Introduction
Picture a commercial building losing power during a fire alarm. Should the door unlock to let people out, or stay locked to keep a restricted area secure? That single question sits at the center of every fail-safe versus fail-secure decision.
Getting it wrong isn't a minor spec error. The wrong lock function can trap occupants, expose a server room, or void a fire door's listing. Many project teams struggle with this choice because the terms sound self-explanatory but aren't.
This article breaks down what fail-safe and fail-secure actually mean, and where each applies. Door function, fire rating, and adopted codes—not the labels alone—should drive your decision.
Key Takeaways
- Fail-safe unlocks when power drops; fail-secure stays locked until power or an override returns.
- Free egress depends on the full opening, not the fail-safe or fail-secure lock label.
- Choose fail-safe for emergency re-entry; choose fail-secure to protect restricted spaces during outages.
- Maglocks, electric strikes, and electromechanical locks each behave differently on power loss.
- Confirm building code, fire code, and AHJ requirements before ordering hardware.
Fail-Safe vs. Fail-Secure: Quick Comparison
Use this side-by-side before the deeper breakdown:
| Factor | Fail-Safe | Fail-Secure |
|---|---|---|
| Power-loss state | Secure/access side unlocks | Secure/access side stays locked |
| Primary priority | Emergency access, re-entry, life safety | Protecting restricted spaces during an outage |
| Typical hardware | Electromagnetic locks; some electromechanical locks and trim | Electric strikes, electromechanical locks, latch-retraction devices |
| Fire-door fit | Fail-safe strikes often lack positive-latching listings | Listed fail-secure strikes commonly specified on rated openings |
| Egress behavior | Access-side unlock ≠ occupant exit ability | Mechanical free egress often still available (verify per product) |
Two labels get misread often:
- Fail-safe is not "safer" — it only means the lock releases when power is lost
- Fail-secure is not a trap — most non-maglock hardware still allows exit from the inside
What Is a Fail-Safe Door Security System?
Fail-safe hardware unlocks on the secure or access side the moment electrical power disappears, whether from an outage, a fire-alarm signal, or a deliberate system release. The word "safe" here refers to reduced barriers to emergency access, not maximum protection against intruders.
That distinction matters because fail-safe behavior and free egress are two separate questions. Egress compliance depends on the entire opening: the lock, the latch, the exit device, release controls, the fire-alarm interface, and how the door is configured. A fail-safe strike on the wrong door doesn't automatically make that door code-compliant for exit.
Common fail-safe hardware includes:
- Electromagnetic locks (typically fail-safe by design)
- Certain electromechanical mortise locks configured for fail-safe operation
- Electrified panic-hardware trim set to release on power loss
In most electrified hardware other than maglocks, free egress from the opposite side can still work regardless of the secure-side fail-safe function.
The tradeoff is real: a power failure or fire-alarm release can leave the secure side unlocked precisely when unauthorized entry is most likely. Plan for that exposure in the security design, not after an outage.
Use Cases of Fail-Safe Systems
Fail-safe operation tends to show up where re-entry or release is the priority:
- Stairwell doors that occupants may need to re-enter from the stair side
- Certain controlled-egress healthcare units with staff-monitored release
- Elevator-lobby exit-access doors under specific building-system conditions
- Openings required to release automatically under a defined emergency trigger
High-traffic public entries deserve extra caution here. Releasing a lobby door during an alarm might support emergency movement, but it can also open a facility to unmonitored access. Security, monitoring, and code review still apply.
The 2024 IBC's Section 1010.2.6 addresses stairway doors specifically, generally requiring interior stair doors to open from both sides without special knowledge, subject to stated exceptions. Local amendments and the applicable NFPA standards should be checked for your specific application. Don't assume one rule covers every stairwell.
Fail-safe hardware also needs coordination beyond the lock itself. The door's fire rating, frame, exit device, power supply, fire-alarm interface, and signage all have to work together.
Custom Metal Products builds the door-and-frame side of that opening: custom commercial hollow metal doors and frames, including UL-labeled fire-rated assemblies, prepared for the hardware your project specifies. We don't supply the electronic lock, but the opening has to accept it correctly.
What Is a Fail-Secure Door Security System?
Fail-secure hardware stays locked on the secure or access side when power is removed. Getting through requires restored power, a mechanical key, a credentialed release, or another approved override. "Secure" here means maintaining access control during a power interruption, not eliminating every life-safety obligation.
Here's the part people often miss: a fail-secure access side can still coexist with free egress from the occupied side. If the lockset, panic hardware, or exit device is designed and installed for that purpose, someone can exit even while the exterior stays locked.
Common fail-secure hardware includes:
- Fail-secure electric strikes
- Electromechanical locks configured for fail-secure operation
- Electrified trim on exit devices
- Electric latch-retraction devices, where applicable
Product availability and exact behavior vary by manufacturer, so check the specific model before assuming function.
The main benefit is straightforward: restricted spaces stay protected during an outage. The tradeoff is heavier reliance on reliable power and a clear emergency release plan. Specifying fail-secure where re-entry is actually required is a real risk.
Use Cases of Fail-Secure Systems
Fail-secure operation is commonly considered for spaces where unauthorized entry during a power failure is the bigger threat:
- Server rooms and data closets
- Electrical rooms and mechanical spaces
- Records areas and controlled storage
- Mailrooms and similar restricted access points
Fire-rated openings deserve their own conversation. According to Allegion's guidance on fail-safe versus fail-secure hardware, fail-secure electric strikes are commonly specified on fire doors. Fail-safe strikes often lack the positive latching and listing that rated openings require. That is a strike-specific limitation, so verify the exact product listing before specifying.
Every fail-secure opening should be checked for:
- Manual egress and emergency override
- Firefighter access and accessibility
- Fit with the building's emergency procedures
On commercial projects, this often ties into door-schedule changes, replacement openings, and last-minute hardware substitutions. Close coordination between distributors, installers, hardware suppliers, and the door-and-frame manufacturer matters more than most teams expect.
Fail-Safe vs. Fail-Secure: What Is Better?
Neither option wins by default. The right choice depends on whether the opening's dominant need is emergency release, controlled re-entry, occupant egress, or security during a power loss.
Run through this decision framework for each opening:
- Identify the door's role. Is it on an exit route, serving a stairwell or elevator lobby, protecting a restricted area, or separating occupancy zones?
- Map the power-loss scenarios. What should happen during a normal outage, a fire-alarm activation, sprinkler activation, access-control failure, and a deliberate emergency release?
- Confirm the fire rating. Is the opening rated, and is the selected hardware listed and compatible with that specific door and frame?
- Verify safe exit. Can occupants leave without unsafe delay, and do emergency responders have an approved access method?
After you answer those questions, apply the function this way:
- Fail-safe: Use only where code, a life-safety plan, or an operational requirement calls for release or re-entry in that emergency condition.
- Fail-secure: Use when access-side security during power loss is the priority—and the full opening still provides compliant egress plus an emergency override.
Most facilities end up using both. A stairwell might need fail-safe re-entry while the server room down the hall needs fail-secure protection. Design door by door. Applying one default function across an entire building schedule is how mistakes end up on a punch list.
Real-World Examples/Case Studies
Consider two openings in the same commercial building. This comparison is illustrative, not a client project, but it shows how fail-safe and fail-secure choices diverge in practice.
Opening 1: The stairwell. This door needs emergency re-entry so occupants moving through the stairwell during an evacuation can get back into the corridor if conditions change. A fail-safe electromechanical lock unlocks the stair-side lever when power drops, while the latch mechanism stays engaged and free egress remains available from the opposite side.
Opening 2: The server room. This door protects equipment that can't be exposed during a power failure. A fail-secure electric strike keeps the access side locked, while the mechanical latch and interior hardware still allow anyone inside to exit.
Decision factors that separated these two openings:
- Occupancy and who needs to move through each door
- Egress direction and whether re-entry was actually required
- Fire rating and whether the frame/door assembly needed a UL listing
- Access-side risk (equipment protection vs. life-safety movement)
- How each door needed to respond to a fire-alarm signal
Manufacturer documentation shows a hard limit: certain fail-secure electric strikes carry UL 10C fire-rated listings for 3-hour single doors and 1½-hour double doors in fail-secure mode only. Fail-safe mode isn't an option on that same listed product.
The project lesson: an opening schedule should specify the required lock behavior, door and frame rating, hardware listing, release sequence, and a responsible reviewer before anything goes into fabrication. Catching a mismatch on paper is a lot cheaper than catching it after installation.
If you're a distributor, architect, contractor, or installer working through openings like these, Custom Metal Products can build the hollow metal door and frame side to match. That includes double-egress assemblies and UL-labeled fire-rated openings coordinated with the hardware your project calls for. Reach out at (866) 893-3338 or info@custommetalproducts.bz.
Conclusion
Fail-safe releases the secure side when power drops. Fail-secure keeps that side locked. Neither term by itself tells you whether occupants can exit safely.
The real work is connecting that choice to life safety, security during outages, fire-door latching requirements, and emergency access. Access-control hardware also has to coordinate with the hollow metal opening itself. Skip that coordination and you risk a door that fails inspection or, worse, fails someone in an emergency.
Before finalizing any specification, verify current code requirements and product listings with your AHJ and a qualified door-hardware professional. The labels are a starting point, not a substitute for that review.
Frequently Asked Questions
What is fail-secure hardware?
Fail-secure hardware stays locked on the secure side when power is removed. Mechanical egress and emergency release are still often available—confirm both on the specific hardware and opening design.
What is the difference between fail-safe and fail-secure doors?
Fail-safe hardware unlocks on the secure side when power is lost; fail-secure hardware stays locked on that side. The correct choice depends on code requirements, egress needs, emergency access, and security priorities for that specific opening.
What is a fail-safe door?
Fail-safe hardware unlocks on the secure side when power is removed. It is often used where emergency access or re-entry is required, but you still need to verify the applicable code and full opening design.
Can a fail-secure door still allow people to exit during a power outage?
In most cases, yes. Free egress usually depends on the latch and exit device design, not the secure-side lock function. Verify this on the specific hardware you're specifying.
Which codes govern fail-safe and fail-secure hardware in the US?
The International Building Code (IBC) and NFPA standards, including NFPA 80 for fire doors and NFPA 101 for life safety, govern these requirements. Local amendments and your AHJ's interpretation apply on top of the base code.
