Two-Person Unlock

Learn how to require credentials from two different, authorized users to grant access at a door

Two-Person Unlock increases door security by requiring two authorized users to present valid credentials within 10 seconds of each other before access is granted and the door is unlocked.

When two-person unlock is enabled on a door schedule, certain unlock methods are restricted:

• Bluetooth unlock is disabled for all users, including users in exempt groups.

• Remote unlock is disabled for all users, except users in exempt groups.

---

Configuration

You can enable the two-person unlock setting on door schedules during time periods when the Door Status is set to access-controlled.

1

In Verkada Command, go to All Products > Access.

2

Under Doors, select the door you want to configure.

3

In the top right, click Schedule.

4

At the top left, next to Door Schedule, click > Edit Current Schedule.

5

Set the start and end times of the schedule and select one or more days of the week on which the schedule should be applied.

6

Next to Advanced Settings, click Show all.

7

Toggle on Two-Person Unlock.

a. Exempt groups - Members of these groups can unlock the door without a second user. b. Required groups - At least one of the two users must belong to one of these groups to complete the unlock.Note: Users in exempt or required groups must still be granted door access through an assigned access level to unlock it. See Assign a User Access to a Door for more information.

8

Click Done.

9

At the top right of the page, click Save.

---

Use two-person unlock

1

When the first user presents their credential on the door reader. One of three outcomes occurs:

• Standard Flow: If the user has access (and is not exempt), a 10-second timer begins, and the reader waits for a second credential.

• Access Denied: If the user does not have access to the door, the reader will immediately display a red LED.

• Exempt User: If the user has access and is in an exempt group, the reader shows a green LED and the door unlocks. The two-person rule is bypassed.

2

A second, unique user must present their credential within the 10-second window. One of three outcomes occurs:

• Success: If the second user’s credential is valid, the reader shows a green LED and the door unlocks.

  Note: If required groups are configured, at least one of the two users must belong to a required group. If both users are valid but neither is in a required group, access is denied, and the reader shows a red LED.

• User with No Access: If the second user does not have access to the door, the reader shows a red LED, and access is denied for both users.

• Timeout: If no second credential is presented within 10 seconds, the attempt times out and the reader shows a red LED.

To retry after a failure or timeout, the process must restart with the first user presenting their credential again.

---

FAQ

Is two-person unlock supported with Bluetooth unlock?

No. When two-person unlock is enabled on a door schedule, Bluetooth unlock is disabled for all users, including exempt users.

Is two-person unlock supported with remote unlock?

When two-person unlock is enabled on a door schedule, only users in exempt groups can use remote unlock.

Can two-person unlock be used with two-factor entry?

No. Two-person unlock with two-factor entry is not currently supported.

Can two-person unlock be used with wireless locks?

Two-Person Unlock is supported only on the Verkada AL54 wireless lock and on Schlage AD and Assa Abloy Aperio models.