Airbnb smart lock requirements: what actually passes host standards

Airbnb does not publish a single authoritative document titled "smart lock requirements". What they publish instead is scattered across the Host Standards, the Safety Requirements, the Listing Quality policy, and the fine print of their insurance (AirCover). As a result, hosts buy the wrong lock, get flagged months later, and only then discover the gap.

This guide pulls the real requirements into one place, separates "Airbnb-required" from "strongly recommended", and calls out the specific things that will bite you.

This guide covers:

• What Airbnb actually requires (and what it merely recommends)
• The security expectations that come from AirCover, not the Host Standards
• Why "hard-coded master code for every guest" is a compliance red flag
• What to do if you already have a non-compliant lock installed
• A minimum checklist you can run through before your next booking

What Airbnb actually requires

Airbnb's Host Standards reference three things that touch smart locks:

1. Accurate listing information. If your listing says "self check-in with smart lock," the lock must actually work when the guest arrives. This sounds trivial, but it's the single biggest source of 1-star reviews tied to locks: the code didn't work, the lock was dead, the Wi-Fi was out, the host was on vacation. A non-functioning lock on arrival day is treated as a misrepresentation, and you'll owe the guest a refund or alternative accommodation.

2. Safe and habitable conditions. The door must actually lock. A smart lock that can't secure the property (dead batteries, disconnected from its hub) violates the safety requirements. Airbnb won't audit you — but a guest who reports it can get you suspended.

3. Respect for privacy. If your lock logs access events (most do), that data is personal information. You can look at it for legitimate reasons (a guest reported a stranger in the property), but using it to track a guest's movements for no good reason is a policy violation.

That's the actual required list. Three things. Nothing about brand, protocol, or code length.

What AirCover effectively requires

AirCover is Airbnb's host insurance. The fine print doesn't spell out lock specs, but the claim adjudication process reveals what matters:

• Unique codes per guest. If you hard-coded "1234" as the access code for every stay and a past guest returns to commit theft, the claim is going to be difficult. The adjudicator will ask how you restricted access, and "the same code for everyone" is a bad answer.
• Time-limited access. Codes should stop working after checkout. A lock that can't automatically expire codes is a liability. Many hosts set codes manually and forget to retire them, which is functionally the same as leaving a key under the mat.
• Tamper / forced entry signals. If your lock can detect forced entry and log it, that log is often the best evidence you have for a claim. Locks without this capability aren't disqualified, but they weaken your paper trail.

None of this is printed on the AirCover marketing page. It comes from reading the terms and talking to hosts who've filed claims.

What Airbnb strongly recommends

These aren't required, but they show up in Listing Quality guidance and in the algorithm:

• Self check-in is preferred. Listings tagged "Self check-in" (smart lock, keypad, or lockbox) surface higher in search results for same-day and late-night bookings. If you sell the ability to arrive at 2 a.m., your hardware had better deliver.
• The "no lockbox" signal. Some markets (New York, parts of the Bay Area, certain European cities) are actively phasing out lockboxes due to neighborhood complaints. Lockboxes are still compliant with the Host Standards, but switching to a keypad or smart lock future-proofs you.
• Redundancy. Airbnb doesn't require a physical key override, but if your smart lock is dead on arrival and the guest has no fallback, you'll be driving over with a spare. The top hosts keep one of: a mechanical key hidden in a hidden key safe, a second entry (garage / side door) with its own code, or a neighbor with a key.

What will trigger a 1-star review

Listings are rated on dimensions that include "check-in experience". Here's what lowers that score specifically due to lock behavior:

1. Code didn't work on first try. Either it wasn't programmed in time, or the lock rejected it. Every single instance of this is a review hit.
2. Dead batteries at arrival. Nothing ruins a stay like finding the door unresponsive and a host who takes 40 minutes to reply. Set a low-battery alert and act on it within 24 hours.
3. Difficult keypad layout. Some locks' keypads are hard to see at night, or require an awkward sequence ("press star first, then enter your 4-digit code"). If your listing isn't obvious to an exhausted traveler, you'll pay for it in reviews.
4. Code expired too early. Guest tried to drop a bag after an early checkout flight, found the code dead, had to call you. Fix: extend codes 24 hours past checkout automatically.

What will get your listing flagged

This is the compliance end of the spectrum. Escalating consequences:

• No functioning lock. If a guest reports on arrival that the property wasn't secured, Airbnb will remove the listing until you prove it's fixed.
• Hidden cameras / surveillance near the entry. The lock itself is fine — a camera stuck on the door that you didn't disclose is a permanent ban.
• Keys under the mat / "just use the back door, it's open". These violate the Safe and Habitable Conditions standard, and if something goes wrong, AirCover will deny the claim.

If you already have a non-compliant lock

You don't necessarily need to rip it out. Walk through this triage:

1. Is it actually non-compliant, or just imperfect? A keypad that only supports 4-digit codes and 10 slots is awkward but not disqualifying. A keypad with "1234" for every guest is a problem.

2. Can you wrap it with software? Cloud platforms like Staykey can rotate codes, time-bound access, and log events on top of locks that don't do any of that natively. An old Schlage Connect paired with Home Assistant becomes a compliant, auditable solution.

3. Is it worth a hardware upgrade? If the lock is more than 5 years old, the math usually says yes. A new Z-Wave lock — Yale Assure 2 with the Z-Wave module is our default, with Schlage BE469ZP and Kwikset 914 Z-Wave as reliable alternates — is $250–$300 and cuts your maintenance time per booking to zero. See the complete guide to smart locks for the short-list.

The minimum checklist

Before your next booking, run through this. If any row is "no", fix it before the guest arrives.

What Staykey enforces by default

When you run Staykey on top of your lock, every row in that checklist is handled automatically:

• Unique codes per booking, generated the moment Airbnb confirms the reservation
• Time-bound automatically (check-in day through checkout + 1)
• Delivered to the guest via a single durable link that drops straight into your Airbnb (or VRBO) auto-message template — no third-party SMS, no off-platform channels
• Codes retired after checkout so past guests can't return
• Battery and connectivity alerts surfaced in the host dashboard
• Full audit log of who unlocked what and when

Start a 30-day free trial and you're compliant on your next booking without changing hardware.

Keep reading

• The complete guide to smart locks for Airbnb hosts — how to pick the right lock
• Airbnb self check-in: the complete setup guide — the end-to-end flow
• Supported smart locks — which brands and models work with Staykey
• Why we don't do cloud-only smart locks — the reliability case for local control