How-To GuidesLast updated

    How to remove user access on a TTLock smart lock

    To remove a user's access, open the lock in Smart Lukko and delete their eKey, passcode, card or fingerprint from the relevant management screen. eKeys and cloud-synced passcodes often revoke instantly over the internet, but deleting a fingerprint, card or an offline passcode usually needs your phone within Bluetooth range of the lock, or a paired gateway, to actually clear it from the lock's memory.

    What you need

    Smart Lukko is an independent third-party app for TTLock-compatible smart locks, not affiliated with TTLock or Sciener, and revoking access follows the same underlying rules as the wider TTLock ecosystem. Before removing anyone's access, make sure you have:

    • Admin or authorised-admin rights on the lock; normal eKey holders cannot revoke other users.
    • Bluetooth range of the lock, or a working paired gateway, for any change that has to physically write to the lock's memory (passcodes, cards, fingerprints).
    • An idea of what to remove — check the user list first so you revoke the right eKey, passcode, card or fingerprint rather than a similarly named entry.

    Step-by-step: revoking access

    1. Revoke an eKey. Open the lock, go to the user or eKey list, select the person, and tap Delete/Revoke eKey. This is generally sent through the cloud, so it can take effect even if you are not standing at the door, once the recipient's app or the lock next syncs.
    2. Delete a passcode. Open Passcodes, select the code to remove, and tap Delete. If it is a synced (not offline-algorithm) passcode, this deletion needs to reach the lock's own memory — connect over Bluetooth or let a gateway push it.
    3. Remove a card or fingerprint. Open Cards or Fingerprints, select the entry, and tap Delete. These almost always require a live connection to the lock (direct Bluetooth or via gateway) because the credential template is stored physically on the lock's controller board.
    4. Confirm the sync completed. The app typically shows a spinner or success message when the deletion has actually reached the lock; if it fails, move closer or check the gateway's status before assuming the user is locked out.
    5. Re-check the user list. Refresh the screen to confirm the eKey, passcode, card or fingerprint no longer appears.

    Why some deletions need Bluetooth range or a gateway

    eKeys live primarily in the cloud account system, so revoking one is often just a database change that the recipient's app respects the next time it checks in — no direct radio link to the lock is strictly required for the revocation to be recorded, though the lock itself may need a sync for fully offline enforcement. Passcodes, cards and fingerprints, by contrast, are stored as data directly on the lock's own controller. Deleting them from the app only queues the instruction; the lock has to actually receive and execute that instruction to erase the credential, which means either your phone connecting over Bluetooth or a paired gateway relaying the command over Wi-Fi. Until that sync happens, the old card, fingerprint or offline passcode will still work at the door even though it looks deleted in the app.

    Checking records after revocation

    After removing access, it is worth confirming the change actually reached the lock rather than assuming the app screen tells the full story:

    • Re-open the user, passcode, card or fingerprint list and verify the entry is gone after a sync, not just marked pending.
    • Check the unlock records for any successful entries using the revoked credential after the deletion time, which would indicate the sync had not yet reached the lock.
    • Test in person for high-stakes situations, such as an ex-employee or a lost card, by attempting the old code or card yourself once the deletion should have synced.

    Frequently asked questions

    Why does the app say a passcode is deleted but it still works on the keypad?

    Deleting a passcode in the app queues the removal, but the lock only actually erases it once your phone connects over Bluetooth or a paired gateway relays the command. Until that sync happens, the code still works at the door.

    Can I revoke someone's eKey without visiting the lock in person?

    Yes. eKey revocation is generally handled through the cloud account system, so it can be sent remotely; the recipient loses the ability to use that eKey once their app or the lock next checks in.

    Do I need a gateway to remove a fingerprint or card?

    You need either Bluetooth range of the lock or a paired gateway online, because fingerprint and card templates are stored physically on the lock and the deletion has to be delivered to it directly.

    How can I tell if a revoked user has already used the credential again?

    Check the lock's unlock records after the deletion time. Any successful entry with the revoked eKey, passcode or card after that point means the sync had not reached the lock yet.

    Can a normal eKey holder revoke another user's access?

    No. Only admin or authorised-admin eKey holders can revoke eKeys, passcodes, cards or fingerprints. A normal eKey only grants the ability to unlock the door.

    Related feature: Share eKeys and access guide

    Keep reading