Home / Buy a Business / Locksmith

Buy a Locksmith Business in 2026: Multiples, Diligence, Deal Structures

Updated June 2026 · CT Acquisitions

Buying a locksmith business is not a single thesis. There are three distinct sub-categories under the same SIC code, and each one underwrites differently. A 24/7 residential lockout shop pulling $400K SDE is not the same asset as a commercial access-control integrator with multi-year RMR contracts on ASSA ABLOY Aperio installations, and an automotive locksmith with dealership programming contracts is a third animal entirely. For PE buyers, ETA searchers, family offices, and security-integration consolidators evaluating this space in 2026, the first decision is which version of “locksmith” you are actually buying. The valuation gap between them is roughly 2x.

This guide covers how the three sub-categories underwrite differently, what operational signals separate a 4x business from a 7x commercial integrator, what deal structures and state licensing constraints actually matter, and how to source and close acquisitions that hold value post-transaction.

Why buying a locksmith business sits between home services and security integration

The strategic confusion around buying a locksmith business comes from the category sitting on a boundary. Residential locksmith work behaves like any other home services trade: emergency response, one-off ticket revenue, Google Local Service Ads dependence. Commercial access-control work behaves like security integration: recurring monitoring contracts, multi-year service agreements on installed hardware, and a sales motion that looks more like B2B technology than home services.

Three structural forces drive the distinction. First, recurring revenue economics. A commercial access-control operator with 500 monitored doors at $200 per door per year generates $100K of high-margin RMR, with 70 to 85 percent gross margin and 5 to 10 percent annual churn when hardware is installed correctly. This is structurally similar to the contracts Allegion, dormakaba, and ASSA ABLOY ecosystem partners build their valuations on. A pure residential lockout shop has none of this.

Second, fragmentation. IBISWorld pegs the US locksmith services market at roughly 90,000 operators and $3.7B in annual revenue. The top 50 operators control less than 5 percent of the market. Pop-A-Lock (600+ locations across the US and Canada) is the only national brand most buyers will recognize. Below that, every regional commercial operator is a roll-up candidate.

Third, technology-cycle tailwind. The shift from mechanical locks to electronic access control (SALTO KS, Brivo, Openpath/Avigilon, Kisi, Genea) is accelerating. Operators with installed-base electronic exposure own a decade of renewal revenue; operators still selling deadbolts and rekeying calls do not.

What buyers pay when buying a locksmith business in 2026

Valuation ranges are wide because the spread in operational quality is wide. A $600K SDE residential emergency-only operator with one technician, no service contracts, and a 70 percent Google LSA dependency is a fundamentally different asset than a $600K SDE commercial-led operator with 400 monitored doors under contract, two licensed access-control technicians, and a CRM with documented renewal history. The multiples reflect the difference.

The spread between 3x and 7x is not random. Six factors explain almost all of it, and every sophisticated buyer in the category models them explicitly.

• Commercial vs residential revenue mix. Commercial work carries higher ticket sizes ($800 to $5,000+ for access-control installation vs $150 to $400 for residential lockout), longer customer tenure, and the option to attach RMR contracts. Buyers apply 5.5x to 7x multiples to commercial-led businesses and 3x to 4.5x to residential-led businesses.
• RMR per door and renewal rate. The benchmark is $50 to $500 per door per year depending on platform sophistication. Basic mechanical service contracts run $50 to $100 per door. Cloud-managed access platforms with mobile credential management and software-as-a-service licensing run $200 to $500 per door. Renewal rates above 90 percent push pricing into the platform band.
• Manufacturer certifications and platform exposure. ASSA ABLOY Aperio, SALTO Systems certified integrator, dormakaba authorized service partner, Allegion Schlage commercial dealer, Stanley CompX channel partner. These certifications take 12 to 24 months to earn and are essentially non-transferable without continuity of staff, which is why retention bonuses matter so much in this category.
• Bonded and licensed crew premium. A fully bonded, individually licensed crew (where required by state law) costs 10 to 15 percent more than an unlicensed crew but opens commercial-property-manager and government accounts that an unbonded operator cannot bid on. Buyers underwriting commercial growth model this premium explicitly.
• Customer concentration. Below 5 percent revenue from any single commercial account is platform-grade. Above 20 percent triggers a 10 to 20 percent multiple discount. Above 30 percent is often a deal breaker, particularly when the concentrated customer is property-management or a single municipal contract.
• Owner dependence. If the founder personally holds the manufacturer certifications, the bond, and the commercial relationships, buyers apply a key-person discount and structure significant earnout. Locksmith businesses are particularly vulnerable to this because the certifications are individual, not corporate.

The 2026 pricing reality

Security-integration consolidators pay premium multiples for commercial-led locksmith operators that complete a regional access-control footprint, but the pool of qualifying targets is small. Most independent locksmith businesses are mixed residential and commercial with informal contract structures, which puts them squarely in the 4x to 5x range. For independent and search-fund buyers competing against strategics, the implication is clear: either find a commercial-led operator in a geography the strategics are not yet active in, or accept that you are buying in the $300K to $1M SDE band where 4x to 5x is the going rate.

The three sub-categories and why the mix decides the multiple

Before underwriting any locksmith deal, decompose revenue into the three sub-categories. The mix determines the multiple more than any other factor.

1. Residential locksmith and emergency work

Residential lockouts, rekeying, deadbolt installation, smart-lock retrofits (August, Schlage Encode, Yale Assure), and emergency response. Ticket size $80 to $400; 55 to 70 percent gross margin; 60 to 80 percent Google LSA sourcing; essentially zero RMR. Multiples 2.5x to 4.5x SDE depending on operator quality and route density.

2. Commercial access-control and security integration

Mechanical and electronic locking hardware, master-key systems, card readers, mobile credentials, cloud-managed platforms, plus attached service-contract revenue. Ticket size $500 to $50,000+ for system installations; 35 to 55 percent gross margin on hardware install, 70 to 85 percent on service-contract revenue. Sourcing through direct sales to facility managers, property-management referrals, manufacturer-channel leads, and bid-list participation. RMR 20 to 60 percent of total revenue at scale. Multiples 5x to 7x EBITDA.

3. Automotive locksmith

Key duplication, transponder programming, key-fob replacement, ignition repair, and roadside lockout. Ticket size $80 to $600 depending on vehicle model and transponder complexity. Late-model OEMs require dealer-level programmers costing $5K to $40K each with 3 to 5 year useful life. Sourcing through Google LSA, dealership service-bay contracts, fleet accounts, and roadside referrals (AAA, Allstate Roadside, Agero). Dealer and fleet contracts can build to 20 to 30 percent of revenue. Multiples 4x to 5.5x EBITDA.

How the mix moves the multiple

A business that is 70 percent residential and 30 percent commercial without formal contracts will underwrite at the residential multiple (3.5x to 4.5x SDE) because the commercial revenue is not contractually recurring. A business that is 40 percent commercial with formal RMR contracts and a manufacturer certification will underwrite at the commercial multiple (5x to 6x EBITDA) because the buyer can grow the commercial side post-close. The marginal dollar matters more than the average dollar.

The buyer archetypes when buying a locksmith business

Understanding which buyer you are (and which you are competing against) changes how you structure offers.

1. Security-integration strategics

Regional and national security-integration platforms acquiring commercial-led locksmith operators to complete access-control footprints. They pay the highest multiples (6x to 7.5x EBITDA) for targets with $1M+ EBITDA, 30 percent+ RMR, and ASSA ABLOY, SALTO, dormakaba, or Allegion certifications. Many are PE-backed (Convergint Technologies, Securitas Technology, Pavion, Everon Holdings, Acre Security) and operate through holding companies; they rarely advertise as locksmith buyers but are active in the channel.

2. Pop-A-Lock franchise system

Pop-A-Lock (Lafayette, Louisiana; 600+ locations) buys back franchises in attractive territories and resells to operators looking for a turnkey unit. Unit economics are disclosed in their FDD. Multiples: 2.5x to 4x SDE for franchise resales. Best for buyers who want a defined brand and operations system rather than building from scratch.

3. Independent sponsors and ETA searchers

Deal-by-deal capital, often a single principal with LP commitments assembled per deal. They compete on creative structuring (earnouts, rollover equity, seller financing) and on speed. Best fit for the $400K to $1.5M EBITDA band where security-integration strategics are less active.

4. Family offices and self-funded operator roll-ups

Long-hold family-office capital (10 to 25 year horizon) is attracted to the recurring revenue stream of commercial access-control and prices similarly to strategics with more patience on integration. Operator-led self-funded roll-ups (often a former regional manager from a security-integration firm) compete on smaller deals ($300K to $800K SDE) using a mix of seller financing, SBA 7(a), and mezzanine.

Due diligence when buying a locksmith business

Generic M&A due diligence is necessary but not sufficient for locksmith. The category-specific signals are where value creation and destruction actually happen. Here is what experienced locksmith buyers do in addition to standard quality of earnings, legal, and insurance review.

Revenue mix decomposition by sub-category

Do not accept the seller’s classification of revenue. Pull 24 months of transactional data and bucket every invoice into residential lockout and rekey, residential smart-lock install, commercial mechanical install, commercial access-control install, commercial access-control service-contract revenue, commercial one-off service, automotive lockout, automotive key programming, and parts. The sub-category mix decides which multiple band applies, and sellers frequently classify commercial one-off work as contractual when it is not.

RMR contract analysis

For every active commercial service contract document customer name, door count, contract start and end date, monthly recurring revenue, renewal cycle history, and scheduled service completion rate. A healthy commercial access-control book shows 90 percent+ annual renewal on multi-year contracts, $100+ per door per year in recurring revenue (above $200 for cloud-managed platforms), 12-month minimum terms with auto-renewal language, and healthy new-contract ingress. Red flags: contracts written on the seller’s personal name rather than the entity, contracts with manufacturer-tied service obligations that require certification continuity, and cohorts where renewal drops in years 2 to 3.

Manufacturer certification inventory

For every staff member, document ASSA ABLOY Aperio certification status, SALTO Systems training level, dormakaba authorized service partner credentials, Allegion Schlage commercial dealer status, Brivo, Openpath/Avigilon, Kisi, or Genea integrator credentials, and ALOA Proficiency Registry Certified Master Locksmith (CML/CRL/CPL) status. These certifications are individual, not corporate. If 80 percent of certifications belong to the founder personally, you have a key-person problem.

Technician unit economics and lead-source mix

Build a technician-level P&L for the trailing 12 months. Key metrics: billable hours per technician per day (5.5 to 6.5 commercial, 4.5 to 5.5 residential due to drive time), average ticket size, first-time-fix rate above 85 percent, callback rate below 8 percent, and gross margin contribution. For residential-heavy operators, also document Google LSA spend and cost-per-acquisition, organic and paid search, Yelp, Thumbtack, Angi, and direct calls. Operators with 70 percent+ LSA dependence are exposed to platform-pricing risk; Google has repeatedly raised LSA verification standards for locksmith categories because of historical fraud rates.

Automotive capex aging schedule

For automotive-heavy operators, document the programmer and diagnostic equipment inventory with purchase date and current market value. Late-model programmers (Autel IM608, Smart Pro, AD100, MVP Pro) have 3 to 5 year useful lives before next-generation vehicles require equipment upgrades. A $40K to $150K replacement capex cycle every 4 to 5 years is normal and needs to be baked into EBITDA-to-cash-flow conversion.

State licensing and bonding: the hidden deal killer

The single most under-diligenced risk in buying a locksmith business is the state licensing patchwork. Roughly 15 states require some form of locksmith licensure or registration:

• New Jersey: State Board of Examiners administers licensing; requires exam, $1,000 surety bond, and continuing education.
• North Carolina: Locksmith Licensing Board requires exam, bond, criminal background check, and 8 hours annual CE.
• Illinois: Department of Financial and Professional Regulation requires individual and agency licensure plus background check.
• California: Bureau of Security and Investigative Services requires individual locksmith license, company registration, and fingerprint background check.
• Texas: Department of Public Safety Private Security Bureau requires individual and company licensing.
• Tennessee, Nevada, Louisiana, Connecticut, Virginia, Oregon, Oklahoma, Maryland, Alabama, Nebraska: all maintain state-level licensing with varying requirements.

The other 35 states have no state-level licensing. Several municipalities (NYC, Chicago, Miami-Dade) have local licensing on top of or instead of state rules. Bonding requirements run $1,000 to $25,000 per licensee in regulated states. Commercial bid lists (municipal, school district, hospital, federal property) often require $50K to $500K coverage. Lapsed bonding history can disqualify a buyer from inheriting those contracts.

Why this kills deals

The pattern: a buyer underwrites assuming the seller’s licenses transfer at close, signs an LOI, and discovers in diligence that the licenses are individual and do not transfer, that re-licensing requires 60 to 180 days plus a board exam, or that the seller has historical license lapses on file. Any of these can push timeline by 4 to 6 months. The fix is to verify license status in pre-LOI diligence (most state boards publish licensee status online for free) and to keep the seller operationally engaged for 90 to 180 days post-close to re-credential the new operator under the existing license umbrella.

Structuring the offer

The best buyers win on structure as often as on price. A well-structured offer can beat a higher nominal offer if it matches what the seller actually cares about.

The standard locksmith deal structure (2026)

• Cash at close: 65 to 80 percent of total consideration, with the higher end on commercial-led operators where buyers have borrowing capacity.
• Seller rollover equity: 5 to 15 percent in platform deals where the seller continues operating, particularly when the seller holds key manufacturer certifications. 0 percent in clean-exit deals.
• Earnout: 10 to 20 percent over 12 to 24 months, typically tied to commercial RMR retention or contract renewal rates. Earnouts tied to residential revenue are less common because the revenue is less controllable.
• Escrow: 10 percent held 12 to 18 months against indemnification claims, with additional carve-out for state-license transition risk if relevant.
• Seller note: 5 to 15 percent, subordinated to senior debt. Particularly common in SBA-financed deals where the seller note helps the buyer meet equity requirements.

Where smart buyers differentiate

The offer components sellers weight most heavily, in order: cash at close percentage, earnout achievability, key-employee retention commitments (technicians with manufacturer certifications), continuity-of-license transition support, and timeline certainty. Price per se is often the 4th or 5th factor for founders approaching retirement.

Buyers who win on non-price factors typically pre-commit to retention bonuses for named certified technicians (often 3 to 6 months salary, paid 12 months post-close), write earnouts with achievable floors (90 percent RMR retention triggers a minimum payment, with upside for overperformance), and provide the seller with a 90 to 180 day transition agreement to bridge license transfer.

The earnout trap in locksmith deals

The single most destructive element of a locksmith deal is a poorly designed earnout. If the earnout is tied to total EBITDA, sellers justifiably worry about post-close cost allocation and typically underperform. If it is tied to residential revenue, sellers focus on top-line emergency-call volume and underinvest in commercial development. If it is tied to new commercial bookings, it is functionally a price reduction because new bookings depend on the buyer’s sales infrastructure, not the seller’s continued effort.

The structures that work in locksmith: RMR contract renewal percentage (measured against a defined baseline), commercial customer retention rate, and certified-technician retention rate. All three are things the seller can meaningfully influence for 12 to 18 months post-close.

Integration: where buyers create or destroy value

Locksmith integrations break for predictable reasons. Three principles separate the buyers who create value from the buyers who destroy it.

Do not rebrand commercial accounts in year one

Commercial customers (facility managers, property managers, municipal accounts) have personal relationships with the seller and the lead technician. Rebranding to the buyer’s umbrella brand in the first 90 days routinely triggers contract reviews and competitive RFPs. The better approach is a 12 to 24 month dual-brand transition where the seller’s brand stays primary on commercial communications.

Lock in certified technicians before close

Manufacturer certifications (ASSA ABLOY Aperio, SALTO, dormakaba, Allegion commercial dealer) are individual to technicians and take 12 to 24 months to earn. Once a deal is announced, security-integration competitors will recruit certified staff within days. Smart buyers structure retention bonuses (15 to 25 percent of annual compensation, paid 12 to 18 months post-close, contingent on remaining employed and maintaining certifications) for named certified technicians, finalized in the LOI not after close.

Preserve the dispatch model

Locksmith businesses run on dispatch judgment (which technician for which job, based on certification, geographic position, and customer relationship). Founders develop this over years and it rarely lives in any CRM. Buyers who replace the founder’s dispatch model with corporate routing in month one frequently destroy first-time-fix rates. Shadow the founder’s decisions for 60 to 90 days, document the implicit rules, and only then transition to a formalized routing process.

Financing when buying a locksmith business

Capital structure varies by buyer type, but some patterns are consistent in 2026.

SBA 7(a) loans

Independent buyers and search funders commonly use SBA 7(a) for locksmith deals up to $5M purchase price. Rates run prime plus 2.0 to 2.75 percent with 10-year amortization. The constraint: SBA requires the seller to exit operationally within 12 months, which can conflict with state-licensing transitions that require 60 to 180 days. Build this into your closing timeline.

Commercial bank, mezzanine, and seller financing

Regional and community banks with home services or security-integration experience will lend 2.0 to 3.5x EBITDA at prime plus 1.5 to 2.5 percent for locksmith businesses with documented commercial RMR; residential-emergency operators cap at 1.5 to 2.0x EBITDA. For $3M+ EBITDA platforms, mezzanine or unitranche bridges senior debt and equity at 10 to 14 percent with warrants (Twin Brook, Monroe Capital, Antares, and regional SBIC funds are common providers). Seller financing typically runs 5 to 15 percent of purchase price, subordinated, 5 to 7 year term at 6 to 8 percent. Seller paper is particularly common in locksmith because the seller often needs to remain operationally engaged for license-transfer purposes.

Red flags that kill locksmith deals

Some deals should not close. The patterns that consistently predict post-close failure:

• State license held by founder personally, not corporate entity. Common in regulated states. License transfer can take 4 to 6 months and may require the new operator to pass a board exam.
• RMR contracts not in the operating entity’s name. If service contracts are written on the seller’s personal LLC or a sister entity, the contracts may not transfer in an asset purchase. Buyers have lost 30 percent of expected RMR this way.
• Manufacturer certifications concentrated in one person. If 80 percent of ASSA ABLOY Aperio or SALTO certifications belong to the founder, the certifications walk out the door if the founder does. Re-certification takes 12 to 24 months.
• Google LSA verification history with fraud flags. Google has repeatedly cracked down on locksmith LSA fraud. A business with prior verification failures is at LSA-suspension risk.
• Automotive programmer equipment more than 5 years old. Late-model vehicle programming requires current-generation equipment; old programmers cannot service post-2022 vehicles.
• Quality of earnings reveals 15 percent+ EBITDA adjustment. A 10 to 15 percent adjustment is normal; above that, the diligence premium typically makes the deal uneconomic.

The CT Acquisitions perspective

We work both sides of the locksmith market. Observations from the last 36 months of locksmith M&A:

• Commercial-led operators are systematically underpriced relative to security-integration comps. A locksmith business with $400K of commercial RMR and ASSA ABLOY or SALTO certifications often trades at 4.5x to 5.5x EBITDA from local buyers when a security-integration strategic would pay 6.5x to 7x. The bid spread reflects information asymmetry, not disagreement on value.
• License-transfer risk is real and consistently under-diligenced. Multiple deals stall at the licensure stage because the buyer did not verify pre-LOI that the seller’s license would transfer or that the buyer could self-credential in a reasonable timeframe.
• Pop-A-Lock franchise resales are a different market entirely. Disclosed FDD unit economics anchor pricing in a tight range (2.5x to 4x SDE) and competition is mostly within the existing franchise network.
• Search funders are well-positioned in the $400K to $1M SDE band. Security-integration strategics do not bid here. A search funder with SBA financing and a clean structure can win these deals on speed and certainty.

If you’re a buyer, here’s what we recommend

Whether you are a first-time search fund buyer, an independent sponsor, or a security-integration strategic adding bolt-ons, the same playbook works.

1. Pick your sub-category before you build a sourcing pipeline. Residential and commercial deals come from different lead channels and require different operational expertise. A buyer chasing both at once typically loses both.
2. Verify state license transferability pre-LOI. Pull the seller’s license records from the state board, confirm the transfer process and timeline, and build it into your LOI. Do not assume the license transfers.
3. Underwrite the certified-technician dynamic. Map every certified staff member, build retention into the deal structure pre-LOI, and budget for one or two key technicians departing anyway.
4. Pay for commercial RMR, not for residential revenue. A locksmith business with $600K EBITDA but only $50K of commercial RMR is fundamentally different from one with $400K EBITDA and $200K of commercial RMR. Pay the commercial multiple on the commercial revenue stream and the residential multiple on the residential revenue stream; do not blend.

Working with CT Acquisitions as a buyer

We maintain a qualified buyer network of security-integration strategics, family offices, independent sponsors, and search funds active in commercial-led locksmith and access-control bolt-ons. If your thesis fits the deal flow we see, we are direct, fast, and selective about the introductions we make. We do not run broad auction processes. We are paid by the buyer at close; founders pay nothing. If you are actively acquiring in locksmith or commercial access-control, set up a 30-minute conversation to walk us through your thesis.

Frequently asked questions about buying a locksmith business

What EBITDA multiple should I pay when buying a locksmith business in 2026?

For commercial-led operators with 40 percent or higher RMR, manufacturer certifications (ASSA ABLOY, SALTO, dormakaba, Allegion), and documented service contracts, expect competitive bidding in the 6x to 7x EBITDA range from security-integration strategics. Mixed residential and commercial operators without formal RMR transact at 3.5x to 5x SDE. Pure residential emergency operators cap at 3x to 4x SDE.

How long does it take to close a locksmith acquisition?

90 to 150 days from signed LOI to close. State licensing transitions in regulated states (NJ, NC, IL, CA, TX, and others) frequently extend timelines by 60 to 120 days because the new operator must re-credential before the business can operate legally. Always confirm license-transfer timeline pre-LOI.

Should I use an SBA loan to buy a locksmith business?

SBA 7(a) works cleanly for deals up to $5M purchase price at prime plus 2.0 to 2.75 percent over 10 years. The constraint is the SBA requirement that the seller exit operationally within 12 months, which can conflict with state-licensing transitions. Plan the closing-and-license timeline together with your SBA lender.

What due diligence is required when buying a locksmith business?

Standard M&A diligence (quality of earnings, legal, insurance) plus locksmith-specific: revenue-mix decomposition by sub-category, RMR contract analysis, manufacturer certification inventory, state license and bond verification, technician-level unit economics, lead-source decomposition (especially Google LSA dependency), and automotive programmer aging schedule.

What makes a locksmith business a platform acquisition target?

Four characteristics: $750K+ EBITDA with 40 percent or higher commercial RMR mix, manufacturer certifications held by multiple technicians not just the founder, documented service-contract book with 90 percent or higher renewal rates, and clean state-licensing status across all operating geographies.

Can I buy a locksmith business with no industry experience?

Yes, with planning. The cleanest path is acquiring a business with a licensed and certified GM in place plus a 12 to 24 month founder transition. In regulated states you will need to either earn the locksmith license yourself or appoint a licensed designee.

How does state locksmith licensing affect buying a locksmith business?

Roughly 15 states require state-level licensure (NJ, NC, IL, CA, TX, TN, NV, LA, CT, VA, OR, OK, MD, AL, NE). License transfer typically takes 60 to 180 days. In an asset purchase, licenses generally do not transfer; the buyer must re-credential. Keep the seller operationally available for 90 to 180 days post-close in regulated states.

How much working capital do I need to close a locksmith deal?

For a $1M EBITDA business, expect 6 to 10 percent of revenue in working capital at close (receivables, hardware inventory, vehicle and equipment reserves), typically $200K to $500K on top of the purchase price. Automotive-heavy operators need an additional reserve for programmer-equipment replacement on a 3 to 5 year cycle.

Related resources for buyers

• Locksmith valuations and multiples (seller perspective): useful context on what sellers are being told
• Locksmith business valuation guide: detailed walkthrough of multiples, adjustments, and benchmarks
• Buying a security-integration business: adjacent vertical with overlapping buyer base
• Buy a business: full vertical index: every category we cover for buyers
• Book a 30-minute buyer conversation: walk us through your thesis and we will be direct about deal-flow fit