A commercial exit door must remain unlocked from the inside during business hours, and more precisely, it must stay openable from the inside in a single motion, without a key, tool, or special knowledge, the entire time the space is occupied. That rule comes from federal workplace safety law and from the building and fire codes adopted by nearly every state and city. It applies whether one employee is inside stocking shelves at 6 a.m. or the store is packed with customers at noon. A keyed deadbolt on the main entrance is allowed for after-hours security, but only under specific conditions, and the deadbolt has to be disengaged whenever people are inside.
The Rule Behind the Rule
Two bodies of law converge on the same requirement. OSHA’s exit-route standard at 29 C.F.R. § 1910.36(d)(1) requires that employees be able to open an exit route door from the inside at all times without keys, tools, or special knowledge. A panic bar that locks only from the outside is fine, because it still lets people leave freely. Any device or alarm on an exit door that could restrict emergency use if it malfunctions is prohibited.1Occupational Safety and Health Administration. Design and Construction Requirements for Exit Routes
The building side of the rule lives in Section 1010.2 of the International Building Code, which most jurisdictions adopt in some form. Egress doors must be “readily openable from the egress side without the use of a key or special knowledge or effort.”2International Code Council. 2021 International Building Code – 1010.2 Door Operations NFPA 101, the Life Safety Code, sets the same standard from the fire-safety side.3National Fire Protection Association. NFPA 101 – Life Safety Code
The practical translation: one motion. One push of a bar, one turn of a lever, one press of a handle. If getting out requires turning a thumb-turn and then pulling a handle, the arrangement fails in most jurisdictions unless a specific exception applies.
What “Occupied” Means
The egress rule is not tied to posted store hours. It activates whenever the space is occupied by employees or visitors. A manager doing paperwork alone at 5 a.m., a cleaning crew at 11 p.m., a contractor working after closing — all trigger the requirement. If someone is inside, the door must be openable from within in one motion.
Private residences fall outside these commercial mandates because they serve a small, known group of occupants. But once a building is used for business, including a home business that regularly receives customers, local authorities may apply the commercial standard.
The Sign That Makes a Keyed Lock Legal
The exception most small business owners care about is the one that lets them use a keyed deadbolt on the main entrance for after-hours security. Under Section 1010.2.4 of the International Fire Code, a key-operated lock on the egress side of the main door is permitted when four conditions are all met:
- The building is in Group A with an occupant load of 300 or fewer, or in Groups B, F, M, or S, or is a place of religious worship.
- The locking device is readily distinguishable as locked, so occupants can see at a glance whether it is secured.
- A durable sign is posted on the egress side, on or next to the door, reading “THIS DOOR TO REMAIN UNLOCKED WHEN THIS SPACE IS OCCUPIED,” in letters at least one inch high on a contrasting background.
- The fire code official can revoke permission to use the key-operated lock at any time for cause.
The sign is the piece owners forget. A deadbolt installed without the posted notice converts a compliant arrangement into a violation. And the sign is not a substitute for actually unlocking the door: during occupied hours, the deadbolt has to be turned to the unlocked position. Locking the deadbolt while employees are inside because “we can still open it from within” is a violation, even if the mechanics of your lock would allow it.
The exception is also limited to the main exterior door. Side doors, rear exits, and interior egress doors along the exit path do not get to use a key-operated lock in place of code-compliant hardware.
Hardware You Cannot Use During Business Hours
Some devices are prohibited on any active exit, regardless of signage. Padlocks, chains, slide bolts, surface bolts, and any secondary device that requires a tool or special knowledge to release from the egress side fall into this category. An inspector who finds a chained or padlocked exit while the building is occupied will typically issue an immediate citation and order the device removed before the business can continue operating.
Door hardware also has to sit within reach. Handles, pulls, latches, and locks must be installed between 34 and 48 inches above the finished floor.5International Code Council. 2021 International Building Code – 1010.2.3 Hardware Height The Americans with Disabilities Act adds an operability layer on top: hardware must work with one hand, cannot require tight grasping, pinching, or twisting of the wrist, and cannot demand more than five pounds of operating force.6United States Access Board. Chapter 4 – Entrances, Doors, and Gates Round doorknobs fail this test for many people with limited hand strength, which is why lever handles dominate commercial buildings.
Alternatives When Security Is the Real Concern
Owners who want more than a keyed deadbolt on the main door usually have a specific worry: shoplifting, unauthorized after-hours entry, or controlling who walks through a back door. The codes recognize this and permit two categories of electrically controlled hardware, both with strict release requirements.
Delayed Egress Locks
A delayed egress lock keeps a door latched for a short window after someone pushes the exit hardware, triggering an alarm so staff can respond. Under IFC Section 1010.2.13.1, the maximum delay is 15 seconds of applied force, which the local authority can extend to 30 seconds but no longer.7International Code Council. 2021 International Fire Code – 1010.2.13.1 Delayed Egress Locking Systems The system must release immediately on fire alarm or sprinkler activation, on loss of power, and on a manual command from the fire command center or another approved location. Once released, it does not automatically re-engage; someone has to reset it manually.
Sensor-Released Electromagnetic Locks
Maglocks are common in lobbies and controlled-access areas. The IBC allows sensor-released electromagnetic locks on egress doors in every occupancy except Group H, if they meet a specific list of requirements. A motion sensor on the egress side has to detect anyone approaching and unlock the door automatically. Sensor failure or power loss must release the lock. A manual “PUSH TO EXIT” button, installed between 40 and 48 inches above the floor and within five feet of the door, must cut power to the lock directly and keep the door unlocked for at least 30 seconds. Fire alarm or sprinkler activation must also release the lock until the alarm is reset.8UpCodes. 1010.2.12 Sensor Release of Electrically Locked Egress Doors
Neither system frees an owner from the underlying principle. Every one of these arrangements is designed so that a person inside can leave quickly under emergency conditions. Healthcare facilities with psychiatric or memory-care units, and schools with lockdown hardware, have their own narrow allowances with additional safeguards; ordinary retail, office, and hospitality businesses do not qualify for those carve-outs.
What Non-Compliance Costs
OSHA treats a locked exit door as a serious or willful violation. The maximum penalty for a willful or repeated violation is $165,514 per occurrence, an amount that held steady into 2026 after no inflation adjustment was applied.9Occupational Safety and Health Administration. OSHA Penalties An inspector can issue the citation on the spot, and the employer has to correct the hazard immediately.
Local fire and building authorities layer their own consequences on top. Immediate citations, orders to vacate, and revocation of a certificate of occupancy are all on the table. Penalty amounts vary by jurisdiction, and repeat offenses or conditions that endanger large numbers of people escalate quickly.
The bigger exposure is civil. When a locked or chained exit contributes to injuries during a fire or crowd emergency, the building owner faces a premises liability claim, and the code violation itself often supplies proof of negligence per se. A business owner whose exit door violated code at the time of an injury has a difficult defense, because the combination of a regulatory violation and a foreseeable harm is what negligence law is built to punish. Arguments about theft prevention rarely persuade juries when someone was injured trying to get out.
The compliance picture is simple to state and cheap to fix. During occupied hours, every exit opens from the inside in one motion, with no key and no special knowledge. If you want a keyed deadbolt on the main door for after-hours use, install it, disengage it when you open, and post the required sign. Everything else is either an engineered alternative with its own strict rules or a violation waiting to be cited.