
A roof door in a New York City building can usually be secured against casual access, but it can never be secured in a way that leaves someone stuck on the roof or trapped in the stair below it. The hardware that satisfies both sides of that is a self-locking door: locked against entry from the roof side, free to open from the inside in one motion with no key and no thinking. Chains, hasps and padlocks on a roof door are the wrong answer every time.
Almost every argument about a roof door comes from mixing up two separate things. Access is who can get onto the roof. Egress is whether a person already up there, or in the stair below it, can get out. Owners and boards think about the first one because of trespassers, parties, package thieves and liability. Hardware has to answer the second one first.
The rule a locksmith works to is simple: a door on an exit path has to open from the inside without a key, without a code and without special knowledge. One motion, by someone who has never seen that door before, in the dark, possibly in smoke. Any arrangement that fails that test is a life-safety problem no matter how well it handles trespassers.
What that does not settle is the question for your specific building: whether this roof door may be locked at all, whether it must be alarmed, and how it interacts with Fire Department operations. Those are determinations for the Department of Buildings, the FDNY, HPD where a multiple dwelling is involved, and the building's architect. Get that answer before buying hardware. A locksmith installs what is permitted and will say when something clearly is not, but the authority on what your building requires is not a locksmith and is not a blog post.
A roof door lives outdoors on one face and indoors on the other, which is close to the worst condition you can put a lock in. If you manage a building in the five boroughs, this is statistically the door you will be called about.
There are only a few correct answers here, and a long list of wrong ones. These are the configurations a locksmith will normally propose for a NYC roof or bulkhead door, subject to whatever your building's code review says.
A note on the common shortcut: when a roof door lock dies, the fastest fix at a hardware counter is a hasp and a padlock, and it appears on New York roof doors constantly. It does solve the trespass problem. It also turns the roof into a dead end for anyone up there, and it is an obstruction the Fire Department should never meet. If a roof door is padlocked today, treat that as an open item rather than a finished repair.

In practice, the most common roof door failure in New York is not a broken lock. It is a brick, a wedge, a bucket or a loop of wire holding the door open, left behind by whoever was up there last.
A propped roof door is an open building. Roof-level entry is a real burglary route in attached buildings and in low-rise blocks where adjacent roofs connect, and it bypasses every piece of security the lobby door provides - the same reason a failed street door matters so much, covered in when a building front door lock is broken. Beyond security, a propped door in the rain means water down the stair, and in winter it means a frozen stair and a frozen lock when it is finally shut - see what to do when a lock freezes.
The fixes that actually work are procedural more than mechanical: a local alarm on the door so propping is noticed immediately, a rule that contractors are escorted rather than handed the roof key, and a closing check by the super on any day a trade has been up there. Hardware alone does not solve a habit.
Roof keys sprawl. They get handed out to a roofer in 2019, copied by a cable technician, kept by a resident who used to water plants up there, and nobody can reconstruct the list. Key control on this one door deserves more attention than it usually gets.
Not every roof opening is a door. Smaller buildings and many older walk-ups use a bulkhead with a hinged hatch, or a scuttle reached by a fixed ladder. The same principle applies with less room to work: a person who is on the roof must be able to get back in, and a hatch secured with a padlock from below fails that outright.
Hatch hardware is light, fully exposed, and often the oldest metal in the building: rusted hinges, a bent hasp, a seized cam lock and a hatch that no longer sits down on its curb are ordinary findings. Where a hatch genuinely needs securing and the code review permits it, an outdoor-rated, shrouded or closed-shackle padlock, serviced, is a different object from the one on the shelf at the corner store - see choosing a padlock that holds up in NYC and storm-proofing locks and doors.
Roof door jobs are frequently a mix, and it saves everyone time to know where the lines are before anyone comes out.
Seized cylinder, failed closer, a door that will not latch, a padlock that should not be there, or a roof key nobody can account for. Licensed NYC locksmith, NYC DCA #1362785-DCA.
A roof door call goes much faster when the person reporting it has looked at a few specifics. None of this requires tools.
One last point on hiring. New York City licenses locksmiths, and the license number should appear on the vehicle, the invoice and the website. Ours is NYC DCA #1362785-DCA. Ask for it, and be wary of a phone quote that is dramatically below everyone else's - see how to verify a locksmith license and how to avoid locksmith scams.
In most cases a roof door can be secured against entry from the roof side, but it must still open from the inside without a key, a code or special knowledge. Whether your specific door may be locked, must be alarmed, or must remain available for Fire Department operations is a determination for the Department of Buildings, the FDNY, HPD where a multiple dwelling is involved, and the building architect. Settle that before choosing hardware.
A padlock and hasp solves trespass and creates a far worse problem: anyone on the roof is trapped, and the Fire Department meets an obstruction. It is also commonly what gets installed when a roof door lock dies and nobody calls a locksmith. If a roof door in your building is padlocked, treat it as an open item rather than a completed repair.
Usually a self-locking lock, often called storeroom function, where the outside needs a key and the inside lever always retracts the latch. On heavier doors and stair exits, exit hardware with keyed outside trim is the common answer. Where permitted, an alarmed exit device adds trespass control without touching egress. All of it needs a closer sized for wind and a cylinder serviced for outdoor exposure.
Because it is the only door in the building with weather on one face and heat on the other, plus wind loading, steel that moves with temperature, water at the threshold and contractors who are rough with it. Low use hides the deterioration until the day it matters. Twice-yearly service with a dry lubricant and a closer check prevents most of it.
As few people as possible: typically the super and the managing agent, with contractors escorted rather than issued keys. Keep the roof on its own key or on a controlled level of the master system, use a restricted keyway so copies cannot be cut at a hardware counter, and maintain a written key log. Rekey when a key-holder leaves or a key cannot be accounted for.
Yes. A seized cylinder, a snapped key, a failed lock body or a latch that will not retract are routine jobs, and most are solved without damaging the door. Call (718) 412-1332 and describe what the door is doing and what hardware is on it, and bring whoever can authorize work on a common-element door.