← Knowledge Base
DOOR HARDWAREACCESS CONTROLLIFE SAFETY

Fail-Safe vs. Fail-Secure
Door Hardware That Saves Lives

When the power goes out, does your door lock or unlock? The answer depends on whether the hardware is fail-safe or fail-secure — and getting it wrong can trap people in a fire or leave your building wide open.

By Stanislav Samek, Samektra · 10 min read · Last updated April 23, 2026

The Question That Could Save a Life

Imagine a hospital at 2 AM. The power goes out. Every electrified door in the building is about to do one of two things: lock or unlock. For a patient trying to escape a fire in a smoke-filled corridor, the answer to that question is the difference between life and death.

That's why understanding fail-safe vs. fail-secure hardware isn't just an academic exercise — it's a fundamental life safety concept that every facility manager, safety professional, and contractor needs to understand.

The Core Difference

🔓

Fail-Safe

Power OFF = Door UNLOCKED

When power is removed (outage, fire alarm, emergency), the door unlocks automatically. Power must be continuously applied to keep the door locked. Think: “safe for people to escape.”

🔒

Fail-Secure

Power OFF = Door LOCKED

When power is removed, the door remains locked on the secure side (outside). Power must be applied to unlock. Think: “secure against unauthorized entry.”

Critical clarification: These terms describe the behavior of the secure side (key side / outside) of the door — not the egress side. In almost all configurations, the egress side always allows free exit regardless of power state. A person on the inside can always get out NFPA 101, §7.2.1.

The Most Common Misconception

Many people assume that all egress doors must use fail-safe hardware. This is not correct. The confusion comes from conflating two different things:

Controlling Ingress (Entry)

Most access-controlled doors restrict who can enter while allowing anyone to exit freely. The lock on the outside (card reader side) can be fail-secure — it stays locked during outages, keeping the building secure. The inside always has free egress via lever or push bar.

Controlling Egress (Exit)

When electrified hardware affects the ability to exit, fail-safe is mandatory. The door must unlock on the egress side when power is lost so people can escape. This is non-negotiable for life safety.

In practice, fail-secure is far more common than fail-safe for standard access control. Think about it: if your office entrance used fail-safe hardware, every power outage would leave your front door unlocked — a security nightmare.

Where Each Type Is Required

🔓 Fail-Safe Required (egress is affected)

Electromagnetic locks (mag locks)

The magnet holds the door closed. Power loss must release it for egress.

NFPA 101, §7.2.1.6

Delayed egress locks

The 15/30-second delay system must release on fire alarm or power loss.

NFPA 101, §7.2.1.6.1

Controlled egress (healthcare/behavioral)

Locked psych units or dementia wings must unlock when fire alarm activates or power is lost.

NFPA 101, §7.2.1.6.2

Elevator lobby locks

Must release on fire alarm for elevator recall and firefighter access.

IBC §3006.3

Stairwell reentry locks

Interior stairwell doors must allow re-entry to floors when locked. Fail-safe allows remote unlock during emergencies.

IBC §1010.1.9

🔒 Fail-Secure Typical (ingress controlled, egress always free)

Card reader access doors (offices, hospitals, schools)

Outside locked by default, badge to enter. Inside lever/push bar always works for exit.

Electric strikes on standard doors

Strike holds latch engaged until access is granted. Free egress via inside lever.

Server rooms and restricted areas

Must remain locked during power outages for security. Egress via panic hardware inside.

Exterior entrance doors

Cannot afford to unlock during every power outage. Badge or key for entry, free exit.

The Fire Door Rule

Electric strikes on fire-rated doors MUST be fail-secure

This is a code requirement that catches many people off guard. Electric strikes installed on fire door assemblies must be fail-secure and listed to UL 10C or NFPA 252. Fail-safe strikes cannot be used on fire doors because the door must remain positively latched to maintain its fire rating during a power loss NFPA 80, §6.4.4.

Think about it: in a fire, the power may go out. If the electric strike were fail-safe, the fire door would be unlatched — defeating its entire purpose as a fire barrier. The door must stay latched and closed to contain fire and smoke.

The Egress Non-Negotiables

Regardless of whether hardware is fail-safe or fail-secure, NFPA 101 and IBC require these egress fundamentals for every door in the means of egress:

One motion to unlatch

A single operation (turn lever, push bar) must unlatch the door for exit. No two-step processes.

NFPA 101, §7.2.1.5.2

No special knowledge

No key, tool, code, or special training required to exit. Any person must be able to operate the hardware.

NFPA 101, §7.2.1.5.2

No tight grasping

Door hardware must be operable without tight grasping, pinching, or twisting of the wrist (ADA compliant).

NFPA 101, §7.2.1.5.10

Proper mounting height

Release hardware must be 34–48 inches above the floor (with limited exceptions for childcare, etc.).

NFPA 101, §7.2.1.5.10

Healthcare Spotlight: Controlled Egress

Healthcare facilities have a unique challenge: some patients (dementia, psychiatric, pediatric) must be prevented from leaving unsupervised, but the door must still allow escape during a fire. This is the controlled egress arrangement NFPA 101, §18.2.2.2.5.

✓The building must be fully protected by an approved automatic sprinkler system
✓Staff can unlock the door at any time using a switch at the nurses' station
✓The door must unlock automatically upon fire alarm activation (fail-safe)
✓The door must unlock on loss of power to the locking system (fail-safe)
✓The clinical needs of the patient must justify the locked door
✓Signage must indicate the locking arrangement and how to request release

Quick Reference Table

ScenarioHardware TypeWhy
Office card reader doorFail-SecureStays locked during outages for security
Hospital psych unit exitFail-SafeMust unlock on alarm/power loss for egress
Mag lock on exit doorFail-SafeMagnet releases when power is lost
Electric strike on fire doorFail-SecureMust stay latched to maintain fire rating
Delayed egress (15/30 sec)Fail-SafeReleases on fire alarm or power loss
Elevator lobby lockFail-SafeReleases for elevator recall / firefighter access
Stairwell reentry lockFail-SafeAllows floor reentry during emergencies
Server room entranceFail-SecureSecurity maintained during power outages

This article was inspired by an excellent deep-dive from I Dig Hardware by Lori Greene — one of the best resources on door hardware compliance. Shared with us by Donald Bell, a life safety professional who keeps his team sharp. Thanks, Donald.

Frequently Asked Questions

What does fail-safe actually mean?
Fail-safe means the lock UNLOCKS when power is removed. This is used on doors in the means of egress where people must be able to exit during an emergency — including every door that a stairwell or exit discharges into. Mag-locks are almost always fail-safe because they require continuous power to hold the door closed. Remove power, the magnet releases, the door opens.
What does fail-secure mean?
Fail-secure means the lock STAYS LOCKED when power is removed. This is used for security on doors where you want to prevent unauthorized entry even during a power loss — exterior perimeter doors, server rooms, medication rooms, behavioral health unit entries. Fail-secure electric strikes are common because they preserve the security function during power events. On the egress side, mechanical free egress (a lever or push bar that retracts the latch) must still work regardless of lock state.
Are mag-locks allowed on doors in the means of egress?
Only with specific code-compliant release methods per NFPA 101 §7.2.1.6 and IBC §1010.2. The door must release automatically on fire alarm activation AND loss of power AND activation of a manual release device on the door (the "request-to-exit" sensor or push button). Some occupancies permit delayed-egress mag-locks with a 15-second (or 30-second in higher-hazard occupancies) release after a 1-second delay. Chains, padlocks, and straight key-operated deadbolts on egress doors are violations — full stop.
Does every electrified door need to release during a fire alarm?
Every electrified lock on an egress path must release on fire alarm activation. NFPA 72 §21.9 and NFPA 101 require the fire alarm system to interface with the access control system so that lock release is automatic, verified, and monitored. This release must be tested annually — a functional test where the alarm is activated and every electrified door on the egress path is physically checked to confirm release.
Can an exterior door be fail-secure?
Yes, on the outside (entry) face to maintain security during a power loss. The egress side must always provide mechanical free egress — a lever handle or exit device that retracts the latch regardless of lock state or power. This is the standard configuration for office buildings, retail, and secure facilities: locked to enter, always free to exit.
What is the difference between an electric strike and an electrified lockset?
An electric strike is mounted in the door frame and holds or releases the door latch. Electric strikes come in both fail-safe and fail-secure configurations. An electrified lockset is a complete lock body with a solenoid or motor built into the lock itself; the lock controls its own latch. Both can be specified fail-safe or fail-secure, but electrified locksets typically offer better security because the lock body is mounted inside the door and the latch is harder to manipulate.

References

1. NFPA 101 (2021): Life Safety Code, Chapter 7 — Means of Egress.

2. NFPA 80: Standard for Fire Doors and Other Opening Protectives.

3. IBC (2024): International Building Code, Chapter 10 — Means of Egress.

4. UL 10C: Standard for Positive Pressure Fire Tests of Door Assemblies.

5. Lori Greene, “FAQs About Fail-Safe and Fail-Secure”, I Dig Hardware, October 2022. Shared by Donald Bell.

DISCUSSION
Be the first to contribute.

Open the discussion panel to comment, flag an inaccuracy, add field experience, or ask a question. Approved contributions earn SRP and may be incorporated into the article.