A smart lock does the same handful of things every time it opens, in much the same order, regardless of brand. Once you know the sequence, it is easier to tell a well-built lock from one that is mostly app, and the sequence is not complicated.
From credential to bolt
An unlock has five steps. First you present something — a fingerprint, a code, a card, a phone. The lock then checks whether that thing is recognised, and separately whether it is allowed right now (a guest code, for instance, may only work between certain hours). If both pass, a small motor or solenoid pulls the latch back, and the event gets written to the lock's own log — and to the cloud, if it happens to be connected.
The detail worth holding onto is that the checking and the rule-enforcing take place on the lock, not on some server. That single design choice is why the door still opens when the internet is down. The network only adds convenience; the lock does not depend on it.
How each credential is checked
Each way in is verified differently. A fingerprint sensor captures the print and matches it against encrypted templates stored on the lock — raw prints are never kept, and the data does not leave the device. A passcode is compared against the authorised codes, and time-limited ones carry their own expiry, so a code issued to a guest simply stops working after checkout instead of needing to be deleted. An IC card is read wirelessly for its unique ID and matched to a list. Over Bluetooth, the phone and lock open an encrypted channel in which the phone proves it holds the right key without ever showing it.
All of this is handled by a small processor inside the lock. It holds the credential list, applies the time and schedule rules, and drives the motor. Because those decisions are local, the whole thing is fast — under a second — and it keeps working on its own terms.
The bolt and motor
Once authorisation clears, that processor energises a motor or solenoid to retract the latch. This is where the mechanical parts matter. A lock is only ever as trustworthy as its bolt, its resistance to prying, and its tolerance for weather and grime. Security here comes from build quality, and the number of features in the app does not come into it.
Going online
None of the above needs a network. But fit a gateway and the same lock gains a second layer: real-time alerts when a door opens or a battery runs low, remote unlock from the app, cloud history for audit, and temporary codes minted on demand for guests or contractors. None of these change how the lock decides whether to let someone in — they sit on top of the local decision and add visibility and reach.
Security basics
Three things, broadly. Traffic between app and lock, and between gateway and lock, is encrypted, so a captured signal cannot simply be replayed later. Authorisation stays local, which means a network outage cannot lock people out — and more importantly, cannot let the wrong person in. And every permission is granular and revocable: a lost phone or a checked-out guest is cut off in seconds, something a physical key is structurally incapable of.
Power and failsafes
Most consumer locks run on batteries for months at a stretch, with low-voltage warnings that start weeks before the cells actually fail. Failsafes cover the rest — a mechanical key, an emergency USB port — so a flat battery does not leave you stranded. Doors with heavy traffic are better served by wired power, which removes the charging chore entirely.
A smart lock is a small hardened computer bolted to a piece of mechanical engineering. Once the credential-to-bolt flow is clear, the questions worth asking are mundane. Identity is checked on the device, the decision is local, and a lost credential should be revocable in seconds. After that, the only question left is how well the thing is built. The radio and the app come second to those. For the hardware itself, the Sciener product range covers it; the trade-offs between connectivity options are in our protocol comparison.