A key lockbox is a convenience device, not a security device. It is reasonable for short, supervised arrangements - a contractor working for a week, an aide on a fixed schedule - and poor as a permanent solution, because a box bolted to your door advertises that a working key is sitting outside your apartment. In New York the better answer is usually a credential you can revoke: a code you delete, or a key you control.
What a Lockbox Actually Protects Against
Be clear about the threat it was built for. A key lockbox protects a spare key from casual discovery - the key under the mat, on the ledge, in the fake rock. Against that baseline it is a genuine improvement, and that is the honest case for it.
What it does not do is resist a determined attempt. Consumer lockboxes are small stamped or cast-metal shells with a shackle, built to a price point, and they are not rated or tested the way a safe is. The real-estate-grade boxes agents use are better made and tied to an electronic key system with an audit trail, but the plastic-and-zinc box from a hardware store hanging on a doorknob is a different class of object entirely.
The second thing it does not do is stay quiet. A lockbox is a visible signal that an unattended working key exists at that address and that the occupant is sometimes away on a schedule. That signal is often the real cost, and it is the same reasoning behind the advice in holiday travel lock security - do not telegraph the pattern.
How Key Lockboxes Get Defeated
Four weaknesses account for nearly everything that goes wrong, and none of them require special skill.
The mount, not the box. A box hung on a doorknob or a railing can simply be carried off and opened somewhere private, with time and tools and nobody watching. Shackle-mounted boxes are the weakest common configuration by a wide margin.
The dials wear. On a cheap four-dial box the digits used in the combination get polished and the unused ones do not, which narrows the guessing space enormously. The same happens to push-button boxes, where worn buttons give away the digit set even without the order.
Someone watches you open it. A hallway, a stoop, a vestibule, a camera in a neighbouring unit - entering a code in a semi-public space is not private, and the person who sees it does not have to be a stranger.
Code sprawl. The code gets shared with an aide, then a relief aide, then a cleaner, then a contractor, and nobody changes it when any of them stop coming. This is the most common failure by far and it is purely administrative.
Notice that three of the four are not about the metal at all. Buying a better box fixes one of them. Fixing how the code is managed fixes the other three, which is why the alternatives below matter more than the brand on the shell.
Where NYC Buildings Will and Will Not Allow Them
Before you mount anything, check what governs your door - this is where New York differs from a suburban house.
Rentals. Many leases and house rules prohibit attaching hardware to a building door or to common-area railings and fences. A box drilled into a fire-rated apartment door is a particular problem, because penetrating a rated door assembly can compromise its rating - the same concern discussed in fire escape door lock requirements.
Co-ops and condos. House rules typically control anything visible in a common corridor, and some boards ban lockboxes outright after a single incident. Ask the managing agent in writing rather than assuming, in the same way co-op and condo lock changes normally need board sign-off.
Street-facing gates, railings, and scaffolding. Hanging a box on public-facing ironwork is the most exposed option available and it is frequently removed by the building or by whoever owns the railing.
Rental hosts. If you are considering a lockbox for guests, check the city's short-term rental rules and your building's house rules first - the lockbox is the smallest part of that question.
A separate category worth naming so it is not confused with any of this: fire department rapid-entry key boxes. Certain buildings are required to provide a key box for emergency responder access, and that is a regulated, approved device controlled through the building and the fire department - not a consumer lockbox, not something a resident installs, and not an alternative to the box on your own door. If you have been told your building needs one, that goes through your managing agent.
Who Actually Needs Outside Access - and the Better Answers
Start from the real requirement, because most lockboxes exist to solve a problem that has a cleaner solution.
A home health aide or regular caregiver. This is the strongest case for standing outside access, and the best fit is a keypad deadbolt or smart lock with a separate code per person. Delete the code when the assignment changes, and you never have to rekey. Keyless entry for NYC apartments covers the options that work in co-ops and rentals.
A dog walker or cleaner. Same answer, with a scheduled code where the hardware supports it - access only on the days and hours they actually come.
A contractor for a defined job. A temporary code, or a key issued and collected, beats a box that outlives the job by two years. If a key must be handed over, a restricted keyway at least means it cannot be quietly copied at a kiosk.
Your own spare, in case you lock yourself out. Honestly the weakest reason to mount a box. A trusted neighbor, a relative nearby, or a 24-hour locksmith all beat leaving a working key on the outside of your door permanently - see locked out with no spare key for what that call actually involves.
Building staff. In many New York buildings the super already holds an emergency key under the building's own key-control arrangement. Ask before you duplicate that function badly on your own door.
The common thread: a revocable credential is better than a key sitting in a box, because revoking it is a thirty-second administrative act and recovering a key you cannot account for means rekeying or replacing the lock.
Need Access Without Leaving a Key Outside?
We install keypad deadbolts and smart locks, fit restricted-key cylinders, and rekey apartment and house locks across Brooklyn, Manhattan, Queens, the Bronx, and Staten Island - including after a lockbox code has gotten away from you.
If Your Lockbox Was Opened - or the Code Got Around
Treat a compromised lockbox exactly as you would a lost key, because that is what it is: a working key you can no longer account for.
Remove the box. Not later, now - leaving it up keeps the signal in place even after you change the code.
Rekey the lock. Rekeying changes which key operates the cylinder, so the key that was in the box stops working while your hardware stays in place. For most apartment and house doors this is the fast, inexpensive answer; what rekeying an apartment costs in NYC sets expectations.
Tell the super or managing agent if anything suggests the building was entered rather than just your unit, and ask whether there is camera coverage of the corridor or vestibule.
If there are signs of entry, stop and treat it as a scene before you repair anything - what to do after a break-in in NYC covers the order of operations.
Then fix the access problem properly, or the same box reappears in three weeks with a new code and the same habits.
If You Still Want One, Mount It Properly
Sometimes a lockbox really is the right tool for a defined period. In that case, the details that matter:
Wall-mount it, do not hang it. A box fixed to masonry or a solid frame cannot be carried away. Never drill a fire-rated door, and in a rental or co-op get permission in writing before you drill anything at all.
Put it out of sight of the street and the corridor. Inside a vestibule you control, around a corner, below eye level - anywhere that is not the first thing a passer-by sees.
Use every dial and avoid obvious codes. Not the apartment number, not the building number, not a birth year. Wipe and work the dials occasionally so wear patterns do not build up.
Change the code on a schedule and on every departure. Whenever anyone with the code stops coming, the code changes that day.
Put a bare key in it, with nothing attached. No tag, no address, no fob, no mailbox key. A found key with no context is almost useless; a found key with a tag is an invitation.
Take it down when the job ends. The most dangerous lockbox in New York is the one that was mounted for a two-week renovation in 2022 and never came off.
They are secure against casual discovery - far better than a key under the mat - and weak against a determined attempt. Consumer lockboxes are not rated or tested like safes, and the common failures are the mount being carried off, worn dials narrowing the combination, someone watching the code being entered, and the code being shared with more people than anyone tracks.
Can I put a lockbox on my NYC apartment door?
Check your lease or house rules first. Many New York buildings prohibit attaching hardware to apartment doors or common-area railings, and drilling a fire-rated door can compromise its rating. In a co-op or condo, anything visible in a common corridor is normally board territory - ask the managing agent in writing.
What is the safest way to give a home health aide access?
A keypad deadbolt or smart lock with a separate code for each person, deleted the day that person stops coming. It gives you revocable access without a key sitting outside your door, and in hardware that supports scheduling you can limit access to the hours they actually work. Want help choosing hardware that fits your door and your building's rules? Call (718) 412-1332.
Someone may have gotten my lockbox code. What now?
Treat it as a lost key. Take the box down, rekey the lock so the key that was inside no longer works, and tell the super or managing agent if you think the building was entered rather than just your unit. Changing only the code leaves a working key in circulation.
Is a fire department key box the same as a lockbox?
No. A fire department rapid-entry key box is a regulated device provided for emergency responder access to certain buildings, controlled through the building and the fire department. It is not installed by a resident, not a consumer product, and not an alternative to anything on your own apartment door.
Should I use a lockbox just for my own spare key?
It is the weakest reason to mount one, because the key sits outside permanently to cover an event that may never happen. A trusted neighbor, a relative nearby, or a 24-hour locksmith all solve the same lockout without leaving a working key on your door for years.
