Every time manufacturers bring a new “unpickable” lock to market, amateur and professional locksmiths descend on the new product to prove them wrong. [Shane] from [Stuff Made Here] decided to try his hand at designing and building an unpickable lock, and found that particular rabbit hole to be a lot deeper than expected. (Video, embedded below.)
Most common pin tumbler locks can be picked thanks to slightly loose fits of the pins and tiny manufacturing defects. By lifting or bumping the pins while putting tension on the cylinder the pins can be made to bind one by one at the shear line. Once all the pins are bound in the correct position, it can be unlocked.
[Shane]’s design aimed to prevent the pins from being set in unlocked position one by one, by locking the all pins in whatever position they are set and preventing further manipulation when the cylinder is turned to test the combination. In theory this should prevent the person doing the picking from knowing if any of the pins were in the correct position, forcing them to take the difficult and time-consuming approach of simply trying different combinations.
[Shane] is no stranger to challenging projects, and this one was no different. Many of the parts had to be remade multiple times, even with his well-equipped home machine shop. The mechanism that holds the pins in the set position when the cylinder is rotated was especially difficult to get working reliably. He explicitly states that this lock is purely an educational exercise, and not commercially viable due to its mechanical complexity and difficult machining.
A local locksmith was unsuccessful in picking the lock with the standard techniques, but the real test is still to come. The name [LockPickingLawyer] has probably already come to mind for many readers. [Shane] has been in contact with him and will send him a lock to test after a few more refinements, and we look forward to seeing the results!
If you deny access to the cylinder and pins by inserting the key completely inside the lock, it becomes nearly impossible to pick.
I think…
The bowley lock does just this. Pins don’t touch the key until it’s a half a turn in the lock. Lockpickinglawyer and bosnianbill haven’t been able to design a tool to pick it yet.
https://www.bowleylockcompany.com/
It’s a cool key design because there’s a big slot cut in it to clear the pick block.
Yes, but despite the hype, it took me (a professional locksmith) and a professional lock tool maker friend just an evening to find 3 different ways to open it, and to do so on video in under a minute.
Do you have a link to said video?
Here’s one of someone opening a Bowley
https://www.youtube.com/watch?v=KS0FSzamUzc&ab_channel=huxleypig69
Lift all the pins up, engage the “pin break”, turn the cylinder, disengage the pin break, let the pins fall in place. Depending on the machining tolerances, this should unlock it. It would be like a bump key, just not with the force of bumpkey, but the force of the pin springs. The pin break should be engaged by the rotation of the cylinder, not by the key, where the picker can control it.
Might be unpickable, but certainly not indestructible.
Nothing is. Safe techs drill through meters of super hard barrier materials to open big vault doors. But this design is better than most, and great for a house lock.
Specifically, I meant that due to its complexity and delicate parts, it might be more susceptible to just a simple screwdriver + wrench force attack than just a regular lock.
AN unpickable lock…
Any lock can be removed with a thermobaric lance. Even if you made it of stone.
If I wanted something unsinkable, I’d use a key with no moving parts. An optical key and optical fiber lock, built out of AR 500, should be very penetration and pick proof.
Damn autocorrect, sentences away and still changes my writing. Unpickable!
We really need an edit function already, ffs.
Keys for the cheapest locks already have no moving parts.
Measure twice, cut once.
I meant no pins to move, only the unlocking bolt, not connected physically to the keyhole- a key and lock body that shines light through the key, tracking a specific time delay at specific angles through many channels of an optical fiber laced key with no geometry, like a cylinder filled with glass fibers.
Kind of like the key to a Brama lock, but with no pins.
Lock only opens when a specific time delay very precisely measured is achieved through optical feedback only.
Something of that nature, only the bolt moves. No acceptable electronics- only pathways for optical fiber.
Using a special glass for time delay of light, perhaps.
Something like that was what I was thinking.
I suspect there would be side channel attacks with something that intricate. I’d just use pure electronics. Take a smart card, put the reader in a faraday cage, and disconnect power and only use battery while doing crypto.
I doubt anyone would get in unless they stole and reverse engineered the card, if it was competently made by security professionals.
Nothing is safe from the lock picking layer…….
If I were to design the lock I would go by the Bowley’s way (see https://www.youtube.com/watch?v=qV8QKZNFxLw).
This seems to me to be unpicable lock
It has been picked. Using multiple thin picks shaped much like the key, one for each pin.
What about the latest generation Forever Lock with the sliders? Never seen that picked.
This article frome four years ago details some successful attacks. http://lockreviewer.com/forever-lock/
The main issue is availability of the locks. This comes down to cost, mostly. I have bought countless locks, brand new, and taken them apart. It took us months to get the Bowley single & double bitted locks. Beating them took only a few hours.
The “Stealth key” lock is another one I would like to play with, but with the padlock costing $1000, I’ve only had a little hands-on time with no chance to pick it.
we have to ask him to unlock the editing feature in the comments that only moderators have access to..
I’m one of the most problematic regular commenters on this site, I regularly check back on past posts. I’ve never seen any evidence of such features.
Moderators can do anything. If they can’t they ask admin or programmer to make edits in db. That they don’t use such features (out of decency and good-will) is not evidence that they don’t exist. Also if your mail or data in some cloud is not e2e encrypted, owner of server definitely has access to them (but typically is not really interested in your files specifically).
@Fosselius means going back to edit typos/thinkos/whatever in comments. It’s top on our list of features-to-add as well when we get some idle web-developer time.
We’ve got some other fires that need putting out at the moment, though. Sigh.
But I’m going to call it: 2021, Hackaday’s 17th anniversary, is going to be the year of editable comments. (I’ve been wrong about Linux on the desktop every year since 1994…)
Many things are, he is a solid picker but nowhere near the level of others in the community. Remember, he’s popular because he is entertaining, not because he is good.
Entertaining, informative and his videos have a good production quality.
You’re stating he isn’t good? I’d say that even if he isn’t the best in the world he is still… good.
The purpose of a lock is to delay access, not prevent it. Most locks provide seconds of protection, if not less which is shocking to most. The best locks/doors will provide minutes of protection, which might be enough time to detect an intrusion is taking place and to do something about it. If you look at locks with that perspective, you’ll be way ahead of the game when it comes to home protection.
You make a very good point. Locks, like laws, are only for the law-abiding. The guidelines “never pick a lock you depend on” and “never pick a lock for which you do not have permission” also bear repeating. Let not thy enthusiasm lead thou to the hoosegow.
I find myself amazed by how many $500,000 homes are “protected” by $15 locks.
Locks keep honest people honest, so it doesn’t matter how strong your lock is, only having a majority of honest people around the said lock does.
last i checked, $500,000 homes are still made with 2×4’s, drywall, plywood, and glass. nothing a [stolen] rock/sawzall/vehicle couldn’t break through for anyone dedicated to the cause.
Subtle.
You say that, but I recall some guy in the VW community who had his garage broken into that way while he was away. They cut a hole through the wall big enough to crawl through.
Not common, but still a valid approach.
No one steals houses by picking locks.
No, to steal a house, you need a truck, jacks, blocks, helpers…
Another purpose of a lock is to prevent non destructive intrusion.
“The purpose of a lock is to delay access, not prevent it.” True, but sometimes that’s enough, thieves check multiple locked doors just to find one left unlocked, so the lock that is locked serves it’s purpose. A predator can eat a porcupine if it tries hard enough, but it’s easier to eat squirrels, so the porcupine isn’t eaten.
I think it could still be picked, but you’d need a precise measurement gauge to tell you the rotation of the cylinder. Essentially, you’d try different positions for one pin at a time. When one pin is in the correct place, the amount of allowed rotation should be a tiny bit different. You might need to find out which is the first binding pin before you see a difference. You will also need a gauge to tell you what height you’re setting each pin to. As well, you’ll need a way to maintain the set of previously-done pins while testing the next pin. In other words, you’d need an adjustable key mechanism made for this specific lock. So, not impossible to pick, but very unlikely that anyone would have the right tools.
Design one that looks exactly like a “Yale” lock (or any other common brand) on the outside, but the mechanism inside is completely different.
That’s brilliant- lock disguise.
That would fool a lot of people.
He should really offer his creation up as a challenge to reddit lockpicking or keypicking.com. That’s where the best lockpickers in the world hang out.
Hold my beer…
If you can build it. Someone will figure out how to open it.
The crackheads don’t even bother. They ring the doorbell twice. If no-one answers they go around back and kick in the door.
Heh, probably patentable idea: make a lock, where key positions are mechanically copied, disengaged from key through rotation and then checked against pins?
Your idea became unpatentable the moment you revealed it to the masses
Execution would be patentable though. Ideas are easy.
Anyone know a metal WITHOUT ceramic spheres impeded that can’t be machined except by EDM?
AR500 does not qualify.
If so, hold my beer….
try this one
https://www.youtube.com/watch?v=oHtmaVwZnaE&t=9s