A door access control system boils down to four parts working as one loop: a reader that captures your credential, a controller that checks it against a stored list, an electric lock that releases on approval, and a power supply that keeps it all running — with an exit button and door contact sensor completing a proper installation.
The important qualification is that this loop scales enormously: a 125KHz RFID keypad handling 1000 users on one door at £16.55 is built on the same principle as an enterprise platform such as Paxton10, which supports up to 1000 doors and 1000 cameras across multiple sites — but the hardware, wiring and budget needed for each are worlds apart.
Get the scale right for your building first, and the rest of the decisions — credential type, lock type, wiring — follow logically.
What does a door access control system actually consist of?
A working system needs four core parts — a credential reader, a controller, an electric lock, and a power supply — plus an exit button and a door contact sensor to close the loop safely. Miss any one of these and the door either won't secure properly or won't release in an emergency.
The reader is what a user presents their credential to: a card, fob, PIN keypad or, on newer units, a fingerprint sensor. The controller is the brain — it checks whatever's presented against a stored list of authorised users and decides whether to fire the lock. The electric lock is the mechanical bit that actually holds the door: usually a magnetic lock (maglock) or an electric strike fitted to the existing latch. The power supply feeds the controller and lock, typically a dedicated 12V or 13.8V unit with battery backup so the door doesn't fail during a mains cut.
Two more parts complete a compliant loop rather than a bare install. The exit button (often a green break-glass or REX push) lets someone leave without needing a credential, which matters for fire egress. The door contact sensor reports open/closed status back to the controller, so the system knows if a door's been forced or left ajar.
A worked example: reader and controller combined
Our own RFID Access Control Keypad with WiFi & Smart App, priced at £16.55, shows how far a single-door install can be simplified. It's a combined reader-and-controller unit: the keypad reads card, PIN or card-plus-PIN, stores up to 1000 users on-board, and outputs Wiegand 26 in and out to talk to a separate lock or a wider system.
There's no need for a rack-mounted controller box or software licence — the "brain" is built into the keypad itself.
Multi-site and multi-door estates are built around different assumptions entirely. Paxton10 supports up to 1000 doors and 1000 cameras from a single cloud dashboard, while platforms such as Brivo and Genetec Synergis focus on multi-site management, remote unlock and role-based access rights across estates of varying scale.
That scale of software licensing and centralised management is overkill for most UK single-door or small-office jobs, where a standalone keypad-controller combination covers the requirement at a fraction of the cost and complexity.
How does a door access control system work, step by step?
A user presents a credential, the reader converts it to a digital signal, the controller checks it against an authorised list, the relay fires if it matches, and the lock releases for an adjustable time window before re-locking automatically.
A door access control system works by capturing a credential, matching it against a stored authorised list, then firing a relay that releases the lock for a set time window. Every step in that chain — credential, reader, controller, relay, lock — has to be wired and configured correctly, or the door either won't open or won't secure.
The signal path
The sequence is consistent whether you're specifying a video access control system or a basic keypad:
- Present credential — a card, fob, PIN or fingerprint is offered at the reader.
- Reader reads it — the reader converts the credential into a digital signal.
- Controller checks it — the signal is compared against a stored list of authorised users.
- Relay fires — if the credential matches, the controller switches a relay.
- Lock releases — the door unlocks for an adjustable window, then re-locks automatically.
Our own RFID Access Control Keypad with WiFi & Smart App illustrates this at the wiring level: it's a WG26 standalone reader-controller, so it can act on its own or feed credential data to a separate access panel. Door-open time is adjustable, letting you set a quick release for a pedestrian door or a longer window for a loading gate.
It supports an exit button input — pressing the button inside fires the same relay as a valid card read, letting staff leave without presenting a credential.
A door contact is a magnetic sensor fitted to the door and frame that reports whether the door is physically shut or open — it's separate from the credential check and exists purely to confirm the door's real-world state. This is what lets a controller distinguish "unlocked by a valid credential" from "forced open," and it's the input that drives forced-door and door-held-open alarms.
A card reader, in plain terms, is the device mounted by the door that reads the credential — proximity card, fob or PIN pad — and passes that data to the controller; it doesn't make the access decision itself, it just reads and forwards.
Where WiFi and app control fit in
Standalone Wiegand keypads work without a network connection, but WiFi/Tuya models add remote management on top of the same relay-and-lock sequence. Our WiFi RFID Access Control Keypad with Door Controller runs on 12V–24V, supports WG26/44/56/58 for connecting external readers or panels, and takes OTA firmware updates over WiFi — useful for a door access control system for home or office use where you want to add or remove users from a phone app rather than reprogramming the keypad locally.
What are the different types of access control readers and locks?
Readers are grouped by credential type: PIN keypad, 125KHz proximity card, RFID with app control, or fingerprint. Locks split into fail-safe maglocks that unlock on power loss and fail-secure electric strikes that stay locked on power loss.
Readers are grouped by the credential they read — PIN keypad, 125KHz proximity/EM card, RFID with Tuya app control, or fingerprint — while locks split into fail-safe maglocks (unlock on power loss) and fail-secure electric strikes (stay locked on power loss). Choosing between them is really two separate decisions: how someone proves who they are, and what the door does if the mains or battery supply fails.
Readers: four stocked options compared
The £13.79 unit is the cheapest way into keypad or card entry and suits an indoor door where 1000 stored users is plenty for a small office. The WiFi RFID controller adds app-based remote unlock and a 12V–24V output, useful where you want to trigger a maglock or strike directly from the same box rather than wiring a separate controller — check current pricing at CCTV Master before ordering.
Match the IP rating to the door, not just the budget
An indoor keypad rated for dry conditions will fail early on an external gate — IP68/IP65 units are built for that exposure. The Tuya WG26/34 keypad's IP68 rating and the fingerprint lock's IP65 rating both mean the housing is sealed against dust and water jets or splashing to the relevant ingress standard, which matters on a gate post or an unsheltered external door. The plain 125KHz keypad and the WiFi RFID controller are not specified to the same ingress standard, so keep those on covered or internal entrances.
Maglock vs electric strike
Fail-safe maglocks release the moment power is cut, which is why fire routes and most final exit doors specify them — they default to open, not locked. Fail-secure electric strikes do the opposite: the door stays locked in a power cut and only releases on a valid credential, which suits stores, comms rooms or anywhere you don't want a blackout to leave the door swinging open.
Whichever type is fitted, a manual fail-safe override such as an exit push button or break-glass unit is the standard way to let someone leave without a credential, and is worth specifying alongside any maglock installation. Get your electrician or installer to confirm the override meets the relevant fire egress requirements for that specific door before wiring it in.
How does access control integrate with a CCTV system?
(angle section — differentiator)
The door controller's relay output can trigger a linked camera to record or snapshot on every access event, so the entry log and CCTV footage cross-reference each other automatically.
Yes: the door controller's relay or alarm output can trigger a linked camera to record or snapshot on every access event, so your entry log and CCTV footage cross-reference each other automatically. This is the single most useful upgrade a small site can make without buying an enterprise platform, and it works with the standalone kit most UK buyers already have.
The practical wiring point
Most standalone controllers — including a keypad-based door access control system like the 125KHz proximity unit that stores up to 1,000 users — expose a relay output alongside the door strike circuit. That same output, or the I/O on a WiFi Tuya keypad such as the WiFi RFID Access Control Keypad with Door Controller (WG26/44/56/58 compatible), can share a trigger line with an NVR's alarm input, or be polled directly by it.
Every valid card swipe or code entry then fires a linked camera to record a clip or pull a snapshot, giving you a timestamped video record of exactly who used which credential — the detail that settles a disputed entry when the access log alone just shows "card 0042, 14:32."
Where the ceiling sits
Be realistic about what standalone kit does and doesn't do. The controllers stocked here — the 125KHz keypad, the WiFi Tuya keypad, the IP68 Tuya WiFi Door Access Keypad, the fingerprint/RFID keypad — are standalone or app-managed devices, not enterprise platforms.
Systems like Paxton10 natively unify access control and video on one dashboard, scaling to 1,000 doors and 1,000 cameras with built-in triggers-and-actions logic between the two; other platforms such as Brivo and Genetec's Synergis take a similar unified approach, geared more towards multi-site management and remote control across estates. Standalone-plus-CCTV, wired through a shared relay/alarm-input line, is the practical wiring-level equivalent for a single door or small office — you get the cross-referenced footage without the unified software layer.
Where each approach fits
- Single door, home or small office: standalone keypad or fob controller plus an NVR alarm input covers the "who was at the door" question adequately.
- Multi-door office or small estate: still workable with standalone units per door, each wired into the same NVR, but log correlation across doors becomes manual.
- Larger multi-site estates: a unified platform such as Paxton10, Brivo or Synergis removes the manual cross-referencing entirely, at a different cost and complexity level than standalone kit.
The core takeaway: for most UK single-door and small-office installs, a standalone controller wired to trigger your existing CCTV recorder is the complementary layer that delivers video access control without needing a unified enterprise system — check compatibility with your own electrician or installer against the controller's wiring diagram before committing to a shared trigger line.
How do you wire and install a door access control system safely?
Run power from a mains-fed low-voltage supply into the controller, then out to the lock, reader and exit button, with the door contact wired as a separate monitoring loop. The door contact must run independently to report forced-open or held-open states.
A safe installation runs from a mains-fed low-voltage power supply into the controller, then out to the electric lock, the card reader and the exit button, with the door contact wired as its own separate monitoring loop rather than sharing a cable run. Getting this wrong doesn't just stop the door working — it can leave a fire exit locked when it should fail open, so the wiring sequence matters as much as the kit you buy.
The core signal path is always the same shape, even though connector types vary by model. On the WiFi RFID Access Control Keypad with Door Controller, the controller itself runs on a 12V–24V supply, with the reader, lock and exit button all landing on terminals at the controller rather than being daisy-chained to each other.
Elements you'll actually be wiring
Across access controllers in this category, the wiring elements typically include:
- Wiegand 26/44/56/58 in/out — the standard signalling protocols between an external card/fob reader and the controller, and separately for linking the controller onward to a host panel where one is used.
- NC (normally closed) lock support — for maglocks and strikes wired to fail in a known state if power is lost.
- Exit button — a simple push-to-release override wired directly into the controller so the door can be opened from inside without presenting a credential.
- Doorbell wiring — a separate low-voltage circuit on units that combine access control with a visitor call function.
- An adjustable open-time relay, typically 0–99 seconds — set on the controller to control how long the lock stays released after a valid credential or exit button press.
Full pin-outs and terminal layouts are model-specific — always follow the wiring diagram and instructions supplied with the exact unit you've bought rather than assuming one controller's terminal layout matches another's.
The door contact is the part most often wired wrong. It should run as its own monitoring loop back to the controller or alarm panel, separate from the lock and reader cabling, so the system can report door-forced or door-held-open states independently of whether the lock itself is energised.
Get the fail-safe/fail-secure decision right — and get an electrician
Whether a lock is wired fail-safe (unlocks on power loss, needed on most fire escape routes) or fail-secure (stays locked on power loss) is a life-safety decision, not just a wiring preference, and it needs to be made against the building's fire strategy rather than guessed on site.
CCTV Master supplies the access control kit — keypads, controllers, locks and readers — but does not carry out installations, so mains connection, containment and the fail-safe/fail-secure choice on fire doors should be handled by a qualified electrician or access-control installer who can confirm the work against the applicable building and fire regulations. Get that person involved before first fix, not after the lock's already screwed to the frame.
Recommended kit
For the setup above, this is the kit we'd recommend from our own range:
This article was researched and written by IT Master.
