Single-Door vs Multi-Door Access Control: What to Choose

Most people who ask us about single door access control already have a door in mind. The server room, the accounts cabin, the main glass entrance. They want to know whether a small standalone keypad will do, or whether they need a proper controller and software. The honest answer depends less on that first door and more on how many doors the building will have in two or three years.

This guide walks through both architectures with real hardware numbers, shows where each one breaks, and gives you a door-count rule you can use before you speak to any vendor, including us.

What "Single-Door" and "Multi-Door" Actually Mean

The terms describe how many doors one controller manages, not how many doors your building has. A building with ten doors can run ten single-door controllers, or three 4-door controllers, or a mix. What changes is where the user list lives, how reports are pulled and what happens when someone leaves the company.

Every controlled door has the same five parts, whichever architecture you pick:

• A reader or keypad on the outside (card, PIN, fingerprint or face)
• An electric lock: a magnetic (EM) lock, an electric strike or a drop bolt
• An exit button or exit reader on the inside
• A door sensor that reports whether the door is actually shut
• A power supply sized for the lock, ideally with battery backup

A controller is the part that decides whether to release the lock. So the architecture question is simply whether that decision is made by a box at each door or by a shared board that several doors report to.

Start With the Site, Not the Spec Sheet

Four questions eliminate most of the shortlist before you look at a single product page:

1. How many doors need control today, and how many are likely in three years? Count the new wing, the back gate and the store room you keep meaning to lock.
2. Who needs reports? If HR, an auditor or a client will ever ask "who entered the server room on the 14th", you need logs you can export, not a keypad's internal memory.
3. How do people leave the company? With standalone units, a departing employee has to be deleted at every door. With central software, it is one click.
4. Is the door indoors or exposed? Weather, dust and vandal risk decide the reader housing long before features do.

If your answers are "one door, nobody needs reports, low staff turnover", a standalone unit is a perfectly good purchase. Any other combination points towards a networked controller.

Standalone Single-Door Units

A standalone unit combines the reader and the controller in one housing. You enrol cards or PINs at the device, wire it to the lock and an exit button, and it runs on its own with no PC.

Where standalone works well

The JS-32E is a typical example: card, PIN or card plus PIN, 2,000 cards, an adjustable door-open time of 0 to 99 seconds and a 12 V supply. For a store room, a cabin or a small shop's back door it does the job without software, network points or training.

For doors exposed to rain or rough handling, the JS-34 E/M has an IP66 metal anti-vandal case and is rated from -45°C to 60°C. If you would rather use fingerprints than cards, the JS-36E stores 200 fingerprints and 10,000 cards in an IP65 housing.

Where standalone fails

Problems start when there is a second door. Each unit keeps its own user list, so enrolling a new employee means walking to every door. Revoking a lost card means the same walk, and if someone forgets one door, that card still works there.

Reporting is the other gap. Most standalone keypads either hold no usable event log or hold one you cannot easily export, which is fine until the day you need it.

Networked Single-Door Controllers

A networked 1-door controller sits on the secure side of the door, usually above the ceiling or inside a locked box, and connects to your LAN. The reader outside is just a reader. All decisions and logs live in the controller and the central software.

The C3-100 Plus is a Linux-based 1-door controller with TCP/IP, two 26-bit Wiegand reader ports (one for entry, one for exit), 30,000 cards by default and 500,000 stored transactions. Its fingerprint-capable sibling, the InBio-160 Pro Plus, adds 20,000 fingerprint templates.

Choose this when you have one important door now but want logs, schedules and central user management from day one. Most of the cost difference over a standalone keypad is the controller board and the software setup. The door hardware itself is the same.

Multi-Door Controllers: One Board, Several Doors

A multi-door controller handles 2 or 4 doors from one board. Readers, locks, sensors and exit buttons for each door are cabled back to the board, and the board reports to the central software.

2-door controllers

The C3-200 Plus controls 2 doors with 4 readers (RS-485 or Wiegand), 6 inputs and 4 outputs. Four readers means each door can have a reader on both sides, which you need if you want to record exits as well as entries. The eSSL-Access-8002 follows the same idea with 20,000 cards and 100,000 events, and is rated from -40°C to +70°C.

4-door controllers

The C3-400 Plus controls 4 doors, accepts up to 8 RS-485 readers or 4 Wiegand readers, and has 12 inputs and 8 outputs. Those extra outputs are useful for alarms, sirens or a camera trigger. For fingerprint sites, the InBio-460 Pro Plus offers the same 4-door layout with 20,000 fingerprint templates.

Where multi-door fails

One board serving four doors is also one point of failure for four doors. A dead power supply or a surge on the board takes all of them offline at once. With fail-safe locks the doors release, which is safe for people but not for security. With fail-secure locks the doors stay shut, which protects the room but leaves the problem waiting until someone arrives.

Avoiding multi-door controllers is not the fix. Give the board clean power, a battery backup and surge protection, and keep cable runs within the reader's rated distance.

Comparison Table: Which Architecture Fits

A Door-Count Rule You Can Use Today

Here is the rule we use on site surveys. Treat it as a starting point, not a substitute for walking the building.

• 1 door, no reporting, low turnover: a standalone unit is enough.
• 1 door that needs logs, or any chance of a second door: a networked 1-door controller.
• 2 to 4 doors close together: one 2-door or 4-door controller.
• 5 to 20 doors: several 4-door controllers on one software platform, grouped by floor or block.
• Multiple buildings: controllers at each building, all reporting to one central database so one card works everywhere and is revoked everywhere.

A worked example

A 120-person office has a main glass entrance, a server room and an accounts cabin today. A second floor is planned next year with two more doors.

Three standalone keypads would cover today, but every joiner and leaver means three separate updates, and none of them gives a usable log for the server room. One C3-400 Plus covers all three doors now and leaves one door spare. When the second floor opens, a second 4-door board joins the same software, and staff keep the cards they already have.

The Lock Matters More Than the Controller

Most field complaints we hear are about doors, not boards. A controller that works perfectly cannot fix a lock that does not suit the door.

Fail-safe or fail-secure

A fail-safe lock releases when power is lost. Magnetic locks are fail-safe by nature, which is why they are the usual choice on escape routes. A fail-secure lock stays locked without power, which suits store rooms and cash rooms that are not escape routes. Check your fire NOC conditions before you choose, because the wrong lock on an exit door can fail an inspection.

Glass doors

Frameless glass doors need a lock designed for them, such as a glass door bolt lock or a magnetic lock with the right bracket. You cannot drill a standard lock into toughened glass, so confirm the door type during the survey.

Lock power

An EM lock draws current the whole time it holds the door. If the supply is undersized, a busy morning when several doors open together can cause a voltage dip, and doors behave unpredictably. Size the supply for every lock it feeds, with headroom.

Readers: Cards, Fingerprints and Face

A controller does not care much which reader you fit, as long as the output matches. Wiegand is the common language between readers and controllers, and the RS-485 option on the Plus controllers allows longer cable runs.

A simple RFID reader like the KR500-E is the most common choice for offices. Fingerprint readers remove the problem of shared or lost cards, at the cost of slightly slower entry at peak times. If you are still deciding between credentials, our comparison of biometric vs RFID covers the trade-offs in detail.

Software Is Where Multi-Door Pays Off

Hardware is the smaller difference between the two architectures. Day-to-day administration is the bigger one.

With central software you add an employee once and choose which doors and hours they get. You can set the accounts cabin to open only for the finance team between 9 and 7, and you can pull one report for every door on the premises. When the same card or fingerprint is also used for attendance, your attendance software can share the enrolment, so staff are registered once for both.

Visitors are the other gap that software closes. A visitor management system can issue a temporary pass that works only on the reception door for one day, instead of lending out a staff card.

Floors, Lifts and Larger Sites

Once a building has several floors, the lift becomes a door. An elevator controller such as the EC10-EX16 restricts which floors a card can select. It scales to 58 floors with three expansion boards and includes fire-linkage and emergency inputs.

On campuses and multi-building sites, the main design rule is one database. Controllers can sit in each building, but they should all report to the same software so a lost card is blocked everywhere in one step.

What a Proper Installation Looks Like

A good access control job follows the same sequence whether it is one door or forty:

1. Site survey: walk every door and note the door type, escape routes, cable path and available power. Book one through our site survey service.
2. Door schedule: a simple list of each door, its lock, its reader and which groups may use it.
3. Cabling and power: run cable to every door on the plan, including future ones.
4. Installation and testing: fit locks and readers, then test every door for normal use, power failure and fire release. Our installation team signs off each door against the schedule.
5. Enrolment and training: enrol staff, set the time zones, and show the admin how to add and remove users.
6. Maintenance: locks and power supplies wear out before controllers do, and an AMC keeps them checked.

Which Should You Choose?

If you have one door, no reporting needs and staff who rarely change, buy a standalone unit and spend the savings on a good lock. If you have one important door now and others later, start with a networked controller so you never have to re-enrol everyone. With two or more doors, a multi-door controller and central software will cost less to run over the life of the building, even though the first invoice is higher.

For the wider checklist on credentials, software and vendors, read our access control buying guide, or browse the full access control range. Send us your door count and a rough floor plan, and we can suggest an architecture and prepare a quote for it.