Smart Lock Technology: Deadbolt Grades, Connectivity Protocols, and ANSI/BHMA Security Standards

Volume I  ·  July 2026  ·  2,357 words

A smart lock replaces the interior thumb turn of a deadbolt with a motorized mechanism controlled by a digital authentication system — a PIN code, a smartphone, a fingerprint, or a proximity token. The lock must perform two functions that are in direct engineering tension: it must prevent unauthorized physical entry with resistance equivalent to or exceeding the manual deadbolt it replaces, and it must authenticate authorized users with sufficient reliability that keyless entry is not less convenient than carrying a physical key. The failure mode of either function is asymmetric. A lock that fails to authenticate traps the resident outside. A lock that fails to resist physical attack leaves the door no more secure than a latch. A lock that fails at both — authenticating an intruder or yielding to a bump key — converts the front door from a security boundary into a liability. This analysis examines the four independent specifications that determine whether a smart lock improves or degrades residential door security: the ANSI/BHMA deadbolt grade, the connectivity architecture, the authentication mechanism, and the power system design.

ANSI/BHMA Deadbolt Grades: The Physical Security Baseline

The Builders Hardware Manufacturers Association (BHMA) certifies deadbolts under ANSI/BHMA A156.36, which assigns three grades based on cycle testing, picking resistance, impact resistance, and bolt throw distance. The grade is not a marketing designation — it is a numerical threshold for measurable physical performance.

Grade 1 (Commercial) deadbolts must withstand 1,000,000 open/close cycles, 10 door strikes of 360 foot-pounds each, and a minimum bolt throw of 1 inch with a hardened steel insert or roller pin that resists sawing. A Grade 1 deadbolt tested to UL 437 resists picking, drilling, and bumping for a minimum of 5 minutes of direct attack with professional tools. The Schlage B60N and Mul-T-Lock Hercular are representative Grade 1 deadbolts. Smart locks in this grade include the Schlage Encode Plus and the Yale Assure Lock 2 with the Grade 1 bolt option. Grade 1 locks are specified for commercial entry doors and high-traffic residential applications where, as BHMA puts it, "abuse is expected."

Grade 2 (Residential Heavy-Duty) deadbolts — the minimum recommended for exterior residential doors — must withstand 800,000 cycles and 5 strikes of 250 foot-pounds. Bolt throw is 1 inch with a minimum of one hardened steel pin. The Kwikset SmartKey 980 and Schlage B560 are representative Grade 2 deadbolts. Most consumer smart locks — the August Wi-Fi Smart Lock (4th gen), the Wyze Lock Bolt, the Level Lock+ — operate at Grade 2 or, in some cases, are ungraded by BHMA. An ungraded lock has not been submitted to independent testing and its physical resistance is determined solely by manufacturer claims.

Grade 3 (Residential Basic) deadbolts are rated for 400,000 cycles and a single impact test. These are interior door locks or exterior deadbolts installed in low-risk entry points. No smart lock worth installing on an exterior door operates at Grade 3, and a consumer who installs one on an exterior door is relying on the door frame and strike plate — not the deadbolt — to resist forced entry.

ANSI grading is independent of smart features. A lock with Wi-Fi, fingerprint authentication, Apple Home Key, and an elegant industrial design that lacks a BHMA grade has an undetermined physical security envelope. The deadbolt grade should be determined before any smart feature is evaluated — because the smart features operate on top of the deadbolt, and a compromised physical lock renders the digital authentication system irrelevant.

Connectivity Architecture: How the Lock Communicates

Smart lock connectivity determines how the lock receives commands, reports status, and integrates with broader smart home systems. The four protocols in current use — Bluetooth Low Energy (BLE), Z-Wave, Wi-Fi, and Thread — differ fundamentally in range, power consumption, latency, and dependence on external hardware.

Bluetooth Low Energy (BLE) is the baseline connectivity method on nearly every smart lock. It provides short-range (30–50 feet, attenuated by walls and doors) direct communication between the lock and a smartphone without requiring a hub or an internet connection. BLE's primary advantage is low power consumption — a lock using only BLE can operate for 6–12 months on four AA batteries — and its primary limitation is that remote access (locking or unlocking from outside Bluetooth range) requires a bridge device. The August Smart Lock uses BLE as its default protocol and requires the August Connect bridge ($79, plugs into a wall outlet within Bluetooth range of the lock) for Wi-Fi connectivity. The Level Lock+ uses BLE and requires a Level Connect bridge for HomeKit remote access.

Z-Wave (908.42 MHz in North America) operates on a sub-GHz frequency band that penetrates walls and doors more effectively than 2.4 GHz protocols. Z-Wave locks — including the Yale Assure Lock 2 Z-Wave variant and the Schlage Connect — require a Z-Wave hub (Samsung SmartThings, Hubitat, Ring Alarm, or similar). The hub provides internet connectivity for remote access, and the lock itself communicates over Z-Wave, consuming approximately 10–15 mA during active transmission and microamps in standby. Z-Wave's mesh topology is self-healing: each mains-powered Z-Wave device repeats signals, extending range far beyond Bluetooth's single-hop limit. The trade-off is hub dependence — without a Z-Wave hub, the lock has no connectivity.

Built-in Wi-Fi is the simplest architecture from an infrastructure standpoint — the lock connects directly to the home's 2.4 GHz Wi-Fi network without an intermediary hub or bridge. The Schlage Encode Plus, the Ultraloq Bolt Fingerprint, and the Wyze Lock Bolt (via its included Wi-Fi gateway) use this approach. The engineering trade-off is battery life: Wi-Fi is a power-hungry protocol. The Schlage Encode Plus specifies 4–6 months of battery life on four AA alkaline cells, compared to 12 months for BLE-only competitors. The August Wi-Fi Smart Lock (4th gen) addresses this with a proprietary low-power Wi-Fi implementation that achieves approximately 6 months of battery life on two CR123A lithium cells. Direct Wi-Fi locks are the appropriate choice when a Z-Wave hub is not already installed and the user requires remote access without adding a bridge device.

Thread (IEEE 802.15.4, IPv6-based) is the newest entrant. Thread is a mesh protocol designed for low-power IoT devices, combining Z-Wave's mesh topology with native IP addressing. The Schlage Encode Plus was the first smart lock to support Thread, and its Thread radio enables Apple Home Key support (NFC tap-to-unlock via iPhone or Apple Watch) with HomePod or Apple TV serving as the Thread border router. Matter — the application-layer standard built on Thread and Wi-Fi — has announced smart lock support in Matter 1.3, but as of mid-2026, native Matter smart locks are limited to a handful of models and interoperability with non-Apple ecosystems remains in development. Thread reduces latency compared to BLE bridges and consumes less power than Wi-Fi, but the Thread border router requirement (a HomePod mini, Apple TV 4K, or Nest Hub Max) introduces the same hub-dependence as Z-Wave.

Authentication Mechanisms

Smart locks authenticate users through four physical mechanisms, each with a distinct failure mode: PIN codes (shoulder surfing, code sharing), biometric fingerprint sensors (false reject rate, sensor degradation in rain and cold), smartphone proximity via BLE signal strength (relay attacks), and NFC tokens including Apple Home Key (requires compatible hardware, no battery concern since the phone provides power via NFC).

Apple Home Key, supported on the Schlage Encode Plus and the Level Lock+, stores a digital key in the Apple Wallet that authenticates via NFC — the user holds the iPhone or Apple Watch near the lock's keypad or exterior escutcheon. The authentication exchange uses the Secure Element on the phone, the same hardware-isolated processor that stores credit cards for Apple Pay, and the key remains functional in Power Reserve mode (up to 5 hours after the iPhone battery is depleted). No other smart lock authentication method matches Home Key's combination of hardware-isolated credential storage and zero-dependency operation during phone battery depletion.

PIN code authentication — the fallback on every smart lock — presents a key management problem distinct from key management in physical locks. A physical key can be identified only when it is produced; a PIN code can be shared by text message, written on a notepad, or observed from a Ring doorbell camera recording. The Schlage Encode Plus stores up to 100 unique codes with time-restricted access (e.g., a dog walker code valid Tuesday and Thursday from 1:00–3:00 PM). The Yale Assure Lock 2 supports 250 codes with similar scheduling. The August lock limits code generation to the smartphone app — there is no exterior keypad — which means guests without the August app cannot be issued a PIN and must use a physical key or be let in remotely by the owner.

Fingerprint sensors on smart locks are capacitive sensors — the same technology as smartphone fingerprint readers — configured as a strip (Ultraloq Bolt) or a circular sensor integrated into the exterior escutcheon (Yale Assure Lock 2 with the keypad and fingerprint module). Capacitive sensors measure the dielectric difference between fingerprint ridges and valleys on the skin surface. They fail when the finger is wet, when the sensor surface is wet or frozen, and when the user's skin is dry or calloused — conditions common on exterior doors during winter. A lock with only fingerprint authentication (no keypad fallback) will deny access in rain or freezing temperatures when the sensor cannot acquire a reading. Fingerprint unlock is a convenience feature best paired with a PIN code fallback, not relied upon as the sole electronic authentication mechanism.

Power System Design

Every smart lock runs on batteries, and every smart lock will exhaust its batteries. The power system design — battery type, battery access location, and low-battery warning behavior — determines whether battery exhaustion is an inconvenience (the lock warns for two weeks before dying) or a lockout event (the lock dies without warning on the exterior side of the door).

AA alkaline cells are the most common power source (Schlage Encode Plus, Yale Assure Lock, Level Lock+). Four AA cells at 1.5 V each provide 6 V nominal, and the lock's low-voltage cutoff — typically 4.2–4.5 V — triggers a low-battery warning via the companion app, a flashing LED on the lock, and, on some models, an audible chirp. The warning activates when approximately 10–20% of battery capacity remains, providing 2–4 weeks of normal operation before the lock shuts down. Lithium AAs (Energizer Ultimate Lithium) extend cold-weather capacity and are recommended by Schlage for exterior locks in regions where temperatures drop below freezing; alkaline cells lose approximately 50% of their capacity at 0°F.

The August Wi-Fi Smart Lock uses two CR123A lithium cells — a camera battery form factor — providing higher energy density than AAs at the cost of less common availability. The Wyze Lock Bolt uses four AA cells but includes a micro-USB port on the interior escutcheon for emergency power: a portable USB battery pack pressed against the port can power the lock for a single unlock cycle if the batteries are completely dead. This is the only consumer smart lock with an emergency external power input accessible from outside, and its absence on competing products means that a lock with dead batteries and no physical keyhole (the Level Lock+ and the Ultraloq Bolt in certain configurations) requires either removing the entire lock from the door to access the interior battery compartment or calling a locksmith to drill the lock.

The physical key override is the power-system-independent fallback. A smart lock that replaces the entire deadbolt assembly but retains a keyed cylinder on the exterior — the Schlage Encode Plus, the Yale Assure Lock 2, the August in its retrofit configuration that preserves the existing exterior keyhole — provides a mechanical access path when all electronics fail. A lock that eliminates the exterior keyhole entirely to achieve a minimalist design (the Level Lock+, the Ultraloq Bolt Touch) replaces the key with a battery-dependent backup that fails simultaneously with the primary mechanism. Residents who install a keyhole-free smart lock are betting that the low-battery warning system is reliable enough to prevent a lockout, and the historical failure rate of that bet — dead-battery lockouts are among the most common smart lock support calls — suggests it is not a bet worth taking on an exterior door with no secondary entry point.

Retrofit vs Full Replacement Installation

Smart locks fall into two installation categories: retrofit locks that replace only the interior thumb turn while preserving the existing deadbolt and exterior keyhole hardware, and full-replacement locks that replace the entire deadbolt assembly including the exterior escutcheon and the strike plate.

Retrofit locks (August Wi-Fi Smart Lock, Level Bolt) install in 10–15 minutes and require no modification to the door or the exterior hardware. They preserve the existing keyed cylinder, which means the exterior appearance of the door is unchanged, the existing key continues to work, and any building or HOA restrictions on exterior hardware modification are irrelevant. The trade-off is that the smart features are invisible from the exterior: the door looks like a conventional deadbolt, and visitors without the app see only a keyhole, not a keypad. The August includes an optional wireless keypad ($59) that mounts on the exterior door frame and communicates with the lock via BLE, adding PIN code entry without modifying the deadbolt.

Full-replacement locks (Schlage Encode Plus, Yale Assure Lock 2, Ultraloq Bolt) require removing the existing deadbolt entirely — the exterior escutcheon, the bolt mechanism, and the interior thumb turn — and replacing them with the smart lock assembly. Installation time is 20–40 minutes with a Phillips screwdriver, and the result is a keypad or fingerprint sensor visible from the exterior. The full-replacement approach provides a cohesive exterior appearance and integrates all authentication mechanisms in a single hardware unit, but it requires a door preparation that matches the lock's form factor: a 2⅛-inch cross-bore for the lock body, a 1-inch edge bore for the bolt, and a door thickness between 1⅜ and 1¾ inches. A door with non-standard preparation (1½-inch cross-bore on older doors, doors thinner than 1⅜ inches, or metal doors with integrated lock pockets) may not accept a full-replacement lock without modification.