Security, Privacy & Safety

For most Singapore homes, a good digital lock is more secure in everyday practice than a traditional key lock — but the gain comes mainly from removing the human habits that create risk, not from the lock body itself being dramatically stronger. Traditional keys get duplicated at a shop for a few dollars, lent to a helper or contractor and never returned, hidden under the shoe rack, or lost with an address tag attached.

A digital lock removes the physical token entirely: you can delete a PIN the moment someone moves out, issue a temporary code to a cleaner, and confirm that the door actually locked behind you. Auto-locking alone prevents one of the most common causes of residential break-ins, which is simply a door left unsecured.

Mechanically, the picture is more even. A digital lock's holding power still comes from the mortise, the deadbolt and the strike plate behind it — the same hardware family a good mechanical lock relies on.

A cheap digital lock fitted to a flimsy mortise is not an upgrade over a solid mechanical one. Treat a digital lock as a strong deterrent and a genuine convenience upgrade, not a guarantee.

When comparing models, check on the mortise and deadbolt supplied with the lock, not just how many unlocking methods it offers. In AN Digital Lock, all the lock parts have been tested and verified to be of our standards before releasing to market for sale.

Picking, bumping and drilling are known attack categories against locks in general — mechanical and digital alike — and no lock sold to consumers is immune to all of them. Being honest about that matters more than marketing language.

A well-built digital lock raises the effort, noise and time required, and that is what actually deters an opportunistic intruder, but it is not a guarantee. What changes the outcome is design.

Many digital locks either have no exposed keyway at all or place the emergency keyhole in a concealed position, which reduces the surface a manipulation attack has to work with. Better models specify a hardened anti-drill plate or inserts protecting the critical internals, a quality mortise from a recognised maker, and a deadbolt with a decent throw into a properly fitted strike plate.

Tamper and forced-entry alarms matter just as much, because most opportunistic attempts stop the moment a door starts making noise in a shared corridor. We are not going to describe how any of these attacks work, and you should be wary of any seller who walks you through the detail.

Instead, ask three questions before buying: which mortise comes with the lock, does the body include anti-drill protection, and is there a tamper alarm? Remember too that a lock is only as strong as the door and frame it is fitted to.

In practice this is one of the least likely ways a Singapore home is entered, but it is not impossible, and it is worth choosing a lock from a brand that takes it seriously. A remote attack requires skill, proximity or stolen credentials, and an effort wildly out of proportion to what an intruder gains from one flat.

Most real-world problems with connected locks trace back to something far more ordinary: a reused password, one login shared around the family, or a former household member's phone that was never removed. Reputable brands encrypt the communication between lock, app and cloud, and the lock's mechanical security does not depend on the radio at all.

If Wi-Fi or Bluetooth fails, you simply fall back to fingerprint, PIN or key — the door does not spring open. Some models also let you switch off remote unlock while keeping notifications, which is a sensible middle ground if you feel uneasy about it.

The practical risks are the ones you control: use a unique password for the lock app, enable two-factor authentication if offered, install firmware updates, and delete accounts for anyone who no longer lives with you. If you want minimal exposure, choose an offline or Bluetooth-only lock. Before buying, check whether the model supports two-factor login and receives firmware updates.

A tamper alarm is a siren built into the lock that sounds when it detects interference, and on connected models it also pushes a notification to your phone. It is one of the more genuinely useful security features precisely because it is loud: in an HDB corridor or a condo lift lobby, noise draws attention, and attention is exactly what an opportunistic intruder is trying to avoid.

Triggers vary by model, but typically include the lock body being prised, forced or pulled away from the door, the front panel being struck or removed, and repeated wrong PIN or fingerprint attempts. Many locks also alert if the door is left open beyond a set time, and some sound a distinct warning if the inside thumbturn is operated while away mode is engaged.

The trade-off is false alarms. A heavy slam, a child playing with the keypad, or a delivery rider leaning on the panel can set some models off, and a shrieking lock at 11pm does not win you neighbours.

Most locks let you adjust sensitivity, or mute the siren while keeping app notifications running. At handover, ask the installer to demonstrate the tamper alarm, show you how to silence it, and tell you the current sensitivity setting — then decide whether you want it dialled up or down for your particular corridor.

The lock locks itself out. Almost every digital lock sold in Singapore has an anti-trial or lockout function: after a set number of consecutive wrong entries — commonly three to five, though it varies by model — the keypad disables itself for a lockout of roughly one to three minutes.

Many models sound an alarm and send an app notification at the same time, and repeated offences usually extend the lockout. The point is to make guessing pointless.

Someone standing in your corridor trying combinations gets a handful of attempts, then noise and a dead keypad. Most models also offer a virtual or random-digit PIN feature, letting you pad your real code with extra digits so that anyone watching over your shoulder, or reading smudges on the keypad, learns nothing useful.

There is a nuisance side. Children pressing buttons, or a guest fumbling an old code, can trigger the same lockout and leave you waiting outside.

It is not a fault and it clears by itself. On most models your other unlocking methods — fingerprint, card, app, mechanical key — still work during a keypad lockout, though some models suspend everything.

Ask our installer exactly how many attempts your model allows, how long the lockout lasts, and whether fingerprint still works during it. Then make sure everyone in the household knows the answer.

Specialist manipulation tools and radio jamming are real categories of attack against locks and wireless devices in general, so the honest answer is that no consumer lock is immune to every technique. What we can say is that neither is a typical way a Singapore home is entered — the overwhelming majority of residential break-ins are opportunistic, targeting unlocked doors, open windows and flats that look unoccupied.

We are not going to describe how either works, and you should treat any seller who does with caution. What is useful is knowing what mitigates them.

Tool-based manipulation targets keyways, so a lock with no external keyhole, a concealed emergency keyway, or a quality mortise from a recognised maker simply presents less to work with; anti-drill protection and a solid deadbolt throw into a well-fitted strike plate matter more than the electronics do. Jamming affects only the radio.

It cannot open a lock, because Wi-Fi and Bluetooth handle notifications and remote convenience, not the physical holding of the door. Its practical effect is that you may not receive an alert — which is precisely why a lock with a local siren is worth more than one that only notifies your phone.

On virtually every reputable digital lock, fingerprint data stays on the digital lock itself and never leaves it. What is stored is also not a picture of your fingerprint: the sensor converts the scan into a mathematical template — a set of numbers describing feature points — and discards the image.

That template sits in the lock's local memory and is not designed to be turned back into a usable fingerprint. This matters for two reasons.

Your biometrics are not sitting on a server that could be breached somewhere else, and fingerprint unlocking keeps working when your internet is down, because nothing needs to be checked online. The exceptions are worth asking about.

A small number of face-recognition and camera-equipped products process some data off-device, and multi-property or commercial systems sometimes sync credentials centrally. If a model advertises cloud-based biometric matching, read the details carefully before buying.

Two practical points. A factory reset wipes every enrolled fingerprint, so keep your own note of who is enrolled. And when a household member moves out, actively delete their fingerprint rather than assuming they will not come back.

More than most people assume, though usually nothing sinister. A typical connected lock app holds your account details — name, email or mobile number — the list of users and credentials you have created, and an event log of every lock and unlock with a timestamp and the method used.

If the lock has a camera or doorbell, it also holds images, clips and motion events. Most apps collect standard technical data as well: device type, app version, IP address and crash reports, and sometimes analytics on how you use the app.

The part people underestimate is the behavioural picture. A log showing the door opens at 6.50am on weekdays and nobody returns until 7pm is, in aggregate, a description of your family's routine.

That is not a reason to avoid connected locks, but it is a reason to treat the account like a bank login rather than a shopping app. Sensible habits: a unique password with two-factor authentication, separate user profiles instead of one shared family login, and prompt removal of anyone who leaves the household.

Usually the digital lock stores the data and not transferred over to the cloud, however you may consider to check two things — what data is retained and for how long, and how you delete your account and its data if you ever stop using the lock.

You and anyone you have granted app access to — that is the intended answer, and with a reputable brand it is the real one. Footage from a camera lock or video doorbell is normally viewable only through accounts you authorise, and it is stored in one of two places: locally, on a microSD card or internal memory inside the device, or in the manufacturer's cloud, usually with a short free retention window and a paid plan for longer history.

Local storage keeps everything inside your flat and carries no subscription, but the recording is lost if the device itself is removed or damaged. Cloud storage survives that, which is why many people choose it, but it means clips sit on a company's servers under their privacy policy and their security practices.

Some models offer both. Realistically, the bigger exposure is not the vendor but the household: a shared login, a family member who screenshots and forwards clips, or an old account never removed after a tenant moved out.

Three things to check before buying: is storage local, cloud, or both; how long is footage kept and does longer retention cost extra; and can you view and revoke the list of accounts with access.

Camera-equipped locks and video doorbells are widely used in HDB blocks and plenty of households have them without issue — but common corridors are shared property, and rules, interpretations and enforcement around devices recording shared space can differ by town council and change over time. Some households have been asked to reposition or remove devices after neighbour complaints.

Check with HDB and your own town council for your block rather than relying on a forum post or a salesperson's assurance. Beyond permission there is courtesy, which is what usually causes friction.

A corridor camera will inevitably capture neighbours walking past, their doorways and children playing. Singapore's data protection framework is aimed primarily at organisations rather than households, but the reasonable-expectation principle behind it is a fair guide: point the lens at your own door and threshold, not down the corridor or at the unit opposite.

A practical approach: choose a model with a narrower field of view or adjustable detection zones, angle it downwards towards your own entrance, use motion-triggered capture rather than continuous recording, and speak to your immediate neighbours before installing. A short conversation prevents most complaints. And confirm the position with HDB or your town council first.

Adjust the settings rather than living with the defaults — most complaints come from locks left exactly as they arrived from the factory. Camera and motion-sensing models generally ship with sensitivity turned up, which in a busy HDB corridor means a recording and a phone alert every time someone walks to the lift.

That is irritating for you, hard on the battery, and it is what makes neighbours uncomfortable. The settings that usually matter:

• Motion sensitivity and detection distance — reduce both so the lock reacts to someone at your door, not to passing traffic.
• Privacy masking or detection zones, if your model has them, to exclude the corridor and the unit opposite.
• Recording mode — motion-triggered or doorbell-press only, rather than continuous. Alert schedule and quiet hours, so you are not woken at 2am.
• Speaker, chime and tamper alarm volume, so your lock is not audibly announcing every arrival to the whole floor.

Physical angle matters as much as software. Tilting the camera slightly downwards towards your own threshold removes most of the corridor from frame and often solves the problem outright.

Do this on installation day while our technician is still there. Ask them to walk you through motion sensitivity, notifications and volume, then stand outside and test it. Five minutes then saves an awkward conversation with your neighbour later.

Yes — nearly every digital lock keeps an access log, though how you read it depends on the model. Connected locks show a live history in the app: date, time, whether the door was locked or unlocked, and which credential was used, usually under the name you assigned.

That is how you know your teenager got home, your helper arrived at the usual time, or the contractor left at 6pm. Offline Bluetooth locks record the same events and sync them to your phone the next time you are within range.

A small number of purely standalone locks keep only a limited internal log you cannot easily read out. Two caveats.

The log tells you which credential was used, not who used it — if three people share one PIN, it is useless for accountability, which is a good argument for giving every household member their own PIN or fingerprint. And storage is finite: many locks retain a few hundred recent events, or a limited window in the app, before older entries drop off.

No — a properly specified digital lock is designed so that leaving is always possible without a code, a fingerprint, a phone or a battery. This is the most important safety principle in door hardware, and it is worth understanding rather than taking on trust.

From the inside, the door should open with one natural action: pressing the lever down, pulling the handle, or turning the thumbturn. No electronics sit in that path.

It is a mechanical linkage between the inside handle and the mortise, so it works in darkness, in smoke, with flat batteries and with a completely dead circuit board. What can compromise this is how the lock is configured, not the lock itself.

Away or double-lock mode deliberately disables the inside thumbturn on many models — exactly what you do not want engaged while people are sleeping at home. Some households also add manual bolts or padlocks needing a key from the inside, which is a genuine hazard in a fire.

Two things to do. At handover, ask the installer to show every member of the household how to open the door from inside in a single motion, and have each of them try it.

And never engage away mode while anyone is inside, or rely on any key-operated device on the inside face of your main door. If your model behaves differently, confirm exactly how with your us before accepting the installation.

You open it exactly as you normally would — the inside handle or thumbturn is mechanical and needs no power. A mains failure does not affect a digital lock, because the lock runs on its own batteries, and even with those completely flat the inside release still works.

There is no special emergency sequence to memorise for getting out. The practical steps, in order: press the inside lever down or turn the thumbturn, and pull.

If the door does not release, check whether away or double-lock mode has been engaged — most models have an inside indicator and cancel it with a single button or a longer turn of the thumbturn. If a manual bolt or additional latch has been thrown, release that first.

If your metal gate is also locked, it has its own separate inside release, so deal with the door and the gate as two steps rather than one. What is worth preparing before you ever need it: keep a small torch near the entrance rather than relying on a phone you may not be holding, keep the entryway clear of shoe racks and stroller clutter, and make sure your helper, elderly parents and children have all physically practised the inside release at least once.

At handover, ask the installer to demonstrate opening from inside with the batteries removed. Seeing it work is worth more than being told it will.

Out, quite easily; in, far less so on a properly configured lock. Locking themselves out is the common scenario: auto-lock engages the moment the door closes, so a child who steps into the corridor to collect a parcel or chase a sibling can find the door shut behind them.

That is not a fault — it is the feature working as intended — but it catches families out in the first few weeks. Getting locked in is rare, because the inside handle or thumbturn opens the door mechanically without any code.

The realistic risks are a child engaging away or double-lock mode by pressing buttons on the inside panel, or a young child simply not being tall enough or strong enough to work the lever. Sensible measures: enrol each child's fingerprint if the sensor reads it reliably — very young children's prints often scan poorly, in which case give them their own PIN, or an RFID card or tag clipped to their school bag.

Many locks also have a keypad or child-lock setting that stops the inside panel being changed by accident, and a passage mode you can use while children are running in and out. A practical rule: before your child is allowed out alone, watch them unlock the door from the corridor twice, unaided. If they cannot do it reliably, they carry a card, not a code.

Double-lock — also called privacy mode or secure mode — puts the lock into its most secure state and, on most models, deliberately disables some of the normal ways of opening the doo from outside the house. Many models also suspend ordinary PIN and fingerprint entry from outside, or require a specific credential example using Master or Administrative PIN, and some sound an alert if the door is disturbed while it is engaged.

Use it when everyone is already home or used when you are heading to sleep and not expecting anyone from coming into the house with this lock. Many people have the confusion when it comes to double lock versus child lock mode.

Child locking function are typically created with a latch on the inner side of the house as well that you can toggle between turning on and off. When it is being turn on, the handle is in a secure state which does allow anyone from open the door from inside.

If you happen to meet into such a situation, do not panic, simple just toggle it off and you will be able to exit in a breeze. At handover, get our installer to show you how to engage and cancel it, and to confirm whether your particular model disables the inside thumbturn — behaviour varies between brands.

Yes. Digital locks run on their own batteries rather than your flat's mains supply, so a power outage — uncommon in Singapore, but they do happen — has no effect on the lock's ability to open.

Fingerprint, PIN, card and the inside handle all continue to work as normal, and the lock does not fail open or seize shut when the lights go out. If your block loses power, the lock is one of the few things you can stop worrying about.

What does pause is anything that depends on your home network. Your router and any smart home hub will be down, so the lock loses Wi-Fi: remote unlock from the app, live notifications, camera streaming and voice assistant control will not work until power returns.

Bluetooth models generally still pair directly with a phone nearby, since that does not involve the router. Once mains power is restored, most locks reconnect on their own within a few minutes, though occasionally one needs a manual reconnect in the app.

One indirect effect worth noting: during a prolonged outage the lock keeps drawing on its batteries with no way of alerting you remotely, so a lock that was already low may need attention sooner than usual. The practical takeaway: don't choose a lock on outage performance — choose one you can always open locally, without a phone.

In most cases it makes no material difference to a standard Singapore home contents policy, but you should tell your insurer rather than assume. Local home insurance is generally priced on the property, its contents and the sum insured, not on the specific lock fitted, and we are not aware of any mainstream Singapore insurer offering a standard premium discount for a digital lock.

Some policies do ask about security features, and a few overseas insurers offer credits, so a quick call or email is worth the effort — but the answer is specific to your policy and your insurer, and no lock retailer can promise it on their behalf. Where it can matter is at claim time.

Many burglary policies require evidence of forcible and violent entry, and an incident where a credential was used rather than the door being forced could be assessed differently. Equally, most policies expect you to have taken reasonable care to secure the property.

Keeping the installation invoice, warranty documents and your access log helps you evidence both sides of that. Two practical steps: notify your insurer in writing when you install, and file the installation invoice with your policy documents.

If you are also replacing the main door or gate, mention that too, since it can change how the property is described. For anything specific, ask your insurer directly — they are the only party who can confirm how your policy responds.

Change it now, from wherever you are — the whole point of a digital lock is that you do not need a locksmith to re-key it. On a connected lock you can do it from the app in under a minute; otherwise change it at the keypad using the master or administrator code as soon as you get home. Then work through the rest, in this order:

• Change the master or administrator code too, not just the user PIN, especially if you have ever shared it.
• Delete every temporary, guest and one-time code, plus any code you cannot positively account for.
• Review enrolled fingerprints, cards and app users, and remove anyone who no longer needs access. Check the access log for entries you cannot

explain, and screenshot anything unusual before it ages out.

• Change the lock app account password and enable two-factor authentication if it is available.

When setting the new PIN, avoid your unit number, birthdays, and repeated or sequential digits, and use the random-digit or virtual-PIN feature if your model offers it, so that anyone watching you type learns nothing. If you believe someone has actually been inside your home, contact the Police first — that takes priority over anything on the lock.

And if the log still shows unexplained openings after you have reset everything, call your retailer and have the lock inspected.

Give them their own credential, never yours, and delete it the day the job or tenancy ends. This is the single biggest practical advantage a digital lock has over a metal key, and most people never use it.

Create a separate PIN or card for the contractor or tenant so the access log records their entries distinctly, and keep your own code and fingerprint private. For a renovation, a time-limited or one-time code is ideal if your model supports it — access during working hours only, expiring on the completion date.

If it does not, set a dedicated PIN and diary a reminder to delete it at handover. Never leave the master or administrator code with a contractor, and be aware that if the lock is factory-reset during works, every credential is wiped and everyone must be re-enrolled.

For a tenant, decide in advance who holds administrator rights. Most landlords keep admin access and issue the tenant a user PIN; some hand the lock over entirely and reset it at the end of the tenancy.

Whichever you choose, put it in writing in the tenancy agreement, and reset all credentials between tenants as routine. Before handing over any flat, run one check: open the app or the admin menu, list every active code, fingerprint and card, and delete anything you cannot name.