out checklist and key return form. The tenant returned two keys — the back door key was missing. Simone noted it on the return form, had the tenant sign acknowledging only two keys were returned, and deducted $45 for a rekey from the security deposit. She also scheduled a full lock replacement before the next tenant moved in, which she does as standard practice regardless of key count.
When she onboarded the new tenant two weeks later, she handed over three fresh keys, walked through the move-in checklist together, and had the tenant sign the key log before handing anything over. The whole exchange took twelve minutes and created a clean paper trail for both parties.
Pros & Cons
- Creates a documented paper trail that resolves disputes about access, missing keys, and deposit deductions
- Ties key issuance directly to lease execution — reduces unauthorized access before tenancy begins
- Key return forms give landlords written proof before processing the security deposit return
- Smart lock integration eliminates physical coordination, especially useful for remote investors managing properties from out of state
- Rekey requirement between tenants protects against unauthorized copies held by prior occupants
- Physical key handoffs require in-person scheduling, which adds friction for remote investors and non-local property managers
- Tenants who lose keys mid-tenancy create mid-lease key management issues that complicate the final count at move-out
- Rekey costs add up across a portfolio — a 10-unit building rekeyed annually at $50/lock runs $500/year in overhead
- Missing key documentation at move-in weakens the landlord's position in any move-out deposit dispute
- Smart lock systems require reliable Wi-Fi or cellular, and power outages or connectivity failures can create lockout scenarios
Watch Out
Never issue keys before the lease is signed and funds are cleared. A tenant who has keys but no executed lease can claim possession rights in some jurisdictions — creating an eviction situation instead of a simple no-show. The sequence must be: lease signed → first month and deposit collected → keys issued → move-in checklist completed. Skipping steps because a tenant seems trustworthy is one of the most common landlord mistakes.
Document every key copy, including those made mid-tenancy. If a tenant requests a duplicate key during the lease term, treat it the same as the original handoff: log it, have the tenant sign, and update the master count. A tenant who had one key at move-in but four copies at move-out has effectively reduced your rekey cost recovery to near zero — you'll be holding one returned key against a deposit deduction for three missing ones with no documentation that they were ever issued.
Verbal key exchanges are unenforceable. "I handed them the keys on Tuesday" is not a defense when a tenant claims they never received mailbox access or that locks were not changed from the prior tenant. Every exchange — move-in, move-out, mid-lease duplicate — needs a signed written record with the date, key count, and key type. If you are transitioning away from physical keys to smart locks, document the credential transfer the same way: a written log of which codes were deactivated and which were issued, signed and dated.
Ask an Investor
The Takeaway
Key exchange is not paperwork for its own sake — it is the physical and legal boundary between one tenancy and the next. A signed key log at move-in establishes what access was granted. A signed return form at move-out establishes what was recovered. Everything in between — rekeys, duplicate requests, mid-lease lock changes — follows the same documentation logic. Landlords who treat this as informal courtesy eventually face the deposit dispute, the unauthorized-access claim, or the eviction complexity that comes from an undocumented handoff. Build a simple two-page key log into your move-in checklist workflow and the problem disappears.