Bump keying: $1 keys open any lock

Anyone who knows anything about locks and lock picking knows that most locks on most doors -- the tumbler variety -- can be picked with a little skill and a couple of tools. But what would you say to the frightening truth that lying before the world these hundreds and hundreds of years we've been using tumbler locks, was a simple technique that allows an intruder to quietly, quickly, easily open any lock for the cost of a copied key? It's called bump keying, and we can assure you it has nothing to do with certain white narcotics. By simply cutting some keys down to serrated-like edges of sharp, even peaks and valleys, an amateur can break into a home in less time than it takes to disassemble a bic pen. Watch as a master locksmith walks up to his own shop, bumps a key, and cruises right in only to declare that his own front door is now no longer more secure than it would be using a $10 lock (after the break). The cheap, easy, no-mess skeleton key: coming to a robbery near you. Alert your insurance agents, everybody. [Warning: PDF link!]

[Via MAKE: Blog]

[TheCount @ Aug 7th 2006 8:30AM]

It's okay to admit you found this through digg, you know? I know you guys are having a pissing contest and everything, but still.

[Steve @ Aug 7th 2006 8:35AM]

Frank, are you brain dead? Do you honestly think all the criminals are hanging out here for the scoop? Do you think Engadget just created a problem? No, they just helped inform thousands of readers of a potential security problem. What do you think Microsoft should do when a security vulnerability happens next time? Keep quiet? Hope no one finds out? Come on man, wake up.

[Shunnabunich @ Aug 7th 2006 8:39AM]

...Not to mention people who might want to protect themselves against this kind of thing. You thought of that too, I hope.

[morty salt @ Aug 7th 2006 8:39AM]

Um, this is very very old like 20 years or more, at least that is how long I have been using bump keys. Now a days I can't just go into my local Ace Hardware and ask them to make a bump key. This is a great learning reference for newbies.

http://www.toool.nl/bumping.pdf

if you want some great lock picking tools go here:

http://southord.com/catalog.asp?cat=locksmith

[Galley @ Aug 7th 2006 8:40AM]

This reminds me of a recent newspaper article letting criminals know that outside air conditioning units were a great source for copper, which apparently is the favorite metal of local crackheads.

[emehrkay @ Aug 7th 2006 8:41AM]

The best part about this is NERD playing in the bkg. Does this method work with cars?

[@ @ Aug 7th 2006 8:42AM]

where I live 99% of people have alarm systems. Een if you get into the house, the alarm system will call the police.

[maxxwizard @ Aug 7th 2006 8:42AM]

There's an idiot above me blaming Engadget for spreading news. Most people aren't burglars, so this news is a great warning. Also, as this becomes a more popular method and a big problem, more attention will be paid to finding a new way of securing properties.

[kraemer @ Aug 7th 2006 8:46AM]

Please stop. This will not work with a good lock like a Medeco:
http://www.medeco.com/

[Matthew Boyd @ Aug 7th 2006 8:58AM]

Interesting... locksmiths are willing to detail the steps that go into creating such keys... and wait... who stands to make a large amount of money replacing today's newly obsoleted locks? You guessed it.

Welcome to 2k6. Please put your seats in their upright positions.

[hunter @ Aug 7th 2006 9:02AM]

saw this on hack a day not 2 long ago

[Antti @ Aug 7th 2006 9:32AM]

Actually, here already mentioned lock-maker Medeco's residential locks have the same problem than on the film bump-keyed ones. However, Medeco belongs to a lock manufacturer group called Assa Abloy, and they have a brand for 'home use' under name Abloy (which is a former independent lock maker).
Their locks have a different un-locking mechanism than the bump-keyable ones, and are therefore not openable by this method. Abloy's information (worldwide) can be found at http://www.abloy.com .

[GW @ Aug 7th 2006 9:48AM]

Yeh this is very, very old.
Bump-keying has been going on for years around here in the Netherlands but lock picking is still way more fun ;)

[Kim @ Aug 7th 2006 9:56AM]

@kraemer: Nothing better than the sound of panic and terror in the morning, right? :)

[TheBadDancer @ Aug 7th 2006 10:12AM]

I remember hearing the term "bump key" years ago when I was a kid, but I never knew what it was. Thank you engadget, now I know -- and knowing is half the battle!

[bizarobot @ Aug 7th 2006 10:26AM]

My cousin was an US Military MP stationed in Israel before being a cop in L.A. before "retiring" to being a cop north of Atlanta. He has told me numerous times to forget about security alarms and fancy locks and just get a dog. Determined individuals will find a way to break in and steal your stuff, but they don't want to mess with something that might bite them.

[Paul @ Aug 7th 2006 10:33AM]

yeah get yourself a medeco and be done with it.

[Peter @ Aug 7th 2006 10:40AM]

I'm still skeptical. They never showed someone trying a key that didn't work and then bumping it open with that same key. How do we know that the keys they used wouldn't have opened the lock anyway? Even if it is feasible it sounds like something that would have been known for a long time and would be a rampant problem by now if it was really that easy.

[Tom @ Aug 7th 2006 11:07AM]

The guy who's auction has been linked to on eBay is making a killing! He's probably never seen sales like this...

Tom.

[alex @ Aug 7th 2006 11:24AM]

If you really want a secure lock, Medeco is ok but nearly as secure as an Abloy Protec. The abloy uses an entirely different mechanism from most locks which is not susceptible to "bumping."

I'm moving into a new apartment in a couple weeks and there isn't a doubt in my mind whether or not to install the new Protec lock.

Alex

[oo @ Aug 7th 2006 11:26AM]

i have figured a simple work around to this... have a daft looking contraption mounted on top of lock(like a pull-to). to prevent key being hit as easily in such a linear fashion...

cant test as dont have set of bumpkeys, but it could help to make it more dificult

of course could be removed but just makes it a bit more dificult especially if formed in titanium

[Jeff @ Aug 7th 2006 11:29AM]

Let's be a little realistic here. First of all, read the PDF - this isn't as simple as going down to your local Home Depot and asking them for a bump key. These keys all have to be custom-made and not all bump keys work on every type of lock - so you need to know the type of lock you're trying to open before you make the key.

Second, the actual technique to use the key requires more skill then just putting the key in and turning it, and without practice you can damage the lock, the key, or both. There is a good amount of force involved. If you tried this method on a lot of doors, you'd probably end up breaking the glass contained in them in the process, making the whole endeavor kind of pointless.

The reporting on this in the past week or so (and it made it into Newsweek as well) has been a little sensationalist, as if there are guys running around with master keys opening everybody's doors late at night. The truth of the matter is most burglars are not using lockpicking techniques of any kind - they mostly take advantage of unlocked doors or windows, and failing that, they break one. Like any other security system, locks are not designed to deter those willing to put in the time and effort at defeating them (which includes the training and practice you need to make and use these keys in the first place). They're designed to lock out the other 99.9% of the public, and combined with penalties for breaking and entering and whatever other security measures you've got in place (alarm system, prickly bushes under your windows, or whatever), you would hope you'll keep 100% of people out.

[Jerry @ Aug 7th 2006 11:33AM]

I am a licensed locksmith for the past 15 years, bump keying or picking has been around as long as locks have been around. To say "By simply cutting some keys down to serrated-like edges of sharp, even peaks and valleys, an amateur can break into a home in less time than it takes to disassemble a bic pen." Engadget you are creating fear for unfounded reasons. Quite frankly I benefit from this because people will call me to increase their security. However, it is irresponsible because it is not true. Especially with some of the high security lock systems whos' keys are pictured in you article.

[bgdc @ Aug 7th 2006 11:34AM]

That's why I like my alarm system. Any tool can smash a window or get through a door. But an armed response and alarm...well I'd put my money on the thief choosing the neighbor's house.

[canyon289 @ Aug 7th 2006 11:39AM]

Hi,Does anyone know the song playing at the 44th second and the 2:54th second? Sounds cool and Id like to listen to the rest.
On the topic of lock picking this sounds amazing. I personally pick locks but im constantly stymied by mushroom and hourglass pins. Also it takes some skill to learn to pick each pin. This bump keying method seems straightforward and easy. I think im gonna go try it out myself.

[gib786 @ Aug 7th 2006 11:55AM]

canyon289 - the track is rockstar by n.e.r.d

[Julian Emmett Turner @ Aug 7th 2006 12:01PM]

This has nothing to do with the keys. The keys are just easier than finding some other implement to rake it with. Yes, that's right... it's the "raking" method. Like you would rake leaves in your yard. It's the first technique any lock-picker would try and a lock pick suits it well too. Just rake the pins inside while applying turning pressure to the knob and the majority of pins will stop in position and not fall back in.

[ivan @ Aug 7th 2006 12:30PM]

Umm, since most of you guys are up till 4 in the morning playing Everquest anyway.. I wouldn't worry much about a burglar sneaking around in the night - cause the light from your dual 19 inch LCD's will thwart them... however I would be verrry quiet getting that last mountain dew from the fridge cause you don't wanna wake yer' mom up ok. Seriously..

Oh, and I have something called a "Bushmaster XM15" that keeps the burglars away from my place; I swear, you wound one and no one ever wants to come back to play - I gave him a sporting chance even!

[cracovie @ Aug 7th 2006 1:01PM]

This is for whomever recommended a dog instead of an alarm system: I thought my two huge scary and well fed dogs were enough but somehow the burglars found a way to go passed them (fed them something to make them sleepy) so I guess there's no perfect solution...

[Goemon4 @ Aug 7th 2006 2:00PM]

Wow...thats disturbing O.o

[yong @ Aug 7th 2006 2:01PM]

I've got nice rottweiler waiting on the otherside of the door :)

[Alexander @ Aug 7th 2006 2:15PM]

All this is a variation of a rake that happens to look like a key. A rake is basically a flat piece of metal that you pull in and out of a lock rapidly that has a point or diamond at the end, hoping to pop the pins past the shearline and with your tension wrench open the lock.

This is a shortcut, and nothing more. Plus, it removes the tension wrench entirely because the key is the tension wrench.

There is no mechanical lock that cannot be picked. Plain and simple. They all rely on mechanical pins/tumblers/discs/whatever to be pushed into place, and then something turns/opens. That's the point of a lock. The only way to eliminate this is to remove the only weakness in the entire system: The Key.

In other words, remove the lock from the outside of the door. Put it inside the door, and use another method to activate it.

I'm in the process of converting my entire house to be PC controlled. Lights, AC, locks, etc. will all be controlled via my computer and relays. It will be hooked up to my Telephone and I will issue commands to it via my mobile. There will be no knobs of any sort on my front door. No windows either. Inside the door will be a deadbolt that is connected to a solenoid. A pushbutton will be put on the other side that will activate the door when I wish to leave. A solenoid is basically a plunger that when current is passed through it retracts or extends. Mine will push the deadbolt in to or out of the wall. Just as a key does, just electrically with no key from the outside.

No lock == no key == no picking.

It will be powered remotely, with a battery inside the door itself to prevent it from locking up in the case of an emergency or a power outage. It will have a keypad that will only work in a power outage in case the cell towers go down or something.

I'm interested in seeing what everybody thinks of my plan. See if I have missed anything.

[Ron @ Aug 7th 2006 2:45PM]

"I'm interested in seeing what everybody thinks of my plan. See if I have missed anything."

Yeah, the window next to the door, which they throw a rock through.

[Mr. X @ Aug 7th 2006 2:50PM]

This was a well organized PR stunt in the Netherlands. Bump keys have been around for years so there was nothing new. But what was new was a new lock that supposedly couldn't be opened by bump keys. A major tv program aired an item on the bump key and the next day that lock company started advertising for their "safer" locks. Coincidence? Not at all.

I used to work for a PR company that set up these things and recognized the tricks of the trade. First, get a TV program stupid enough to air a bit of sensationalist piece highlighting a so-called problem with a competitor's product. Provide them with so-called neutral experts (of course hand-picked by the PR agency) that validates the story, follow it up with advertising or another PR piece and you're done.

[Chris Hofman @ Aug 7th 2006 3:32PM]

Why would anybody invent this??? It's just ASKING to get sued.

[jnasato @ Aug 7th 2006 3:47PM]

The efficiency of this technique is great! ...But it's no match for my front door:

I have 10 deadbolt locks set in a vertical configuration. Two of them are unlocked manually, simultaneously, to open the door; the other 8 by motors, after the designated two locks are opened. Everyday at noon, I am prompted by my cell phone to change which 2 locks open the door, which I set by txt msging my door.

If the locks are opened one at a time, the previous deadbolt is locked by the opening of the next one. If two incorrect locks are opened simultaneosly, a circuit is completed, sending 500 kV to the foolish.

I pity the fool, who tries trial and error with my door.

My outer walls and front door are 1ft thick titanium.

From the expenses, I am now homeless.

[thispaceforsale @ Aug 7th 2006 3:57PM]

Another flaw in the Matrix movies!

[Pat @ Aug 7th 2006 4:13PM]

LOL jnasato, good one.

[sredlums @ Aug 7th 2006 6:21PM]

I'm form the Netherlands, and this was broadcasted by a public TV-station (don't know if that's the right translation, but I mean it's not a commercial TV-station) that is well respected.
It was broadcasted a few months ago.
It really is a big problem, not only beacuse it leaves your house virtually unprotected, but even more so because it doesn't leave any trace when people use this method to open your door...so the insurance will not pay. They will just say you forgot to lock your doors. It is allready happening.

By the way, to the poster stating that where he lives everybody has an alarmsystem...I'm glad I don't live where you live!! Wouldn't want to live in a place like that.

[Mark Galvan @ Aug 7th 2006 6:41PM]

I notice there's a Mul-T-Lock key blank in the picture. Where can I get Mul-T-Lock key blanks for $1?

[Howard Campbell @ Aug 7th 2006 7:08PM]

I think about 99.9% of home burglaries involve an unlocked door or window, or the window or door being forced open. No one is picking locks.

A pipe wrench will twist off most doorknobs in an instant. A crowbar will get you past the rest.

[ben t @ Aug 7th 2006 8:21PM]

anyone heard of a magnetic lock before?

http://www.magausa.com/products.html

[Thomas @ Aug 7th 2006 9:57PM]

This is crazy, I just saw that video yesterday when my Gfriend told me her son wanted a set off ebay..

Crazy Sh*t.. I dont feel safe no more, gotta set up a Networked Cam system now..

[evo @ Aug 7th 2006 10:03PM]

I hope the next version of Oblivion includes bump keying instead of the lockpick minigame it has now--I'm so tired of it.

[Mooga @ Aug 8th 2006 1:27AM]

This is old news.
This was on hackaday almost a year ago when they covered the toool con. They had a link to an hour video that was actauly quite interesting.

[gamingexpert13 @ Aug 8th 2006 1:53AM]

wow. i remember seeing a key on a movie (james bond?) or a game a while ago that supposedly opened like 90% of all locks. i guess that wasnt so far fetched.

[Gadget Extremist @ Aug 8th 2006 3:21AM]

canyon289,


We are not going to assist you in piracy. Go to the music store and ask the clerk what song it is then pay for it.

[prodigal_son @ Aug 8th 2006 3:52AM]

To alexander, Isnt your mobile phone the key? Mobile phones are easy as pie to clone, easy to spy on messages. Your door would be no more secure, someone would just have to sit and wait for you to open it once.

[Aaron @ Aug 8th 2006 5:25AM]

I find it odd how no one in this video ever shows you that the "bump key" will NOT open the lock by simply turning it first.

[TObject @ Aug 8th 2006 7:52AM]

To Alexander:
"...Lights, AC, locks, etc. will all be controlled via my computer and relays."

So if your PC crashes will Bill Gates comes and opens your door? ;-))