In August 2025, a demonstration at the DEF CON hackers conference in Las Vegas sparked a wave of curiosityāand concernāamong safe owners. Researchers showed how a small Raspberry Pi computer could be used to access certain SECURAM electronic locks, leading many to question how secure their safes really are. But according to professional safe technicians, the reality is far less alarming.
Nearly all electronic locks have built-in āback doorsā meant for authorized service and recovery, not for easy hacking. In fact, the safe industry has long worked like the tech worldāconstantly releasing updated models to fix vulnerabilities and improve performance. This discussion dives deep into what really happened at DEF CON, how modern locks like SECURAM and Libertyās Dormakaba 702D are evolving, what safe owners can do to protect themselves, and why reliabilityānot fearāis the real measure of a good lock.
ASK A QUESTION
Have a question about safes, vault doors, the state of the industry, or even our favorite local burger spot? Sign up for updates about the next Safe Space podcast and get an exclusive link to submit a question.
Episode 31 Topics
2:00: DEFCON Conference Demo of Bypassing SECURAM Locks
4:50: What Someone with a SECURAM Lock Could Do
6:22: How Master Safe Technicians Use a Black Box
10:25: What Happens When You Remove the Backup Access
10:55: Why Else Would You Want a Super Code
12:00: Liberty FBI Event Wasnāt an Electronic Lock
14:26: Have NW Safe Ever Seen a Lock Be Breached?
15:20: Where Should You Store Your Code?
21:41: What Not to Disable Combination Recovery
26:06: Whatās the Most Secure Lock
Episode 31 Discussion Synopsis
2:00: DEF CON Conference Demo of Bypassing SECURAM Locks
In August of 2025, the DEF CON hackers conference in Las Vegas showcased a demo where researchers used a small computer called a Raspberry Pi to unlock a specific SECURAM electronic lock. They connected it to a port on the outside of the keypad and gained access, sparking curiosity among safe owners. While it sounded alarming, safe technicians and manufacturers werenāt surprisedānearly all electronic locks have āback doorsā that allow professionals to service or open them if needed.
Years ago, tools like the ālock masterā or āblack boxā could open older ProLogic locks, but SECURAM has since updated its designs to block those methods. As with computer software, each new lock version improves security and patches vulnerabilities. The safe industry constantly evolves to stay ahead of potential hacks, so while these demonstrations make headlines, customers with modern, updated locks can rest assured their safes remain secure.
4:50: What Someone with a SECURAM Lock Could Do
Thereās no firmware update available for SECURAM locks right now. That means the company isnāt pushing a software fix you can install. But there are steps you can take to stop the kind of attack shown at DEF CON.
Technicians can turn off the lockās recovery system from the āsuper codeā menu (thatās the 00 menu). They can also change the lockās encryption key. Another option is to physically block the external port the hackers used ā people at the demo even talked about sealing the connector so nothing can be plugged in. If you do those three things, the attack they showed wonāt work.
This mostly mattered for some brands that use SECURAM. Liberty was one of the bigger names affected. Still, lots of safes use cheaper lock models that werenāt hit by this technique.
6:22: How Master Safe Technicians Use a Black Box
Even lower-level lock models can be opened if someone spends enough time working on them. For example, with an ESL10 lock, you can simply unplug the keypadāthe cable that connects it stays exposed. A tool called a āblack boxā can then be plugged into that cable. Once connected, the black box can open the lock in about 15 minutes. The time delay is built in on purpose, but the tool could technically do it instantly.
These black boxes are supposed to be used only by licensed locksmiths and safe technicians. However, as with most things, thereās a black market version out there too. In this case, software engineers in Silicon Valley created their own version. These developersāsimilar to the hackers who once cracked ProLogic locksābelieve there shouldnāt be any āback doorsā in locks at all. Thatās actually why these vulnerabilities exist in the first place.
7:57: Backdoor Master Codes - What They Are & Arenāt
Before we go farther, letās clear up what people mean by āback door codeā or āmaster code.ā
There isnāt one secret code that opens every brand of lock. Each lock maker has its own special manager code. These codes are built in for a few good reasons. For example, some brandsālike Libertyāget thousands of calls every year from people who simply forgot their combination.
Most safe problems arenāt broken locks. Nine times out of ten the owner forgot the code, the battery is dead, or theyāre entering the numbers in the wrong order. Sometimes people move a number to the wrong spot in the sequence and the lock wonāt open. Because these mistakes are so common, many major manufacturers offer warranties and service plans. Part of that service is helping customers get back into their safes without damaging them.
If you need the factory code cleared or reset, manufacturers and trained technicians can do that. Lately thereās more openness about how that works, so more people are asking and getting help.
10:25: What Happens When You Remove the Backup Access
We can get you the āsuper codeā for your ProLogic lock, and after you change it you can program everything the way you want. But if you lock yourself out after that, youāre basically on your own.
At a certain point thereās no easy bypass ā the only way in might be to drill and remove the lock or damage it to get inside. Thatās why the biggest reason people need help is simply forgetting their combination. Manufacturers and technicians can help with warranty service and resets, but if you intentionally lock yourself out after changing the code, recovery can be much harder.
10:55: Why Else Would You Want a Super Code
Another common reason locks have extra codes is so multiple people can use the same lock. In commercial places like stores, there are different code levels: a manager or master code and separate user codes for employees. The store owner or manager keeps the master code and can add or remove user codes when staff change jobs or lose their code.
That way, when an employee leaves, you donāt have to change everyoneās code ā the manager can just delete that personās user code. But with a simple mechanical dial lock, thereās only one code and no master code. Everyone who needs access uses the same single code.
12:00: Liberty FBI Event Wasnāt an Electronic Lock
During the Liberty/FBI story, the lock they actually opened was a mechanical lock ā not an electronic one. At DEF CON, people assumed it was an electronic lock, but it turned out to be a mechanical door lock set to the factory code. If a mechanical lock is still on the factory code, itās much easier to open.
There are also tools called āblack boxesā that can open lots of popular locks. Some examples are the S&G Titan, the S&G 6120, the American Security ESL5, and LaGuard swing-bolt locks. Over the years, manufacturers have changed designs to stop those tools. For example, SECURAM updated its ProLogic module in 2016, so many locks made between 2016 and 2025 couldnāt be opened with older black boxes. But engineers and hackers sometimes build new tools for newer models.
People on forums and some security pros have even found ways to get into certain locks using laptops or other hacks. The lock industry keeps changing ā manufacturers make fixes, and others look for new weaknesses.
14:26: Have NW Safe Ever Seen a Lock Be Breached?
Have you seen a safe opened this way? Not by a professional ā no. Recently we worked a call where a safe had a screwdriver stuck in the front. At first it looked like an electronic hack, but when we checked, someone had used the mechanical combination to get in and then damaged the lock to hide what they did.
Most of the time, if a safe is opened by someone you donāt expect, itās because they learned the code. They might wreck the lock afterward to make it look like a break-in. I havenāt found clear proof that a hacking device was used in any real theft cases. The biggest problem? People donāt keep their codes safe.
15:20: Where Should You Store Your Code?
If youāre like most people, you probably keep your safe code memorized instead of writing it downābut that can be risky if you ever forget it. A smart way to protect yourself is to store your code somewhere secure yet accessible. One option is to keep it in another safe that uses a fingerprint (biometric) lock, so you only need your finger to open it. You could also write the code in a hidden spot, like on top of a door frame or the back of a closet doorāplaces that arenāt easy to find but you can still reach. Some people even give the code to a trusted family member or store it in a safety deposit box. If you prefer convenience, consider upgrading to a biometric lock that recognizes your fingerprints. Most can save several prints per user, giving you and your family multiple, reliable ways to access your safe.
18:10: Reliable Locks
Letās go back to the SECURAM lock and the Raspberry Pi situation. Even after that DEF CON demo, we still use SECURAM locks ā in fact, we ordered more right after. Theyāre high-quality, reliable locks that remain very popular. The truth is, nearly every electronic lock can technically be hacked if someone spends enough time and effort. But in reality, itās not something we see happening. Itās just not a real-world threat for most people.
What matters most is reliability. We avoid locks with easy key bypasses because theyāre too simple to defeat. The SECURAM ProLogic is still one of the most dependable locks weāve ever used ā and weāve tracked performance since 2018. The S&G Titan is another great lock, though its keypad isnāt as strong.
SECURAM has continued improving their designs, updating circuit boards and security features. Most customers still prefer having the recovery system available, since it gives them a safe way to regain access if they forget their code. Even when Liberty offered to disable that feature, only a small number of people actually requested it ā most just want peace of mind knowing they can still get into their safe if needed.
21:41: What Not to Disable Combination Recovery
Once people understood what really happened, they realized how hard it is now to get a factory recovery code. Some companies claimed theyād never given out backdoor codesābut we knew that wasnāt true because they had in the past. After the controversy, many manufacturers quietly disabled their recovery systems online.
I even had one company tell me they had deleted their backdoor code database. But a few months later, during a warranty service call, they sent me a backdoor code as part of their normal paperworkāproving they were still keeping the codes.
To their credit, Liberty Safe didnāt handle everything perfectly at first, but they set the new standard for how companies should manage security and transparency. Today, Liberty is more open than most brands about how their locks work and whatās stored. Now, even for professionals like me, getting a recovery code from the factory requires a written request and more verification steps than ever before.
23:30: Libertyās New Lock
Liberty has started using a new high-end lock called the Dormakaba 702D. It looks a lot like the older display-style locks, with a digital screen on the front. Dormakaba (formerly known as LA Gard) replaced several older models with this one. Eventually, someone will probably figure out how to make a āblack boxā tool for it, but for now, the only real way to open it without the code would be to drill it.
Dormakaba still keeps recovery codes on file, but customers must go through strict verification steps to access themāsimilar to what other lock brands require. The 702D is fairly new, first appearing around 2020. Some say itās been in use for years, but I only saw my first one recentlyāand I was replacing it due to issues.
In the safe industry, we like to see a few years of proven reliability before fully trusting new locks. The 702D hasnāt reached that point yet. It might turn out greatāor not. Weāll probably know for sure in another couple of years. For now, Iāll admit, itās not my favorite design visually, but thatās more of a sales gripe than a customer concern.
26:06: Whatās the Most Secure Lock
If youāre wondering what the most secure lock is, itās the X10 ā a government-grade lock used on GSA-approved safes and containers. It has a long history of reliability and is designed to prevent the kinds of electronic bypasses that affect most other locks. Thereās no recovery mode or backdoor for it, so if someone needs to open one without the code, theyāll have to drill it ā and thatās not an easy job.
The X10 is expensive, costing around $2,500ā$3,000 for the lock alone, plus several hundred dollars for installation since it requires precision and time. Compared to standard locks like the ProLogic, which can be installed in under 10 minutes for a few hundred dollars, the X10 is a serious investment.
It works kind of like a mix between a traditional dial and an electronic lock. You power it by turning the dial and enter your combination, but inside it uses electronic components for extra precision.
While the X10 is extremely secure, itās overkill for most homes. Itās built for government and military use, not residential safes. Unless youāre protecting classified information, itās probably more than youāll ever need ā and not the best value for typical safe owners.