A Gate Code Does Not Secure Your Storage Unit

Storage unit keypad access is useful, but it is not proof of safety. A lawsuit seeking more than $1 million alleges that masked thieves entered an Englewood, Colorado, CubeSmart with a valid code roughly one hour after renters finished moving in, then emptied their unit over three days. The gate reportedly recorded an accepted credential; it did not prevent the theft (Inside Self-Storage).

Why The Standard Security Pitch Sounds Reasonable

The received wisdom is not baseless. A gated facility with individually assigned codes and cameras generally offers more control and accountability than an open lot with a shared key or no perimeter control.

A unique code can restrict access by account and schedule. Management can disable one renter without changing every tenant’s credential. Depending on the software, the log may record the time, access point, assigned account, entry or exit direction, and whether access was granted or denied (Storable).

Cameras can then add context to a gate event. If their clocks align with the access system, footage may show a person, vehicle, clothing, direction of travel, or whether several people entered on one credential. Gates also discourage casual trespassing.

Those are real advantages. There is nevertheless no independent burglary-rate evidence in the available material showing that keypad-controlled facilities are categorically safe, or quantifying how much a keypad reduces theft. Operator and vendor sources describe system capabilities, not comparable theft rates.

The limitation is authentication. A keypad authenticates a code, not the human entering it. From the machine’s perspective, a renter, relative, mover, former tenant, employee, or person who observed the PIN may all look identical if they present an accepted credential.

Access Logs Usually Explain Events After They Happen

In most storage layouts, the keypad controls a perimeter gate, shared building door, or elevator. It does not control the door to the individual unit. Once someone passes that checkpoint, the stored property still depends on the unit’s lock, latch, door, walls, and any unit-level alarm.

A log entry associated with “Jane Smith” establishes that a credential assigned to Jane’s account was accepted. It does not conclusively establish that Jane was present. Entry-and-exit readers provide more context, but tailgating, shared vehicles, missing exit events, and code sharing can complicate the record.

Patterns such as repeated denials, rapid successful entries, use at unusual hours, or entry without a corresponding exit may justify review. None proves wrongdoing. Their value depends on whether somebody reviews alerts, checks the property, compares footage, contacts the renter, and preserves records.

That makes access logs primarily investigative evidence unless the facility actively monitors and responds to them. Collecting months of events without an assigned response process does little to stop an incident in progress.

Answer the four operating questions; the score shows whether the facility has earned trust beyond its keypad, cameras, and gate.

The Englewood Case Shows The Prevention Gap

David and Nina Goodlund filed suit in Arapahoe County District Court on April 21, 2026, seeking more than $1 million from two CubeSmart entities and facility manager Kathleen Hughes. The active civil case has not produced a verdict.

According to the complaint and news reports, three masked thieves used their own valid keypad code at the CubeSmart property at 1090 W. Hampden Ave. on November 9, 2025. They allegedly arrived about an hour after the Goodlunds finished loading, went directly to the unit, and returned over three days (BusinessDen).

The available reports do not establish how the code was acquired. It could have been shared, observed, stolen, left active, improperly issued, or obtained another way. Allegations that an employee supplied information or participated in the theft remain unresolved.

The complaint says Hughes told David Goodlund that the facility had experienced zero break-ins during the preceding 12 months. It alleges that statement was false and cites earlier thefts at the same property. That is an allegation, not a final finding.

The lawsuit also alleges that required daily lock checks were not performed. Staff reportedly did not flag the unsecured unit until the theft had continued for three days. Routine checks cannot guarantee prevention, but a documented check may shorten the time between a damaged or missing lock and renter notification.

A police detective’s affidavit reportedly said CubeSmart had “a long history of not cooperating with law enforcement,” including with requests for video and access records. Reporting says police received footage more than three weeks after the theft was discovered (Littleton Independent).

The suit asks a judge to compel production of security footage, access logs, and phone records that the plaintiffs say CubeSmart did not voluntarily provide. That dispute underscores another limitation: a record can assist an investigation only if it was retained, can be located, and is produced through the proper process.

Police arrested Brandon Lee Romero in January 2026 in connection with the underlying case. An arrest is not a conviction, and neither the arrest nor the pending lawsuit establishes criminal responsibility or civil liability.

The case does not prove an industry-wide keypad failure rate or show that every CubeSmart location follows the same practices. It demonstrates a narrower point: a gate can work exactly as designed while admitting someone who has no legitimate authority to approach a particular unit.

Valid Codes Fail Through Administration And Human Behavior

A keypad does not have to malfunction for the checkpoint to fail.

Shared And Observed Codes Weaken Attribution

Renters often share permanent PINs with relatives, movers, employees, or contractors. The log then cannot distinguish among those people. A code may also remain in messages or a worker’s phone after access is no longer needed.

Someone near the entrance may watch a tenant enter a PIN. Drivers may type slowly, repeat an attempt, or expose the keypad to a vehicle-mounted camera. A privacy shield and covering the keys reduce casual observation but cannot prevent every disclosure.

Separate credentials are preferable for additional users because each can be limited and revoked independently. If the facility cannot issue them, a renter should replace the permanent code after a mover or contractor finishes.

Predictable And Stale Codes Remain Valid Credentials

Codes based on phone numbers, birth dates, unit numbers, repeated digits, or simple sequences are easier to infer. A facility-wide code creates an additional disclosure problem because every person who learns it becomes another possible source.

StoragePug recommends randomized tenant-specific codes, avoiding credentials derived from personal information, and replacing the keypad’s default master code after installation (StoragePug). These are sensible administration practices, not proof that a particular PIN format prevents theft.

Former-tenant, lost, exposed, staff, master, and emergency credentials require prompt revocation and audit controls. A long code shared broadly or left active after move-out may provide less accountability than a shorter unique code that is private and immediately revocable.

Tailgating And Physical Bypasses Avoid The Keypad

A vehicle can follow an authorized renter through the gate. A pedestrian can slip through before it closes, and tenants may prop loading doors open during moves. Fence gaps, weak pedestrian entrances, damaged doors, accessible walls, and lock attacks bypass the electronic checkpoint entirely.

A tour should include one complete gate-closing cycle. Watch whether a second vehicle can enter, whether doors latch without assistance, and whether tenants routinely hold entrances open. A sophisticated keypad adds little while the gate or loading door remains open.

Outdoor hardware also faces weather, impacts, power failures, network interruptions, software outages, and gate-motor problems. Ask whether the gate stays closed, opens automatically, or requires staff intervention during each failure. The answer varies by property; the available evidence provides no universal default.

Four Answers Matter More Than A Feature List

A facility can advertise fencing, lighting, cameras, and an electronic gate while leaving the operational gaps unresolved. Before signing, require location-specific answers to the four questions in the score.

Prior Incidents Should Be Disclosed Accurately

Ask management how many reported break-ins or damaged locks occurred at that exact property during a defined period. If the answer is zero, request written confirmation. Also ask whether the statement covers tenant reports, police reports, attempted entries, and incidents discovered by staff.

A corporate security page cannot answer for one address. Camera placement, staffing, access hours, alarm coverage, gate hardware, monitoring, and incident history may differ among properties carrying the same brand.

Lock Checks Need A Log And Response Procedure

Ask how often employees inspect unit doors and locks, where checks are recorded, and what happens after a lock is missing, cut, damaged, or incorrectly seated.

A credible process identifies who contacts the renter, how quickly contact is attempted, whether the opening is temporarily secured, and who preserves relevant video and access records. “Staff walk the property” is not equivalent to a documented inspection.

Credentials Need Individual Rotation And Revocation

Confirm that each renter receives a unique code. Then ask whether former-tenant credentials expire automatically, how fast an exposed credential can be replaced, and whether staff, contractors, and emergency users receive separate codes.

Ask whether the system records both entry and exit, how long the logs remain available, and what prompts review. A unique code earns its accountability value only when it remains connected to the correct authorized user.

Records Need A Defined Release Process

Ask how the property handles police requests, preservation letters, and renter reports. Determine who can export access logs, who can preserve video before it is overwritten, and whether the camera and access-control clocks are synchronized.

“Video surveillance” may mean continuous recording, motion-triggered recording, live monitoring, or footage reviewed only after an incident. Confirm what applies to the gate, building, corridor, and unit approach you would actually use.

Unit-Level Security Still Carries The Final Load

After someone enters the property, the individual unit is the final barrier. Inspect the latch, mounting hardware, door edges, tracks, wall panels, and ceiling boundary. Look for corrosion, loose hardware, prior damage, gaps, or neighboring conditions that could permit access.

Ask whether the exact unit has an individual door alarm, electronic latch, or door-position sensor. Do not assume a feature advertised for the property applies to every building, floor, unit type, or rental tier.

Security vendors describe entry-and-exit readers, unit alarms, door-open alerts, restricted-area motion detection, and integrated cameras as complementary layers (PTI Security Systems). These descriptions establish available functions, not measured reductions in burglary.

An alarm also needs a recipient and a response. Ask who receives it, whether the renter is notified, what happens outside office hours, and how the facility handles a gate stuck open. “On-site management” may mean only that an office is staffed during business hours.

Use a lock compatible with the unit’s latch. Operators commonly recommend disc or cylinder locks over basic padlocks, although the cited material does not quantify how much either style reduces theft (Public Storage). No lock compensates for a damaged latch, weak door, accessible wall, or compromised cylinder housing.

Renters Should Preserve Their Own Evidence

Enter your own credential rather than following another vehicle through the gate. That preserves a more useful activity record and avoids normalizing tailgating. Do not wave an unknown vehicle through behind you.

During each visit, examine the lock, keyway, latch, door edges, tracks, walls, and nearby debris before opening the unit. Photograph unusual tool marks, damage, or unfamiliar objects before touching them. Report the issue promptly and retain messages, dates, and times.

Keep photographs, serial numbers, receipts, descriptions, and valuation records somewhere outside the unit. Documentation may assist a police report or insurance claim, but it does not guarantee recovery or coverage.

Read the applicable insurance policy or tenant-protection agreement directly. Check limits, deductibles, exclusions, valuation rules, proof-of-loss requirements, off-premises restrictions, and category sublimits. Ask the insurer—not only facility staff—how the coverage treats property kept in self-storage.

If the consequences of losing an item would be unacceptable, an ordinary storage unit may be the wrong place for it regardless of the gate technology.

The Evidence Supports A Narrow Decision Rule

The available evidence does not compare burglary rates for PIN keypads, mobile credentials, key fobs, biometrics, or multi-factor access. It cannot support a predicted theft probability, a percentage reduction, or a claim that one credential type is categorically safest.

Alternative credentials address particular weaknesses but introduce others. A fob can be lost or lent. A mobile credential depends on a device, account administration, software, and communications. Biometrics depend on enrollment, reader performance, privacy controls, and fallback procedures. Multi-factor access can improve credential assurance while creating access problems when one factor fails.

Operational quality remains decisive. Prefer a facility that discloses incidents, documents lock checks, revokes credentials promptly, preserves records, cooperates with lawful police requests, and protects the individual unit. Treat keypad access as the first checkpoint and its logs as potential evidence—not as a promise that the property is safe.