Edit: 7/7/08: Two years ago I posted this article with the intention of fueling the fire of public discontent with the existing lock technology, with the hopes that it would drive the lock makers to respond with better, more secure technology.
I’ve recently learned that the companies that make these products have, after literally decades of knowingly shipping insecure products, begun to respond to the challenge and actually build a safer product. Master Lock, in particular, has released what they call “bump stop” technology, with a specially crafted pin that makes lock bumping difficult if not impossible. Here’s a YouTube video describing the technology.
At the moment, this type of lock is difficult to obtain for residential use; and while technology rarely ever works as well as the manufacturer claims, the important thing here is that bump resistance has become one of the metrics by which the security of a lock is measured, and products are already available to some consumers that address this threat. In short, it we’re at least on the right track.
And now, on with the original article.
It Worked
I recently saw a report on bump keying and how it, in theory at least, makes pin-and-tumbler locks useless. I was a bit skeptical, so I decided to try it out.
Using nothing but the little information I had gained through some Internet searches and You Tube videos, I took an old, unused key, filed it down to the appropriate shape, and tried it in my front door.
It worked first try.
This is serious. Though I’ve been taught how to pick locks, I’ve never successfully opened anything other than a simple desk drawer lock. With this one bump key, I can open about 40% of the locks I encounter in my day-to-day activities. A second key gets will open another 30% of the locks I encounter in a day, and between the two of them, I can open nearly every residential lock I’ve ever seen. This has very serious implications in the world of home security.
Making a bump key is trivially easy, and costs about $4 to do (or free if you already have an old key and a file). It’s not a new technology, and has been used for a few years no by criminals to break into house without leaving obvious signs of forced entry.
Burying Our Heads in the Sand
Continuing to keep this technique hidden from the public is not serving our best interests. The more expensive locks you can buy at the hardware store are expensive because they’re more difficult to open with a lock pick. Those same locks, though, can be opened in under 10 seconds by a bump key; often, the more expensive the lock, the easier it is to open. Everybody knows about lock picking, so lock makers build locks resistant to that technique. Very few people have heard of bump keying, so lock makers don’t bother to make bump-resistant locks. (There’s good reason for them to drag their feet; bump keying is a very, very difficult technique to guard against without radical changes to the way keys and locks work).
Nonetheless, the problem is here, it’s serious, and it’s not going away. Our only hope for any sort security is to force lock makers to start selling bump-resistant locks. They’ll do that only when the general public finds out that they’re being sold snake oil, not security. Our only hope is raising awareness.
To that end, I’ve created a simple video showing the basics of how to create and use your own bump key. All you need is an old key and a file to cut it with. You’ll be opening doors within an hour.
http://www.youtube.com/watch?v=pwTVBWCijEQ
Refinement
I’m no expert at this. Not at lock picking, not at bump keying, not at anything I’ve talked about here. However, I know who is. Check out www.toool.nl/bumping.pdf for some refinements on this technique.
In particular, their “Minimal Movement” technique caught my attention. I was surprised to find that the directions in the referenced PDF file were all I needed to make that technique work. Unfortunately, in my zeal to create the most efficient bump key, I managed to file away too much and ruin the key.
However, and this is the point, making a new bump key is so easy that there’s really no way to guard against it. You can’t control through legislation any more than you can control lock picks (I’ve seen a lock picked with a screwdriver and a paperclip–you can’t outlaw that!).
So try it out, tell your friends. This is an interesting skill that you can master in just a couple of hours, and a great way to impress strangers at parties. More importantly, when word finally gets out that everybody knows how to bump locks, lock makers will have to respond with better security.
Update
I’ve recently added a follow-up article to this one that answers a number of questions and gives further information about how you can protect yourself. The article is (unremarkably) entitled Bump Key Follow Up.
Nice job on the video. Can you send me the media file to include in a powerpoint presentation?
Doug
The video can be found in QuickTime format at http://www.tlarson.com/bumpkey.mov
Hey Tyler, Great job on the bump key video. This is Uncle Bill from Zekes wedding. Eiel and Michael both sent me a link to your site. Sets of bump keys were sold in the 1920/30s. I have a set of various keyways along with a spring loaded outer plate which did an automatic recoil after the bump. Your method is much cleaner and better. I worked as a locksmith during college. 2 years for a tinker locksmith and 3 years in Vegas doing casino work. I suspect if a lock doesn’t respond try graphite lubricant so the pins are free. When picking locks we want internal friction but I suspect bumping works best with free pins. With padlocks you don’t even need the key. Put a slight turning tension on the keyway and whack the lock on the upper side (rubber or leather mallet). As the lock moves down inertia makes the pins move up! Best regards, Bill Ragsdale, Michael’s Dad.
Yes, the bump keying works on a deadbolt but would it work on the handle locks beneath it?
Yes, the bump keying works on a deadbolt but would it work on the handle locks beneath it?
Yes.
Hey great video!!! Do you know if there is a way I can burn this to a cd?
Do you know if there is a way I can burn this to a cd?
The original is at http://www.tlarson.com/bumpkey.mov
You can use your normal CD burning tools to make it into a Video CD.
This is very interesting… Just for the fuck of it I’ll try this out on my front door and get back to you on the sucess.
Wow, that’s cool! If I ever have some time to kill I might try that out.
Yeah, those crazy NL’s. Make sure you buy a bump-proof lock that has pins that are cut on an angle (I think) or are put into an angle if they receive impact. These verticle pins are clearly vulnerable to newbies.
Thanks so much for exposing this for the general public. I have already posted your link to my favorite forums and will shortly be emailing it to my friends and family. Do you have any ideas for specific ways to spur the manufacturers to change? I have suggested writing letters to the manufacturers of your own door locks to ask if the have done anything to deal with this possibility. Still, there must be more that can be done.
great now your teaching everyone that reads this, and getting more people to know this means more people to break in to peoples homes. This wasnt a very bright idea. You tube should be informed on what this could cause. And could be held liable, since this is not totally legal. As a lock smith and escape artist, i have known about this for a while, but hav enever used it for criminal purposes. Most people that see this will use it for criminal pruposes.
@ #12, dave.
First off there is not ‘illegal’ about this. And do you really think security through obscurity is a good idea? Criminals already know about this, locksmiths know about this why shouldn’t Joe Consumer know about this too? People need to know what their up against in order to be able to protect themselves, their property, and their family. Even though a site like http://www.bumpkey.us MIGHT POTENTIALLY sell keys to criminals, i would gather the majority of people buying keys are simply concerned citizens. If enough people stand up and DEMAND better locks from Schlage and other top manufactures perhaps we can actually get some better locks and not have to worry about these dumb bumpkeys!
Here in Finland even the cheapest locks dont have pins on just one side of the lock and key, so would it possible to make a bump key that has “bumps” at both sides of the key, would it work?
Wow, thanks for the info Tyler.
Well shocking to see how easy it was to crack ya door lock, let’s just hope the lock makers do something about this potentially huge problem soon !!
Take it easy yeah.
Dubs’
Hello;
I have worked with a master lock-smith in New York City,about 1970′s,and had made “master”keys,etc.but had never heard of “bump keys”.but we,at times, would have to tap a lock or two.— Yes,I can se a possibility of abuse,but they who wish to abuse,MUST remember there are many sizes,and channels in order to fit the lock,ie—must have the proper “dud”-”blank”.
roger,68 yrs.-retired
Hey Tyler,
I am a professional locksmith in ireland, the first i saw of this method was on the toool.nl website and i have been following recent video’s ever since. I have tried on many occasions to get this to work using your method and several other methods and have not had any sucess to speak of. Firstly i tried barry wells technique on the toool.nl website except using a laser guided cutting machine to cut the key to the exact depths.I filed the shoulder and tip; after several tries with different keys and different locks.. nothing. Using your your technique and a wooden stick i managed to get a euro cylinder open but retracting the key was difficult, which seemed to suggest i had jammed pins or twisted the key . So far i cannot get any lock to open using this method. Please help!
UTube has removed the other “bump key” video. What a bunch of jerks. Locks never prevented any burglars from entering, they are meant to stop little kids and decent folks. Somebody who wants to get in can always break the door or… the wall, and WILL get inside. So Mr. Jadod, grow up!
Great info Tyler, thanks. Ohhh… and “uncle” Ben: interesting padlock observation, I must have destoyed more than my fair share of those things after accidentaly locking keys in the garage.
What in the world is a valley?
It would be great if someone could publish a high definition video on making this key. It would be great to show the key zoomed in and an explanation of the locksmith nomenclature explained.
This has been around for awhile with many low end criminal types…thank you for making the public aware. This scares people into reality
Hi Tyler,
I’m a reporter in Central Illinois doing a story on bumping. I tried it myself… got it the second time I tried, my photographer the first. But I have never been taught how to do it, and am not an experienced lock picker. Pretty scary. Do you know anyone in the area who has used a bump key (besides a locksmith?) I’d like to talk to them for a story.
Christina
i was trying to make a bump key just to see if i could get it to work, when i was using the file i couldn’t keep all the teeth straight and i wasn’t sure where to file it down to and was wondering if you could help me i can send you a pic of the key so i know hwere to file it to
thanks
Guess what I am doing tomorrow? Replacing my locks!!!! Thank you for letting us know about this problem.
I’ll throw in my two cents. Showing how to make something like this doesn’t help create more crime. Those that think like dave #12 are the problem in today’s society. The criminal is always the last to be blamed for their crime in these peoples mind. It’s not the criminal! It’s the guy that showed him a method! The quicker the people whose natural character would allow them to use info like this for criminal purposes is the quicker they can identified and shunned from society. Preferably for many years. Just my opinion. Was going through some real old mail and saw a link to tlarson.com and thought to myself “what ever happened to that guy?” Still scaring people I see
Scared me and my fledgling co a long time ago.
This brings us to the second line of defense which is, much as I’m loathe to suggest: get a gun.
“…bump keying is a very, very difficult technique to guard against without radical changes to the way keys and locks work.”
Seems to me that a simple, cheap solution is implied right in the video. Since the trick relies on the “billiard ball effect” of the top pin section jumping up, why not just add a third pin section for momentum to be transferred to, rather than kinetic energy on the second pin section. The third section just rides on top of the other two and doesn’t have any function w/r/t opening the lock. It could be made of a heavier metal in order to shrink it’s size, so that tolerances could be met.
If any locksmiths read this, I would appreciate feed back.
Just found out about all this and was facinated by the simplicity. I purchased a small set of bump keys only because I wanted to show my parents and friends what is going on and that they need to find better protection. Nothing like seeing something in action to make one belive. Now to find a bump proof lock!!! I will need 3 of them…
Dear Tyler:
I am a locksmith in the Atlanta area. You can visit my web site to prove I am in fact a Locksmith. http://www.lennet.com/aalock.
You did a great job making your How to video. I have been a locksmith for over 20 years now and I must admit I have heard about bump keys for a very long time but never used them. You are 100% correct when you tell people that the bad guys have been using this method for years now. I only wish this information did not become public as it has. No I am not putting any blame on you because all you are doing is reporting accurate information to make the public aware.
From a professional locksmith’s standpoint everyone needs to be informed of Lock Bumping. Almost any pin tumbler lock on the market can be bumped. Any residential lock that you purchase at your local home center can be bumped. If you walk into your local home center and purchase the most expensive lock they sell it will not protect you against bumping.
Here is some information you might not know. Insurance companies have know about lock bumping for years. Now they turn the tables onto the homeowners. If you are a victim of lock bumping the insurance companies in most cases will REFUSE TO PAY the claim. They turn around and re-victimize you again by telling you that you left your doors un-locked. Once again the insurance companies win. Insurance companies are out to make a profit and only are looking at the bottom line.
Here is what you need to protect yourself against Lock Bumping.
You need to call your Local Locksmith and have him/her come over and do a survey of your home.
In most cases you will need to purchase High Security Locks for your Home.
Just to let you know the average cost of a Hight Security lock is around 150.00 per lock. This does not include the service call or the installations charge. This might sound like a lot of money because it is, but can you really put a price on your own personal safety and security.
If you purchase an alarm system you have monthly fees associated with the alarm system that will result in hundreds of dollars each year. And that alone will not protect you from Lock Bumping. If the bad guy wants in he/she will get despite whatever deterrents you have waiting for them.
If you live in the Atlanta, Georgia area and contact me directly and mention that you saw this posting I will be more than happy to come out and give you a free in home survey. I work in Cobb County and sounding area.
I have several ways of stopping the the crooks from bumping your locks. For security reasons I am not going to publish them here.
Thank you again Tyler for allowing me the opportunity of educating your readers of this very serious problem. For more information you can visit my website and click on the Contact button to e-mail me directly.
Be smart and protect your most valuable asset your Home & Family!!!!
Kenny,
Locksmith
The link above did not work. Click on my name or try this: http://www.lennet.com/aalock
For those of you out there that don’t quite understand what’s going on with bumping, check out lockpicking101.com. There’s a slew of topics regarding Key Bumping there.
Essentially if you think about billiards, the cue ball strikes another ball with a certain amount of energy and stops, the ball that was struck continues to move on with the transfered energy. Now think of this happening inside the lock on your door, or the deadbolt. Because of the way that bump keys are filed down, they transfer energy to the pins inside the lock simultaneously. The difference is inside the lock there are two sets of pins, bottom pins and top pins. Where these pins meet and separate in each stack is called the shear line. In each stack the shearline is different, hench the different cuts in your key. When you strike the key and it slides forwards, the ridges transfer energy through the bottom pins to the top pins causing them to jump. In a fraction of a second, the top pins jump above the shearline all at the same time. During this nanosecond gap the key plug can turn freely. The time is a fraction of a second due to the top pins bouncing against retainer springs but it still can be done.
It doesn’t take a great deal of force to bump a lock, it’s more about timing and turning tension on the key.
Mark Tobias who is a key figure in the physical security world wrote an article with some well defined diagrams that further explain bumping and how a lock actually works, it can be found here: http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
As it was previously mentioned, bumping is more serious and harder to prove as a motive for a break in because if done correctly, it leaves no forensic evidence. As someone in the Netherlands put it when asked about the security of locks with this information out, “a $30, $40 even $100 lock protects about as well as a $2 lock.”
Hi, Tyler – I noticed your site and found it very informative. Please do not look at this as advertisement but the product Lock Jaw (www.lockjawsecurity.com) is a very simple concept that we have patented that works with most single cylinder deadbolts. It prevents the bolt throw (of the deadbolt) from retracting. We developed this 3 years ago under the premise of not being able to unlock a deadbolt with the actual key and make it portable. You can only engage it from inside the dwelling; again, because it is portable. When “lock bumping” hit the web, news stations began contacting us, because folks can not afford $100 – $150 dollars for a deadbolt. Lock Jaw is significantly less. Best regards, Brett
Thank you so much for this education! I endured four years of constants breakins and robberies. WHen I would complain to the local law enforcement about it, and the kids downstairs kept breaking in, they would come by, take a look, and say, “But there is no sign of forced entry”. I kept changing locks…to the tune of nearly $300.00….a new lock every few weeks. All to no avail. The one boy downstairs spent time for drugs and alcohol in a juvinile center…he obviously came out better educated on how to be a more effective criminal. What I’d like to know is how did they bypass the ADT system that I had installed? They even got past the security cameras. I spent about $1500.00 to secure my apartment, and nothing worked. But at least now I know how they were getting in! Thank you very much for this information!
PS….after they gained access, how did they relock the door??? (I used deadbolts…from Kwikset, Schlaage, etc)
Hey, so i was watching the video , ive watched it about 5 times lol
I still dont understand how to make a bump key, because i dont kno where to file the key down to. can u zoom in on the camera or sumthing? Because i dont understand where ur filing.
Public service site about lock bumping and how to protect yourself against it!
http://LockBumping.org
Tyler,
If you could please shoot me an email to karin[AT]k-sit.com please. I have a question I would like to ask you about you fantastic “Far Side” Cows picture. Regards, Karin
Hey Tyler,
Brilliant video. I understood the physics behind it and how simple it was to make it. However, I’m not in a position to purchase a machine or buy pre-cut keys off the net. Therefore, my question is this. What kind of file can you use to shave off the little excess areas inbetween the ridges. You said the one you used was from Home Depot. The keys, however, have very small gaps. Any ideas?
need to open safe, it has a keypad and round key int-re can i bypass key coding KEY
youcan but a ton of these at bumkeys.com. i got a shlage on for 5 bucks, ad it opens every shlage lock ive ever tried it on.