Virginia uses two connected regulatory keys. The individual performing locksmith services follows the Department of Criminal Justice Services registration and training path. A company offering locksmith services to customers follows the private-security-services business-license path and must designate a qualified compliance agent.

One key does not turn the other. An individual registration does not create a licensed business, and a company license does not erase the technician’s registration, training, fingerprint, identification, and scope responsibilities. Begin by naming the role you will actually hold.

Virginia two-key board

Individual registration + licensed business

For an employee path, confirm the worker, fingerprints, training, registration or valid temporary authorization, employer, and credentials carried on duty. For an owner path, add the business license, service category, compliance agent, insurance, records, and advertising controls.

The Virginia answer at a glance

• Individual role: locksmith is an individual registration category under Virginia’s Private Security Services program.
• Entry training: current DCJS guidance identifies the 25E locksmith entry-level course.
• Limited work-before-registration path: DCJS describes a 90-consecutive-day route only when its fingerprint, employer, authorization-document, and on-duty identification conditions are met.
• Business role: a company providing covered locksmith services needs the relevant DCJS private-security-services business license and a compliance agent.

Status: VERIFIED — CURRENT. Last checked against the cited Virginia DCJS sources in August 2026. This educational guide is not legal advice. Verify the current role, category, training, fingerprint, business, specialty, and local rules before performing services.

Key one: map the individual locksmith path

The current Virginia DCJS locksmith FAQ defines the regulated role and identifies 18 hours of 25E entry-level locksmith training. It also explains that a locksmith may work for up to 90 consecutive days while completing compulsory training only when fingerprints were submitted on or before hire and the person works for a DCJS-licensed Private Security Services company.

DCJS’s registration guidance adds that the employer must provide the 90-day authorization document and that the worker carries it with photo identification while performing regulated services. Do not shorten this into “Virginia lets beginners work for 90 days.” The conditions, employer, timeline, training, and records are the rule.

Key two: map the Virginia business path

DCJS’s current Private Security business FAQ includes locksmiths in the definition of businesses providing private-security services to another person under contract. It says the business may begin providing the service only after the private-security-services business license is issued.

A separate DCJS compliance-agent page explains that this designated person ensures the business and its personnel follow application, administrative, credential, record, and conduct requirements. DCJS states that an initial business license cannot be issued without a designated compliance agent.

Virginia record	Individual path	Business path
Identity and fingerprints	Worker’s application and current fingerprint status.	Principals and compliance roles as current rules require.
Training	25E entry-level course and continuing requirements for the category.	Compliance-agent training and oversight records.
Authority to work	Current registration or a valid, condition-complete authorization period.	Issued business license with locksmith category before customer service.
On-duty proof	Required credential or authorization document with photo identification.	Business, employee, insurance, advertising, and compliance records.
Verification	Current credential status in the DCJS tool.	Current business status and service categories in the DCJS tool.

Use the current Virginia verification system

DCJS’s Lotus resources state that the current External Verification Tool can search individual, business, and school credential status. Record the displayed status, category, and expiration date before relying on a person, employer, or training provider.

Registration still does not make every adjacent task appropriate. Separate mechanical locks from electronic security, alarms, wiring, construction, fire-rated openings, egress, automotive, safe, and other specialty work. Verify the current category and local authority before quoting a combined project.

Build a Virginia role-and-job record

1. Name the role. Employee, individual registrant, owner, manager, or compliance agent.
2. Verify both credentials. Check the worker and the employing or contracting business.
3. Record the training and fingerprint state. Do not infer completion from a job title.
4. Define the service. Separate mechanical, electronic-security, alarm, electrical, construction, and local-permit questions.
5. Set a stop point. Refer work that exceeds verified competence or enters an unresolved category.

Use How Locks Work and the tools overview for mechanical foundations. The first paid jobs readiness guide adds authorization, scope, capability, communication, and final testing. The ride-along lesson helps place those decisions in a field day.

Watch the workflow, then complete both Virginia keys

The video demonstrates locksmith workflow; it does not replace individual registration, business licensing, compliance-agent, fingerprint, training, category, or local verification.

Locksmith Blueprint Learning System

Read It. Watch It. Do It.

Read It

Compare the locksmith FAQ, individual category, business FAQ, compliance-agent guidance, and live verification record.

Watch It

Observe authorization, diagnosis, field workflow, and final testing without treating a demonstration as regulatory approval.

Do It

Build two checklists—individual and business—and connect them to one sample job with a documented stop-or-refer point.

Choose the next Virginia pathway

Use the Beginner Locksmith Path for mechanical sequence, the national career hub for employee and owner routes, and the 50-state licensing center for broader comparisons without replacing Virginia DCJS guidance.

VIRGINIA TWO-CREDENTIAL FIELD CONTROL CENTER

How to become a locksmith in Virginia without confusing the worker and business paths

Virginia regulates locksmith work through the Department of Criminal Justice Services, usually called DCJS. The person performing locksmith services follows an individual registration and training path. A company that offers those services to customers follows a separate private-security-services business-license path. That distinction is the central fact to understand before applying, advertising, buying equipment, or accepting a paid call.

Start with the role you will actually hold. An employee needs to verify the individual path and the licensed employer. An owner must handle both the individual path and the business path, including a compliance agent, insurance or bond, personnel records, advertising rules, and other current requirements. A registration held by one technician does not automatically license a company, and a company license does not replace each worker’s required registration.

Virginia defines locksmith work broadly

The current Code of Virginia definition section covers much more than emergency lockouts. It includes servicing, rebuilding, repairing, rekeying, repinning, changing combinations, originating or copying keys, programming keys or devices, installing or adjusting locks and deadbolts, working on mechanical or electronic locking devices, egress-control devices, safes and vaults, and opening or bypassing locking mechanisms for the public or on property outside the worker’s control.

The definition also reaches how a person represents the service. Advertising under another title does not necessarily avoid the rule when a reasonable customer would understand that the person has specialized lock skills. Build the plan around the real work and advertising, not a creative job title.

Virginia law contains specific exceptions, including limited situations involving retail key cutting, emergency responders, motor-vehicle dealers, towing businesses, and certain contractors. Read the current Private Security Services article before relying on an exception. An exception is narrow; it should not be stretched into permission to advertise general locksmith services.

Step 1: build the individual DCJS registration file

The DCJS locksmith FAQ identifies the 25E locksmith entry-level course as 18 hours and the 25I in-service course as four hours. The current initial registration regulation requires an application, mailing address, fingerprint submission, and the applicable fee for the locksmith category. The regulation says an initial registration may be issued for up to 24 months after the requirements are completed.

A beginner should create one dated checklist for the application, fingerprints, training, fees, employer, temporary work documents, issued credential, expiration, and renewal training. Use the exact current DCJS forms and online system rather than copying an old fee, mailing address, or processing timeline from a third-party page.

• Application: use the current DCJS individual registration route and select the correct category.
• Fingerprints: follow the current DCJS scheduling and submission instructions.
• Entry training: complete the current 25E locksmith course through an authorized route.
• Employer: verify that the employing private-security-services business is licensed for locksmith services.
• Credential: record the issued status and expiration in the DCJS verification tool.
• Renewal: calendar the current in-service training and renewal deadline rather than waiting for the last month.

The 90-day route has conditions, not a blanket permission

DCJS says a locksmith may work for up to 90 consecutive days while completing compulsory minimum training only when fingerprints were submitted on or before the date of hire and the person is employed by a DCJS-licensed Private Security Services company. The employer must provide the authorization document, and the worker carries that document with photo identification while performing regulated services until a temporary or permanent registration is issued.

Write the fingerprint-submission date, hire date, first regulated-work date, training deadline, authorization-document status, and registration status on one timeline. If any condition is unclear, stop regulated work and obtain a current answer from DCJS or the employer’s compliance agent. Do not market the 90-day route as an independent-business shortcut.

Step 2: build the licensed Virginia business path

Section 9.1-139 of the Code of Virginia requires a Department license before a person engages in or solicits private-security-services business. It also requires the business to designate a compliance agent. The current DCJS business page and business FAQ are the practical starting points for the application and operating rules.

The compliance agent is not an honorary name on a form. DCJS describes that person as responsible for helping ensure the business and employees meet application, administrative, credential, record, and conduct requirements. The compliance-agent page provides the current application, fingerprint, training, renewal, and replacement guidance.

Insurance or a surety bond is also part of the current business path. The DCJS insurance FAQ explains that coverage or bond must be secured before the license becomes operative and maintained while the business is licensed. Confirm the current amount, certificate wording, carrier authorization, covered services, vehicles, employees, subcontractors, customer property, keys, codes, and electronic-security work with DCJS and a qualified insurance professional.

Do not confuse DCJS licensing with forming the company

The private-security-services license does not form a corporation or limited liability company. The Virginia State Corporation Commission startup page explains entity selection, business names, registered agents, and SCC registration. The Virginia Tax business-registration page covers current tax-account setup. Localities may add business-license, zoning, home-occupation, signage, parking, and permit questions.

Build separate records for the entity, taxes, local approvals, DCJS business license, compliance agent, insurance or bond, individual credentials, employee files, vehicle and tool controls, customer authorization, key and code custody, estimates, invoices, warranties, complaints, and retention. The business should not advertise a service until the appropriate license, people, insurance, training, equipment, and final test are all ready.

Separate mechanical locksmith work from adjacent regulated work

Virginia’s locksmith definition includes mechanical and electronic locking devices, but that does not mean one registration answers every question involving alarm, electronic security, low-voltage wiring, electrical work, construction, fire-rated openings, accessibility, or egress. Before quoting a powered opening, list every physical and electronic function and identify who is responsible for design, permits, wiring, programming, inspection, and acceptance.

• Mechanical work: cylinder, key, lock case, latch, bolt, strike, door, frame, hinges, and closer.
• Electronic-security work: reader, credential, controller, relay, request-to-exit device, door-position switch, programming, and monitoring.
• Electrical work: power source, circuit protection, cable, grounding or reference conductors, listed equipment, and disconnects.
• Life-safety work: egress, fire alarm release, rated-opening integrity, accessibility, emergency operation, and final inspection.
• Local work: building permits, trade permits, inspections, business licenses, zoning, and local enforcement.

Ask DCJS and the relevant local authority about the exact task, not only the job label. “Install access control” is too vague. “Cut the frame for an electric strike, run cable, connect a listed power supply, program credentials, and test fire-alarm release on a rated exit door” gives the official enough detail to identify the responsible categories.

Virginia job-scope examples

Residential rekey in Richmond

Verify the owner or authorized occupant, inspect the complete opening, identify the cylinder and keyway, define which old keys should stop working, write the price and scope, control pins and keys, and test every key plus latch and bolt operation with the door open and closed. Confirm the worker registration, licensed employer, and local business requirements before dispatch.

Commercial electric strike in Northern Virginia

Separate mechanical preparation, electrical power, electronic-security programming, fire-alarm interface, egress, accessibility, permit, and inspection work. Document each responsible person and test normal access, mechanical exit, request to exit, power loss, alarm release, door closing, latching, and final acceptance within the approved scope.

Vehicle key in Hampton Roads

Verify customer identity and authority over the vehicle, confirm the supported key and immobilizer system, document travel and programming terms, protect battery voltage and modules, and stop when ownership or technical evidence is incomplete. Automotive competence, insurance, data access, and key-programming controls remain separate readiness questions.

Master-key change at a Virginia facility

Confirm who controls the system, which doors and users are authorized, how bitting and key records will be protected, whether institutional rules apply, and how every affected key, cylinder, door, and emergency function will be tested. Do not release codes or system relationships to an unverified requester.

Build skill before expanding the service menu

1. Learn the complete opening. Identify plug, shell, chambers, pins, springs, shear line, cylinder, latch, bolt, strike, hinges, closer, door, and frame on owned practice hardware.
2. Practice controlled mechanical work. Disassemble, pin, reassemble, align, and function-test repeatedly without using customer property as the practice bench.
3. Diagnose before replacing. Record the symptom, inspect the whole opening, predict a cause, test it, correct the verified fault, and prove the result.
4. Learn authorization and records. Practice verifying identity and control, defining scope and price, securing keys and codes, and documenting final tests.
5. Seek supervised field experience. Ask how beginner work is reviewed, callbacks are handled, and automotive, safe, institutional, powered, alarm, electrical, or construction work is referred.
6. Add one service at a time. Expand only after verifying DCJS category, locality, training, tools, technical references, insurance, customer authority, and a repeatable final test.

Use the training-path guide to organize practice and the first-paid-job readiness gate before accepting customer work. These resources support skill development; they do not replace Virginia credentials or employer supervision.

A 30-60-90 day Virginia plan

Days 1–30: decide whether the immediate route is employee or owner, save the current DCJS and statute pages, identify a licensed employer or the business-license sequence, begin owned-hardware practice, and learn customer authorization, written scope, key control, and final testing.

Days 31–60: complete or schedule the correct training and fingerprints, verify every temporary-work condition, seek supervised experience, build job records, and write stop-or-refer rules for automotive, safe, master-key, electronic-security, alarm, electrical, construction, fire-door, and egress work.

Days 61–90: verify registration or authorization status, employer and business credentials, entity and tax files, local rules, insurance, estimates, invoices, inventory, callback procedures, and the narrow services that can be completed reliably. Review early work by service, time, margin, customer question, callback cause, and referral point before expanding.

Use one evidence card on every Virginia job

1. Verify the requester. Confirm identity and authority over the property, vehicle, key, code, or credential.
2. Verify the providers. Check the individual, employer, business category, compliance agent, and current credential status.
3. Describe the whole service. List mechanical, electronic, wiring, alarm, construction, door, and programming functions separately.
4. Match competence and insurance. Accept only work supported by training, tools, references, supervision, and coverage.
5. Set scope, price, and stop points. Obtain approval before work and before any material change.
6. Perform the narrow task. Protect the site and controlled information; stop when the facts or scope change.
7. Test and close. Prove every affected key, lock, latch, door, credential, egress function, and coordinated system behavior within the verified scope.

Turn Virginia requirements into a repeatable field record

For each new service area, keep a dated local sheet with the city or county, business-license office, zoning or home-occupation answer, permit contact, inspection contact, and any locksmith, electronic-security, building, fire, or electrical guidance received. Record the exact service described to the official. A general answer about “lock work” may not answer a question about cutting a rated frame, connecting an electric strike, or programming an alarm-connected opening.

For each customer job, retain the requester’s authorization, address or vehicle identification, affected hardware, initial condition, approved scope and price, changes approved during work, parts and controlled information handled, and final test. Protect keys, bitting, codes, credentials, and photographs from unnecessary disclosure. If the requester, property authority, technical condition, or regulated scope changes, stop and document the new decision before continuing.

Review the first month of paid work by service type, locality, time on site, margin, customer questions, callback cause, and referral point. The review should determine the next training or process improvement. If repeated jobs expose weak diagnosis, uncertain local answers, incomplete records, unsafe travel, or services outside the licensed or insured plan, narrow the offering and correct the system before advertising more work.

Current official Virginia source desk

• DCJS locksmith FAQ
• DCJS locksmith program
• Code of Virginia § 9.1-138 definitions
• Code of Virginia § 9.1-139 licensing and registration
• 6VAC20-174-40 initial registration
• 6VAC20-174-290 locksmith training
• DCJS business licensing
• DCJS compliance agent
• DCJS insurance and bond FAQ
• DCJS Lotus and credential verification
• Virginia SCC startup resources
• Virginia Tax business registration

Verification date: September 13, 2026. This guide is educational, not legal advice. Recheck current statutes, regulations, DCJS instructions, forms, fees, training, fingerprint steps, local rules, permits, insurance, and the exact service scope before advertising, bidding, or performing paid work.

Continue with the national career guide and 50-state licensing center, but keep every Virginia decision tied to the current official source, the actual role, and the complete job scope.

Income

What do locksmiths earn in Virginia?

$53,590Virginia median annual wage

$51,320U.S. median annual wage

Locksmiths and safe repairers (SOC 49-9094), wage-and-salary employees. Source: U.S. Bureau of Labor Statistics, OEWS, May 2025. Medians exclude self-employed business owners.

In Bill’s 10+ years in the trade, he personally knows locksmiths earning around $150,000 a year—typically established business owners with years of experience.

That is Bill’s firsthand observation, not a typical or promised result. What you earn depends on your market, skills, licensing, hours, pricing and business costs. Results vary. Watch Bill explain the numbers.

Explore Locksmith Blueprint

Choose the resource that matches your current stage. These products provide structured training and business systems; they do not replace a government license or local approval.

Review the Master Training Manual details before choosing the complete training reference.

• Foundation Edition — $39: a beginner-focused starting point for core concepts and sequence.
• Master Training Manual — $97: the complete structured mechanical-locksmith training reference.
• Operator Version — $197: the business and operating system for people building a real locksmith company.
• See all Locksmith Blueprint products: browse currently available training and field resources.

Official Virginia sources used for this guide

These links support the licensing and scope statements above. They are not a complete business-startup filing sequence.

• Virginia DCJS locksmith
• Virginia DCJS individual registration
• Virginia DCJS business licensing
• Virginia locksmith training rule