loading
loading
We trust a lot of our most sensitive information to new systems we don't understand, from encryption to biometric scanners. Yet one of the most important pieces of security technology we use every day has barely changed since ancient times: the lock. The original wooden locks were invented about 4000 years ago in ancient Egypt. They were a couple feet long and made of wood, but the underlying principle is identical: pins of varying lengths get pushed up by a key to just the right height. In 1790, the English locksmith Joseph Bramah displayed a challenge lock in his London shop window with a £200 reward for anyone who could pick it, a small fortune at the time. The challenge stood for over 67 years, until the American locksmith Alfred Charles Hobbs picked it over the course of 51 hours spread over 16 days. His win sparked a bit of controversy, since a real burglar wouldn't have the luxury of a couple weeks alone with a lock. In any case, it marked the end of an era: the belief that a truly unpickable lock could exist. The lock controversy continues a subject of great interest at the Crystal Palace, and, indeed, is now become of general importance. We believed before the Exhibition opened that we had the best locks in the world, and among us Bramah and Chubb were reckoned quite as impregnable as Gibraltar. In the early 1860s, Linus Yale Jr. refined his father's pin tumbler design into the small, flat-key cylinder lock that became the basis of the modern Yale lock. This piece is about how that lock works, and why, as Hobbs proved in 1851, perfect security was always an illusion. A lock, in the end, is really just a deterrent. The key is more like a set of numbers than a shape Your intuition may be that a key is like a jigsaw puzzle piece, matched to a lock by its jagged shape. But it's not the shape that matters. A key is more like a set of numbers, where each number is the depth of one cut on the blade. Most pin tumbler locks have five or six pins, and each cut is filed to one of roughly ten depths. The right key pushes each pin to exactly the right height, so that every gap between a key pin and the driver pin above it lines up along the same seam. That shared seam is called the shear line. This is why the wrong key still slides all the way in. The cuts are ramped, not square, so each spring-loaded pin just rides up and over the slopes as the blade slides past, dropping into its final cut once the key is home. The chain reaction that opens the door Turning the key sets off a small chain reaction. The part of the lock that the key slides into and turns is called the plug, which sits inside an outer shell bolted to your door called the housing. When the wrong key is in, pins bridge the gap between the plug and housing such that nothing can turn. When the key lifts every pin to the shear line, the gap clears and the plug can rotate. Attached to the back of the plug is the cam, a small piece that swings around as the plug turns. In most locks, the cam pulls a bolt or latch back, opening the door. The flaw that makes picking possible A theoretical perfect lock would be impossible to pick, but in reality, tiny imperfections make it possible to pick a lock with a few simple tools. Each pin sits in a chamber that spans both the plug and the housing. Because these holes are drilled with tiny misalignments, the plug's half and the housing's half don't line up identically from pin to pin. That one detail is all it takes. When you apply gentle turning pressure to the plug, it rotates the smallest sliver before that most-misaligned pin catches between the plug and housing and stops it. That pinched pin is now stuck in place. Lockpickers call this binding. A bound pin is stuck, which is exactly what a lockpicker wants. If you use the right tool to push it up to the shear line while it's pinched, it catches there instead of springing back down. The pin is now set. And the moment it sets, the plug turns a little further, until the next pin catches and binds. These offsets create an order: a first pin to set, then a second, then a third. If every hole were drilled in a perfect line, all the pins would block the plug at the exact same instant, resisting as one solid wall. The plug couldn't rotate at all, nothing would ever bind, and anything you pushed up would just spring back. The tools of the trade Picking a lock takes two tools, and they do very different jobs. The first is the tension wrench, a small L-shaped bar that slides into the bottom of the keyway. You use it to apply light and steady turning pressure to the plug. This is what makes pins bind, and what keeps a set pin from dropping back down once you've lifted it. The second is the pick, a thin rod with a small hook at the tip, which slides in above the wrench. The pick does the delicate work: feeling for the pin that's currently binding, then pushing it up to the shear line. Both tools crowd into the same narrow keyway at once, which is part of what makes picking a matter of feel rather than force. The security arms race It's a common pattern for any type of security system: as attackers get more sophisticated, so too does the defense. This is where security pins come in. A security pin is shaped differently from a normal pin, and it's designed to turn the picker's own technique against them. The most common kind is the spool pin, named for its shape: wide at both ends with a narrow waist in the middle, like a cotton reel. When the picker applies tension and lifts a spool pin, the plug rotates and its edge drops into that narrow waist. The plug turns noticeably further than it would for a normal pin, and the picker feels a satisfying click, exactly the feedback that usually means a pin is set. But it's a false set. The waist has caught at the wrong spot, and a wide part of the pin is still crossing the shear line, blocking the plug. The lock feels closer to open, but it's still actually stuck. There are lots of other types of security pins, but they all work in the same way: they give the picker a sense of progress even when the lock is still stuck. What about master keys? Sometimes a lock needs to accept more than one key. Think of an office building: each employee should only have access to their own office, but a building manager would need access to every door. It wouldn't be ideal for them to have to carry hundreds of keys. To pull this off, a lock needs to be able to accept two different keys. The trick is a small extra piece called a master wafer (also called a master pin), slipped into the pin stack between the key pin and the driver pin. Normally a stack has just one gap that can line up with the shear line, so only one cut depth works. Add a wafer and the stack now has two gaps, which means two different depths will open the lock: one for the individual key, one for the master. If you do this across the right pins in every lock in a building, you can design one key that opens them all. Master keying is nearly as old as the modern pin tumbler lock itself, since the idea falls out naturally once a lock has multiple pins. That convenience has a cost: every extra break point is another valid key shape. If someone can decode one working key and understand the system, the master depths are no longer magic; they are another set of numbers to recover. More generally, as I went down the rabbit hole learning about locks and keys, I found it fascinating how simple and elegant the technology is. Modern problems may require modern solutions, but the humble lock proves that some ancient solutions never needed replacing. We're just getting started. Subscribe for more thoughtful, data-driven explorations.
document fetched 2026-10-24 10:06