Combination locks range from barely secure to nearly impenetrable, depending on the type you buy and what you’re protecting. A cheap combination padlock from a hardware store can be bypassed in seconds, while a high-security combination lock built to government specifications resists expert manipulation for 20 hours or more. The difference comes down to construction quality, internal mechanism design, and the specific vulnerabilities each type carries.
How Combination Locks Actually Work
Every combination lock uses a set of internal devices called a wheel pack. Each wheel in the pack corresponds to one number in your combination. When you dial the correct sequence, notches on all the wheels align at once, allowing a bolt or latch to release. A standard rotary dial lock with 40 numbers and a three-number combination has 59,280 possible sequences (40 × 39 × 38), assuming no repeated numbers. If repeats are allowed, that jumps to 64,000.
That sounds like a lot, but the real question isn’t how many combinations exist on paper. It’s how well the lock resists the practical ways people actually break into them.
Where Cheap Combination Locks Fall Short
The combination padlocks most people picture, the kind you’d find on a gym locker or luggage zipper, have well-known weaknesses. The most common is shimming: inserting a thin piece of metal between the shackle and the lock body to compress a spring-loaded latch inside. Low-cost padlocks, luggage locks, and non-hardened models are particularly vulnerable because they lack internal features like ball-bearing latches or anti-shim plates that block this technique.
Shimming doesn’t require any special skill. The tools can be made from a soda can. This means a basic combination padlock offers deterrence against casual theft but provides almost no real security against someone who spends five minutes watching a tutorial. If your lock uses a spring-loaded latch mechanism rather than a ball-bearing latch, it’s susceptible.
Beyond shimming, many inexpensive rotary combination locks can be decoded through feel. Slight manufacturing imperfections in the wheel pack create tactile feedback as you slowly turn the dial. With patience, someone can narrow down each number in the combination by detecting these subtle changes in resistance. Higher-quality locks are machined to tighter tolerances specifically to eliminate this feedback.
What Makes a Combination Lock Genuinely Secure
Security-rated combination locks are a completely different category. The U.S. government classifies combination locks under federal specifications that set minimum resistance times against expert attack. Locks meeting Federal Specification FF-L-2740, the most stringent standard, must resist 20 hours of manipulation by a trained professional, 20 hours of radiological analysis (using X-rays or similar imaging to see internal components), and 20 hours of emanations analysis (detecting the lock’s internal movements through sound or vibration). They must also resist 30 minutes of covert entry, meaning any technique that tries to open the lock without leaving evidence.
The Sargent & Greenleaf 2937, the only approved mechanical combination lock under Federal Specification FF-L-2937, is used for storing classified information in military settings. It operates entirely without electronics. For even higher security, electromechanical locks like the Kaba Mas X-10 series use an LCD display instead of printed numbers and meet those same 20-hour manipulation resistance benchmarks.
Underwriters Laboratories also rates combination locks under UL 768. A Group 1 rating, the highest, indicates the lock has passed rigorous manipulation resistance testing. Locks on GSA-approved containers for weapons, ammunition, and classified materials are required to meet either FF-L-2937 or UL 768 Group 1.
Mechanical vs. Electronic Combination Locks
If you’re choosing a combination lock for a safe, you’ll likely decide between a mechanical dial and an electronic keypad. Both can be highly reliable when made by reputable manufacturers. Mechanical locks have no batteries and no circuits, so they won’t fail due to dead batteries or electrical issues. They can last decades with minimal maintenance.
Electronic combination locks accept a four- to six-digit code punched into a keypad. Quality models store your combination in memory even when the battery dies, so losing power doesn’t lock you out permanently, but you will need to replace the battery to operate the keypad again. Manufacturers like SecuRam run each electronic lock through 2,000 open-close cycles during production, scrapping any unit that fails at any point.
The practical tradeoff is convenience versus simplicity. Electronic locks let you change your combination in seconds and can offer features like audit trails or time-delay openings. Mechanical locks have fewer components that can fail and don’t require you to think about battery life. For home safes, either type from a quality manufacturer provides strong security. The lock itself is rarely the weakest point of a residential safe; the walls, door thickness, and anchoring matter just as much.
Matching the Lock to What You’re Protecting
A combination lock’s safety depends entirely on context. For a school locker or gym bag, a basic combination padlock keeps honest people honest, and that’s about all you need. For a storage unit or shed, look for a combination padlock with a hardened steel shackle, ball-bearing latch mechanism, and anti-shim design. These features eliminate the easiest bypass methods and force an attacker to use destructive tools that take time and make noise.
For a home safe protecting documents, firearms, or valuables, a combination lock rated UL 768 Group 2 or higher provides meaningful resistance to manipulation. Group 1 locks offer the highest level of protection available in commercial products. For anything involving classified materials, military assets, or high-value industrial applications, only locks meeting FF-L-2740 or FF-L-2937 are considered adequate.
The bottom line: combination locks as a category aren’t inherently safe or unsafe. A $7 padlock from a convenience store and a government-rated safe lock both use combinations, but they exist in entirely different security universes. The version most people encounter, the basic padlock, is one of the easiest locks to defeat. The version used to protect national security assets is among the hardest. Your security depends on choosing the right version for your situation and not assuming all combination locks offer the same protection.