Building Entry Systems: What to Keep, Upgrade, or Replace

 

 

A building entry system lets authorized people enter and, where needed, lets visitors request entry. It can combine an intercom, credential-based access control, and hardware that releases the door. These functions work together, but a fault in one does not mean all three need replacement.

If your lobby buzzer is unreliable while residents still use fobs at other doors, start by separating those entry paths. Before choosing a panel, find out which function needs attention and what equipment an installer can confirm is suitable to keep.

This guide follows a hypothetical lobby and package-room door entry system through that decision, from assessing reuse to comparing outage behavior, project costs, and installation plans.

This guide will answer:

• What does a building entry system include?
• Decide what to keep, upgrade, or replace at each opening
• Choose visitor communication and resident credentials separately
• Plan how access permissions will be managed
• Confirm what works during internet and power outages
• Review door safety, accessibility, and responder access
• Compare building entry system costs on the same scope
• Verify the arrangement before cutover

 

Watch how ButterflyMX works:

 

What does a building entry system include?

A building entry system, also called a door entry system, controls entry and handles visitor requests. It may provide visitor communication, check access permissions, and operate the hardware that releases a door. These are functions, not necessarily three separate devices. Products may combine them or leave out functions a particular entrance does not need.

The difference becomes clearer when you follow an entry request. As 2N explains in its intercom guide, a visitor selects a resident, communicates with them, and receives an entry decision. If the resident approves entry, the system sends a release command to the door hardware. A delivery person can use the same visitor-call path.

Resident entry follows a different path. A resident presents a credential, such as a fob, to a reader. The reader receives the credential information, and a controller checks its assigned permissions. An approved decision triggers the door release. Kastle describes this credential-checking and logging process in its access-control guide.

An intercom supports visitor communication and an entry decision. Building access control lets authorized users enter under assigned permissions without making that call. You may need both at the main entrance, but not at every door.

Consider a hypothetical multifamily or mixed-use building. Its lobby needs visitor calling and resident entry. Its package room needs credentialed entry, but no visitor calling in this example. A failed lobby call alone does not tell you whether the package-room access system, or even the lobby release hardware, needs work. Assess each entrance by the service it must provide.

 

Decide what to keep, upgrade, or replace at each opening

A building entry system upgrade can preserve suitable components, but reuse depends on a professional site assessment. The appearance of a callbox or a general retrofit claim cannot establish what will work at your property.

Begin with the people using each opening, meaning each door or entrance: residents, visitors, delivery workers, and contractors. Record what each group needs and the problem you have observed. For example, a visitor call that never reaches a resident is different from an approved request that does not release the door. Give the installer that description rather than trying to diagnose an electrical fault yourself.

 

What the installer must assess before promising reuse

ButterflyMX outlines the checks in its guide to replacing a phone-only apartment intercom. The installer needs to assess wiring layout and condition, power supplies and amplifiers, connections to resident devices or telephone service, and the current door-release arrangement. Internet or LTE availability and compatibility with the proposed equipment also affect the work required.

Each finding changes what can remain. Suitable wiring may be reusable; damaged or incompatible wiring may require new cable. Undocumented wiring needs investigation before the installer can promise reuse. An existing electric strike or magnetic lock, often called a maglock, also has power and control needs that the proposed equipment must support.

Can you replace an apartment intercom without rewiring? Sometimes, but only after those checks. Wireless communication does not mean wire-free installation. Changing how a panel communicates does not remove the need to assess power and door-release wiring.

For telephone entry, have the installer trace the actual communications service and identify the account it uses. A buzzer or callbox may rely on a traditional phone line, cellular service, or an IP connection. Its age alone does not establish that path. Request a written reason for keeping or replacing each relevant component at each opening.

 

Apply the assessment to a lobby and package-room door

Return to the hypothetical lobby. A narrower visitor-entry upgrade is an option only if the retained release hardware, power, wiring, communications service, and connections can support the proposed work. Replacing the visitor panel alone will not solve the problem if one of those supporting parts cannot deliver the required service.

Assess the package room separately. Its permissions, release hardware, and supporting infrastructure must meet its own needs. The lobby calling problem supplies no reason by itself to add an intercom there or replace its entire access system.

The assessment should support one of three outcomes:

• Keep an assessed setup that already meets the required functions.
• Upgrade a missing or inadequate function when retained components are suitable and compatible.
• Replace more of the system when documented limits prevent the required service.

A low-priced panel swap is not yet a complete proposal if it leaves power, service connections, or hardware compatibility unresolved. Use the following table to make those gaps visible. The functions are requirements for this illustration, not findings about installed equipment. The installer must supply the reuse findings, and bidders must document the proposed outage behavior.

The outage section explains how to evaluate the last two columns. First, choose the communication and credential methods that the retained or replacement equipment must support.

 

Choose visitor communication and resident credentials separately

 

Match visitor calling to the verification needed

An audio intercom lets a resident speak with a visitor without seeing them. A video intercom adds visual verification, along with connectivity and privacy considerations. 2N distinguishes these communication choices from access control. If you do not need visual verification and the assessed audio system remains suitable, keeping audio calling is a reasonable option.

Telephone entry describes a calling arrangement whose phone, cellular, or IP service path needs confirmation. It is not a separate alternative to every audio or video system. IP describes how equipment communicates over a network. Cloud management describes how administration is delivered. Neither label tells you which credential a resident uses.

A cloud-managed system might support fobs, mobile credentials, or other methods, depending on its configuration. The label alone does not establish those methods or their outage behavior. Choose resident credentials by daily use, then evaluate how their permissions will be managed.

 

Compare credentials by accountability and daily use

The following comparison draws on Kastle’s credential guidance and Nimbio’s operating guidance. It compares practical differences, not tested security rankings.

These methods shift the work of issuing credentials, tracking use, replacing devices, and enrolling residents. They do not form a universal best-to-worst order. A supported combination may fit your residents better than one mandatory method. A log tied to a shared or copied credential also does not prove who physically used it.

 

Provide a regular non-smartphone route and a phone-loss fallback

Specify both an everyday route for residents who do not use smartphones and a fallback for a dead or lost phone. ButterflyMX’s condo entry guide addresses supported alternatives. Cards, fobs, and individual PINs can provide direct entry where supported. Telephone answering and in-unit stations can let residents answer visitor calls, but they do not automatically replace a direct-entry credential.

Biometrics need a separate review before selection. For example, Illinois BIPA imposes duties involving written notice and release, retention and destruction policies, and protection of covered biometric data. Illinois is a jurisdiction-specific example, not a nationwide rule. Viewing ordinary video is not automatically the same as collecting face geometry for biometric entry. Have counsel review the actual data collected and processed, and define a supported alternative.

Once you have selected usable methods, you still need a process for assigning, changing, and ending access. That process matters throughout each tenancy.

 

Plan how access permissions will be managed

 

Follow access from move-in to move-out

At move-in, staff should assign the doors and times a resident is allowed to use. Name who handles routine changes and urgent lost-credential requests. Kastle’s lifecycle guidance follows access through issuance, loss, and deactivation.

At lease end, deactivate the permission whether or not the resident returns the fob. Collecting a device is not the same as removing access. For contractors, use expiring access limited to the required areas where supported. A permanent shared code does not provide the same individual accountability.

A property-management integration may connect lease events to permission changes, but only if it supports the intended workflow. Confirm which events it handles, who checks the result, and how staff resolve a failed change. For a deeper look at credentials and management choices, see ButterflyMX’s apartment access control guide.

Useful access logs show the credential, door, time, and outcome. They can help staff investigate an event and check whether a revocation took effect. They do not prove who physically entered or stop someone from following an authorized resident through the door.

 

Close legacy credential acceptance after migration

The credential technology affects the replacement plan. Manufacturer ICT explains that legacy 125 kHz proximity credentials lack encryption and can be duplicated by reading and copying their data. This does not mean every fob is equally easy to copy. It does reinforce why collecting an old fob cannot replace deactivating its permission.

Moving to stronger credentials requires compatible equipment and an enrollment plan. Frequency alone does not establish security: not all 13.56 MHz credentials or mobile implementations provide the same protection.

For the HID technologies covered in its legacy downgrade guidance, HID recommends a firm migration cut-off and disabling legacy-format acceptance when migration is complete. Have the integrator document this sequence:

1. Plan enrollment, supported alternatives, and a firm cut-off date.
2. Verify that users have their replacement credentials before the cut-off.
3. Complete migration and disable legacy-format acceptance.

Leaving older formats enabled can preserve duplication or downgrade risks. Other vendors need their own documented procedures; do not assume HID configuration steps apply unchanged.

 

Confirm the reader-to-controller link separately

A stronger credential does not by itself protect the connection between a reader and controller. The Security Industry Association explains that OSDP, a reader-to-controller communication standard, supports two-way communication and Secure Channel encryption. Compatible devices and correct setup are necessary.

Where OSDP applies, have the integrator confirm that Secure Channel will be enabled, not merely supported. HID recommends Secure mode with non-default keys in its guidance above. Not every intercom uses OSDP, so keep this confirmation tied to the proposed equipment.

These steps address credential handling and communication security. The next question is whether entry and permission changes still work when a connection fails.

 

Confirm what works during internet and power outages

There is no single outage answer for an entire building entry system. As ButterflyMX’s entry-system guidance explains, behavior depends on the configuration. Some systems retain local access decisions during internet loss, but you should not assume stored permissions or a particular backup-power duration.

Return to the two-door assessment. During internet loss, the lobby answer must cover local credential decisions, whether visitors can place and complete calls, and whether staff can issue or revoke permissions remotely. The package room needs its own answers about local entry and remote changes. A working fob at one door does not answer the questions at another.

During power loss, require the lock state on the secure side and the required exit arrangement for each opening. Also document what happens to calls, credential decisions, and remote functions when their equipment loses power. If backup power is proposed, record which equipment it supports, what other services it depends on, and its stated duration. Leave unspecified behavior marked as awaiting bidder confirmation.

Suppose a bidder says, ‘Credentials work offline.’ That does not answer whether lobby visitor calls work, whether remote revocation reaches the controller, or how occupants exit. Require an explanation of what happens if staff try to revoke a locally recognized credential while connectivity is unavailable, including when that change takes effect.

If the documented answer does not meet your needs, the proposal may require a different communications path, system design, supported fallback, or broader replacement. The table helps expose that decision before you accept a price.

Legacy telephone entry needs the same review of communications service, account, and power dependencies. The FCC’s copper-retirement guidance, updated March 30, 2026, explains that retiring copper does not necessarily change the customer’s service. A retirement notice alone does not establish that a callbox must be replaced. Have the installer assess the actual service and equipment compatibility.

Turn unresolved answers into proposal requirements: written reasons for reuse, normal and outage behavior, a supported resident alternative, and itemized work needed to meet those requirements. Agree on a professional test plan. Do not disconnect live safety systems yourself to test an outage.

 

Review door safety, accessibility, and responder access

 

Separate lock power loss from free egress

Fail-safe hardware unlocks when lock power is lost. Fail-secure hardware remains locked on the secure side. Free egress concerns the ability to leave through the required exit arrangement. Neither lock label alone establishes that occupants can exit as required.

Have the installer and authority having jurisdiction, the local official responsible for the applicable requirements, establish the door, fire-alarm connection, and emergency-release requirements for each opening. Apply that review to retained hardware as well as new hardware.

The 2024 IBC sensor-release provision illustrates one model-code pathway with specific release, power-loss, and alarm conditions. It is not a universal installation recipe. Local adoption, amendments, occupancy, and the authority having jurisdiction determine the controlling requirements.

 

Make panel placement and operation part of selection

Where accessibility rules apply, controls must be reachable and usable, not simply installed where the old panel sat. The U.S. Access Board’s operable-parts guidance addresses reach and one-handed operation without tight grasping, pinching, or wrist twisting.

Have the appropriate professional review which rules apply to your property and route, along with panel placement and operation. This guidance is not a universal residential intercom mounting specification. Review the non-smartphone entry route at the same time so the proposed alternative is usable in practice.

 

Confirm responder entry as a separate requirement

Resident fallback entry, occupant emergency exit, and responder entry solve three different problems. Ask local fire officials which responder-access arrangement applies and how it must be updated when locks or credentials change.

For example, the City of Mobile’s key-box notice describes local requirements with a stated commercial-building scope. It does not establish that every multifamily property needs a Knox box.

Include professionally confirmed safety, accessibility, and responder requirements in the priced work. A quote that leaves out necessary hardware or review is not directly comparable to one that includes it.

 

Compare building entry system costs on the same scope

Building entry system cost depends on the openings, the equipment and infrastructure you can keep, installation work, and recurring services. An equipment-only price and an installed-project price describe different purchases. Even two installed totals may assume different door hardware or connectivity.

 

Separate equipment and installation work

DoorVi’s vendor cost guide identifies useful quote categories: entry equipment, door-release hardware, installation and wiring, network setup, software, connectivity, and applicable in-unit devices. Use that structure to compare scope; it is not an independent market-price benchmark.

The site assessment explains why these costs differ. Suitable existing wiring may reduce new cabling work. Incompatible release hardware may need replacement. A different communications design may add network setup even when some door components remain. Have each provider show those decisions rather than burying them in one installation total.

 

Define recurring obligations and the comparison period

Separate software subscriptions, connectivity costs, support, and other recurring charges from upfront work. For each charge, require the billing basis, such as per apartment or per door, billing frequency, contract term, exclusions, and stated increases or renewal assumptions.

Ask every bidder to price the same openings and services over five years. Add the quoted upfront amount to recurring charges across that period, including stated increases and other quoted costs. This compares disclosed obligations; it does not guarantee every future expense.

Request a short proposal package containing:

• The same openings and required functions.
• Retained and replaced components, with reasons.
• Documented outage behavior and resident alternatives.
• Separate upfront and recurring charges, with exclusions.
• Named support responsibilities and acceptance requirements.
• Installation changeover assumptions and temporary-access arrangements.

If door hardware or connectivity has no price line, require a statement of whether it is included, retained, excluded, or supplied by someone else. Missing does not mean free. If you work with a condo board, ButterflyMX’s condo building entry system guide for boards offers a related resource for approval and governance questions.

Once quotes cover the same work, you can compare what providers promise to deliver. Before accepting a proposal, agree on how that delivery will be verified.

 

Verify the arrangement before cutover

 

Agree on a staged pilot and acceptance criteria

Nimbio recommends staged evaluation and defined test cases. A pilot gives you a way to assess the proposed setup before a wider changeover, but vendor guidance does not establish one ideal duration or guarantee fewer failures. Choose the scope and timing for your property.

Before cutover, meaning the switch to the new arrangement, agree who will demonstrate resident entry, visitor approval, credential issuance and revocation, non-smartphone access, and readable logs showing credential, door, time, and outcome. Define what evidence you will accept for each required function.

Carry the completed opening assessment into the test plan. Have qualified personnel demonstrate or otherwise substantiate the documented handling of phone or credential loss and communications or power failures. Verify the actual proposed configuration. A successful normal-entry test does not establish outage behavior or replace professional safety review.

 

Assign onboarding, temporary access, and support ownership

Require resident onboarding and a temporary-access plan before work begins. Explain everyday entry alternatives and the lost-phone or lost-credential process. Name who administers credentials and who responds to urgent access problems after installation, consistent with Kastle’s operating guidance.

At handover, obtain the agreed acceptance record and relevant configuration and operating documents. Those records should let you explain which function needed attention, which components remained after assessment, what happens during documented failures, and what the installed work was required to deliver.

 

Frequently asked questions

 

Does returning a fob at move-out remove access?

No. Staff must deactivate its permission at lease end whether or not the fob is returned. Collecting a device is not revocation, and returning a legacy credential does not prove that no copy exists. Duplication risk varies by technology.

 

Does cloud-managed access require internet for every entry?

Not necessarily. Cloud management describes administration, while local entry decisions depend on the configuration. Some systems retain local decisions during connectivity loss. Require written answers about credentials, visitor calls, and permission changes rather than predicting behavior from the cloud label.

 

Must telephone entry be replaced when copper service is retired?

Not automatically. The FCC’s guidance, updated March 30, 2026, says copper retirement does not necessarily change the customer’s service. Have the installer trace the actual service, account, equipment compatibility, and backup-power dependencies before deciding whether service changes or equipment replacement are needed.

 

Does every building need a Knox box after an entry upgrade?

The supplied local example does not establish a universal requirement. Your local fire official determines which approved responder-access arrangement applies and how to update it when locks or credentials change. Mobile’s notice has a stated commercial-building scope, not a nationwide multifamily mandate.

 

Is an ordinary video intercom the same as biometric entry?

No. Viewing video to verify a visitor differs from using biometric identifiers, such as face geometry or fingerprints, as a credential. Review the actual data collected and processed before classifying a product. Illinois BIPA illustrates why biometric entry needs jurisdiction-specific legal review.

 

An unreliable buzzer is a reason to investigate visitor entry, not proof that every credential and lock needs replacement. Keep an assessed setup that meets your needs, upgrade a missing function when the supporting parts are suitable, or replace more of the system when documented limits require it.

Your next step is an assessment of each opening followed by comparable proposals. Have each bidder explain what can remain, what works during outages, how residents enter without a working smartphone, and what the full project will cost. Choose equipment after those answers establish the work your property needs.

Get your free quote!

Fill in the form below, and we'll email you right back.

Want a free quote?

Fill in the form below, and we'll email you right back.