Key Duplication Authorization – Licensing, Laws & Requirements

By Mohammad H. Abdelhadi, ALOA-Certified Master Locksmith, mobile automotive locksmith. Reviewed by Ray Obar, Master Locksmith. Updated June 2, 2026.

Key Duplication Authorization governs who may legally copy a key, what documentation is required, and which restrictions apply under federal, state, and local law. This reference page summarizes the licensing landscape, common misconceptions, and verification steps relevant to both consumers and locksmith professionals.

Licensing Required or Not Required

There is no single federal license that specifically covers Key Duplication Authorization. Unlike many trades, locksmithing has no federal licensing requirements in the United States. Instead, authority is delegated to individual states, producing a wide range of regulatory approaches.

Whether a locksmith must hold a state-issued license before performing key duplication depends entirely on geography. Approximately twelve to fifteen states currently enforce statewide locksmith licensing, while the remaining states have no formal state-level requirement. In non-licensed states, a general business registration or local permit may still be necessary before offering duplication services.

For standard residential keys that carry no patent protection or restricted-blank status, Key Duplication Authorization is generally straightforward: the person requesting the copy should be the key’s owner or have the owner’s permission. No federal law specifically prohibits copying keys stamped “Do Not Duplicate,” though certain states—most notably California—impose statutory requirements on locksmiths who encounter that marking.

Restricted and high-security keys are a different matter. Restricted keys have U.S. patent law protection that prevents unauthorized duplication and typically require both specialized equipment and a written authorization card from the lock system’s owner before any copy can be made.

Common Misconception: Key Duplication Authorization Is Not Always Higher Security by Itself

Many property managers assume that stamping a key with “Do Not Duplicate” creates a legally enforceable barrier. In reality, the Associated Locksmiths of America (ALOA) calls DND keys “not effective security” and notes that the inscription provides only a psychological deterrent. Genuine Key Duplication Authorization controls come from patented keyways, restricted blanks, and documented authorization-card systems—not from stamped text alone. Simply obtaining a key marked DND does not, by itself, elevate the security level of the lock system.

Current Issuing Authority

Because no federal agency issues a locksmith or key-duplication license, the issuing authority varies by state. Below are representative examples for states that mandate licensing:

• California: The Bureau of Security and Investigative Services (BSIS), under the Department of Consumer Affairs, regulates locksmith licensing. Both company and individual registrations are required.
• Texas: Locksmiths must obtain a Class B – Security Contractor Company License and pass the Qualified Managers exam, administered under the Texas Department of Public Safety.
• Illinois: The Department of Financial and Professional Regulation (IDFPR) manages locksmith licensing, though the Illinois General Assembly has voted to sunset the program in 2029.
• Louisiana: The Office of State Fire Marshal oversees locksmith licensing and administers application processing, renewals, and enforcement.
• North Carolina: The Department of Public Safety oversees the licensing process, requiring applicants to pass a written examination.
• Nevada: State law (NRS Chapter 655) requires locksmiths to obtain a permit from the county sheriff where their principal place of business is located.
• New York City: Locksmith licensing is overseen by the NYC Department of Consumer and Worker Protection (DCWP), though the city plans to end individual locksmith licensing in May 2027.

At the federal level, the only statutes that directly restrict key duplication address narrow categories: 18 U.S.C. § 1386 deals with United States Department of Defense keys, making unauthorized duplication, counterfeiting, or possession of DoD security keys a federal crime punishable by up to ten years in prison. Similarly, 18 U.S.C. § 1704 restricts the unauthorized duplication of U.S. Post Office keys.

License Classes, Renewal, Bonding, and Insurance

States that require locksmith licensing typically distinguish between company (or agency) licenses and individual technician registrations. The table below summarizes requirements in selected licensed states that directly affect a locksmith’s ability to perform Key Duplication Authorization services.

Licensed states typically require locksmiths to maintain general liability insurance with minimum coverage ranging from $100,000 to $1,000,000 per occurrence. Some states also require surety bonds—ranging from $5,000 to $25,000—that offer additional consumer protection. Even in states without formal licensing, many locksmith businesses voluntarily carry insurance and conduct employee background checks to maintain customer confidence and meet insurer requirements.

Common Misconception: Brand Name Does Not Replace Correct Installation

Purchasing a well-known restricted-key brand (such as Medeco or Mul-T-Lock) does not automatically guarantee security if the lock cylinder is improperly installed or the authorization-card system is not administered correctly. Key Duplication Authorization for restricted systems depends on the property owner consistently maintaining the authorization card, keeping records of issued keys, and ensuring that only authorized dealers cut copies. A premium brand installed carelessly or managed without proper documentation can be undermined just as easily as a generic lock.

Penalties for Unlicensed Operation

In states that require locksmith licensing, performing key duplication or other locksmith services without a valid license carries meaningful consequences. California provides one of the most detailed penalty frameworks:

• Any person who violates any provision of the Locksmith Act is guilty of a misdemeanor, punishable by a fine of ten thousand dollars ($10,000), or by imprisonment in a county jail for not more than one year, or by both. (Cal. Bus. & Prof. Code § 6980.13.)
• A person convicted under § 6980.10 or § 6980.13 shall not be issued a license for one year following a first conviction, and for five years following a second or subsequent conviction.
• Failure to conspicuously display a license at the place of business or in a mobile service vehicle may result in an additional fine of $250 per violation.

At the federal level, unauthorized duplication of Department of Defense keys under 18 U.S.C. § 1386 can result in a fine and imprisonment of not more than 10 years, or both.

Violations involving patented restricted keys may also expose the duplicator to civil liability under U.S. patent law, with damages that can reach $10,000 or more per infraction, in addition to potential injunctive relief sought by the patent holder.

Common Misconception: Unauthorized Bypass Attempts Can Damage Hardware and Create Legal Risk

Attempting to duplicate a restricted key without proper Key Duplication Authorization—or trying to bypass a high-security lock through picking or decoding—can physically damage the lock cylinder, void manufacturer warranties, and expose both the person requesting the bypass and the locksmith performing it to civil and criminal liability. If unauthorized duplication leads to criminal activities, law enforcement agencies can get involved, potentially resulting in prosecution of both the person who ordered the copy and the technician who made it. Businesses or individuals whose security has been compromised due to unauthorized key duplication might pursue civil lawsuits for damages.

City and Local Variations

Even in states that do not require a statewide locksmith license, local jurisdictions frequently impose their own rules that affect Key Duplication Authorization:

• New York City requires a city-issued locksmith license through the DCWP, even though the state of New York doesn’t require a locksmith license.
• Nassau County, NY and certain Florida counties (such as Hillsborough County and Miami-Dade County) maintain their own locksmith permit or registration programs.
• Some cities make it illegal to copy certain access keys without showing ID, lease agreements, or ownership papers.

California’s approach to Key Duplication Authorization is notably stricter than most states. Under Cal. Bus. & Prof. Code § 6980.54, duplication is prohibited when a key is stamped “Do Not Duplicate” or “Unlawful To Duplicate” and includes the originator’s company name and telephone number. The statute also bars duplication of restricted or high-security keys that bear the originator’s identifying information, unless the locksmith receives a written letter of authorization. This means that in California, unlike most other states, a DND stamp combined with the originator’s contact information does carry legal weight.

Because regulations differ so widely, both consumers and locksmiths should verify the specific rules in their city, county, and state before assuming that a Key Duplication Authorization request will be handled the same way everywhere. A locksmith operating in multiple jurisdictions must comply with the requirements of each location.

Documentation for Locksmith Service

Whether you are a consumer requesting key duplication or a locksmith performing the service, having the correct documentation protects both parties. The verification steps below apply to Key Duplication Authorization requests across most U.S. jurisdictions.

What Consumers Should Verify

• Locksmith license or registration: In licensed states, ask the technician to show a current, state-issued ID card or pocket card. In California, all locksmiths are required to carry a state locksmith license with them when performing locksmith duties.
• Insurance: A reputable locksmith will carry general liability insurance. Consumers may request proof, particularly for on-site commercial or automotive work.
• Business identification: Confirm that the company name, phone number, and license number match official records. California law requires advertisements to contain the business name, address or phone number, and license number as they appear in BSIS records.

What Locksmiths Should Verify

• Ownership or authorization: The locksmith should request the identity of the individual making the request and documentation that the requestor has authorization from the original owner before producing a copy of any restricted or DND-marked key.
• Authorization card (restricted keys): For patented high-security systems, the customer must present the manufacturer’s authorization card along with valid photo identification before duplication can proceed.
• Record retention: In many jurisdictions, locksmiths performing on-site key-making must note the time the key was made, the residence’s address, and the caller’s signature, and retain these records for a specified period—often two to five years.
• Key type inspection: Before performing Key Duplication Authorization, the locksmith should inspect the key head for patent markings, restricted-blank identifiers, and originator contact information that may trigger state-specific prohibitions.

Low Rate Locksmith encourages all customers to gather the appropriate documentation before requesting duplication of restricted or DND-marked keys. Having a written letter of authorization ready—especially in California—can streamline the process and ensure that your Key Duplication Authorization request is handled efficiently and lawfully. When in doubt about whether your key qualifies for standard duplication, contact a licensed locksmith such as Low Rate Locksmith for guidance specific to your jurisdiction.