Office Building Access Card Replacement: Compatible by Format
Commercial office buildings in North America run on a handful of dominant access control platforms — Kantech, LenelS2, HID, DSX Access Systems, and Continental Access among the most common — and every one of them has a 125 kHz proximity credential option that can be sourced directly without going through an OEM dealer. American Key Cards supplies programmed, drop-in compatible cards and fobs for all of these formats, encoded to your facility code and ready for immediate enrollment.
Why Office Building Card Replacement Is More Complicated Than It Looks
A commercial building manager or HR coordinator who loses a dozen employee badges faces an immediate problem: most access control brands sell credentials exclusively through authorized dealers or security integrators, often with minimum order quantities in the dozens or hundreds. The underlying technology — in most cases a standard 125 kHz proximity card outputting a Wiegand data stream — is not proprietary in any technical sense. What makes sourcing difficult is distribution channel lock-in, not technical restriction.
There is one genuine exception: certain high-security smart card formats use AES encryption that makes third-party card production impossible. The guide below is explicit about where that line falls.
Identifying Your Office’s Access Card Format
Before ordering, you need to know which format your readers use. The reader itself is usually the fastest tell:
- Kantech readers — look for model designations
P225,P325, orP600on the reader housing. These use the ioProx format. - LenelS2 readers — look for
LNL-1300orLNL-1320model numbers. These accept either standard 26-bit or the Lenel 36-bitL11601format depending on how the system was configured. - HID readers — the most common brand in North America. Models like
ProxPoint,ProxPro 5355,MaxiProx 5375, andMiniProx 5365all use 125 kHz HID Prox at standard 26-bitH10301. - DSX Access Systems readers —
DX-800andDX-400panel-mounted readers, often used with the proprietary 33-bitD10202format rather than standard 26-bit. - Continental Access / NAPCO readers —
CA3K-seriesandCA4Kreaders. These accept standard 26-bitH10301without proprietary encoding.
If the reader markings are unclear, check your access control software’s card format setting, or look at an existing card — the format and part number are usually printed or engraved on the card body.
For a detailed walkthrough of identifying your specific format, see our access card format identification guide.
The Five Most Common Commercial Office Formats
Kantech ioProx (XSF / 26-bit)
Kantech ioProx is one of the dominant formats in Canadian and U.S. commercial offices, particularly on Johnson Controls / EntraPass-managed systems. Every ioProx credential is dual-encoded: it carries both Kantech’s proprietary XSF (eXtended Secure Format) with over 4 billion unique code combinations, and a standard 26-bit H10301 Wiegand output for backward compatibility.
OEM part numbers include P10SHL (clamshell card), P40KEY (key fob), P20WLM (printable ISO card), and P30DMG (graphics printable). American Key Cards supplies compatible ioProx clamshell cards and key tags programmed to your Family Code, Facility Code, and card number range.
ioProx is a 125 kHz passive proximity format. The XSF dual-encoding provides a larger code space than standard 26-bit but does not add cryptographic protection — ioProx credentials can be reproduced with commercially available RFID tools, which is the norm for all 125 kHz proximity formats.
Full format details: Kantech ioProx format page
LenelS2 OnGuard (26-bit H10301 and 36-bit L11601)
LenelS2 OnGuard is one of the most widely deployed enterprise access control platforms globally. It supports a range of credential technologies, but the two most commonly encountered in the field are standard 26-bit H10301 and the Lenel-proprietary 36-bit L11601 format.
The 36-bit L11601 format offers a wider facility code range (0–1023) compared to the 255-value limit of standard 26-bit. OEM credentials are available through Identiv as part number Identiv 4020 L11601. American Key Cards programs compatible cards in both 26-bit H10301 and 36-bit L11601 formats for OnGuard installations.
LenelS2 also supports HID iCLASS and MIFARE DESFire smart card credentials on panels equipped with smart readers. Unlike the 125 kHz prox formats, iCLASS SE and Seos credentials use AES encryption and cannot be produced by third parties — this applies only to the smart card layer; the 125 kHz prox credentials on the same panels remain fully replaceable.
Full format details: LenelS2 OnGuard credential page
HID Standard 26-Bit (H10301)
Standard 26-bit Wiegand (H10301) is the most common access card format in North American commercial buildings. HID Global — now part of ASSA ABLOY — manufactures the dominant reader infrastructure, with ProxPoint Plus, ProxPro 5355, and MaxiProx 5375 among the most frequently installed models.
The H10301 format encodes a facility code (1–255) and a card number (1–65,535) in a 26-bit Wiegand frame with leading even parity and trailing odd parity. The format is open and widely supported — the same 26-bit card works across HID readers, Continental Access readers, Farpointe Pyramid readers, and many others.
HID also manages the Corporate 1000 program, which assigns each enrolled organization a unique H5XXXX (35-bit) or H2XXXXXX (48-bit) format code to prevent credential cross-contamination between sites. Corporate 1000 cards are also standard 125 kHz proximity technology and can be reproduced by a small number of aftermarket suppliers who can program the assigned format code.
HID iCLASS Seos (5005, 5006, 5266 series) and iCLASS SE credentials are a different technology entirely — 13.56 MHz AES-encrypted smart cards with Common Criteria EAL 5+ certification. These cannot be cloned or reproduced by any third party. If your office has upgraded to Seos, credential replacement must go through your HID-authorized integrator.
DSX Access Systems (WinDSX) D10202 33-Bit
DSX Access Systems, headquartered in Dallas and widely deployed across Texas and national commercial real estate, primarily uses the proprietary 33-bit D10202 format rather than standard 26-bit. The D10202 format offers a larger card number range — up to 16,777,215 unique card numbers versus 65,535 for 26-bit — and uses OEM chip components sourced through Identiv.
Key OEM part numbers include Identiv 4010S (ISO PVC card), Identiv 4000 D10202 (clamshell), and Identiv 4082 (D10202 key fob). American Key Cards programs compatible cards in both the DSX 33-bit D10202 format and standard 26-bit H10301 for WinDSX installations using HID or Schlage readers.
DSX D10202 credentials are 125 kHz passive proximity with no encryption — they can be reproduced with commercially available RFID tools.
Full format details: DSX WinDSX D10202 format page
Continental Access / CardAccess 3000 (NAPCO)
Continental Access, a NAPCO Security Group brand, deploys the CardAccess 3000 and CA4K platforms in mid-market commercial buildings, healthcare facilities, and government offices. Unlike some proprietary formats, Continental Access readers accept standard 26-bit H10301 proximity cards without modification — OEM part numbers like CA3K-C, CA4K-C, and CICP2100 reference the controller and reader hardware, not a proprietary credential format.
This means any quality 26-bit clamshell card or key fob programmed to the correct facility code will work in a Continental Access installation. American Key Cards supplies compatible cards and fobs at value pricing with no dealer registration required.
Full format details: Continental Access CardAccess format page
Format Comparison: Common Office Access Credential Specs
| Format | Frequency | Bit Structure | Facility Codes | Card Numbers | Cloneable | AKC Compatible |
|---|---|---|---|---|---|---|
| HID H10301 (Standard 26-bit) | 125 kHz | 26-bit Wiegand | 1–255 | 1–65,535 | Yes | Yes |
| Kantech ioProx XSF | 125 kHz | XSF + 26-bit dual | Family+FC | 4B+ unique | Yes | Yes |
| Lenel 36-bit L11601 | 125 kHz | 36-bit Wiegand | 0–1023 | Extended | Yes | Yes |
| DSX D10202 33-bit | 125 kHz | 33-bit proprietary | 0–127 | 0–16,777,215 | Yes | Yes |
| Continental Access 26-bit | 125 kHz | 26-bit Wiegand | 1–255 | 1–65,535 | Yes | Yes |
| HID iCLASS Seos | 13.56 MHz | SIO-encoded, AES | Managed | Managed | No | No |
| MIFARE DESFire + site key | 13.56 MHz | AES-encrypted | Proprietary | Proprietary | No | No |
What You Need to Order
For all 125 kHz proximity formats in the table above, the ordering information is the same:
- Your facility code (also called site code) — a number from 1 to 255 for standard 26-bit, up to 1023 for Lenel 36-bit. For Kantech XSF, you also need the Family Code.
- Your card number range — the starting and ending card numbers you want programmed. This should match what your access control software expects.
- Card quantity and form factor — ISO clamshell card, ISO PVC printable, or key fob.
If you do not know your facility code, it is typically available from your existing card label, the access control panel’s programming menu, your system installer’s original documentation, or by reading an enrolled card with a compatible reader. Our facility code lookup guide covers all four methods.
Why Compatible Cards Cost Less Than OEM
The underlying technology in a 125 kHz proximity credential is mature and commoditized. The EM4200 and similar 125 kHz ICs that encode Wiegand data have been manufactured at scale for decades. OEM pricing reflects dealer channel overhead, brand margin, and in some cases minimum order quantities that force over-purchasing. American Key Cards sources the same IC technology, programs cards to specification, and sells direct — no dealer margin, no minimum quantity requirements for standard formats.
Compatible cards are not counterfeit — they do not copy OEM part numbers or branding. They are manufactured to the same electrical and data specification using the same underlying technology, a practice common across every mature technology category. The access panel and reader receive an identical Wiegand data stream regardless of whether the credential originated from the OEM or from a compatible-by-specification supplier.
A Straightforward Replacement Process
Once you have your facility code and card number range, the process is simple. Contact us at /contact/ with your format, quantity, facility code, and card range. We confirm the format, program the cards, and ship. Cards arrive pre-programmed — no reader calibration or panel reconfiguration is needed. They enroll in your access control software the same way any new card would.
For building managers handling turnover for dozens or hundreds of employees, a standing order arrangement is also available — contact us to discuss how to set up a recurring credential program for your property.
American Key Cards is a U.S. supplier of compatible-by-specification access credentials. We are not affiliated with HID Global, Kantech, LenelS2, DSX Access Systems, or NAPCO Continental Access. All format and part number references are used for compatibility identification purposes only.
Frequently asked questions
Do I need to go through my access control dealer to replace office building access cards?
Not for the most common formats. Standard 125 kHz proximity formats — including HID 26-bit, Kantech ioProx, DSX D10202, and Continental Access — can be ordered directly from American Key Cards. Provide your facility code and card number range and we program and ship cards ready for immediate enrollment. Higher-security smart card formats such as HID iCLASS Seos or MIFARE DESFire with site-specific encryption do require re-enrollment through your integrator.
What information do I need to order replacement access cards for my office?
For standard 125 kHz proximity formats you need two things: your facility code (also called site code) and the card number range you want programmed. Both are usually printed on existing cards or held in your access control software. For Kantech ioProx XSF cards, you also need the Family Code used during original enrollment. Contact us if you are unsure — we can help you identify what you need.
Which office building access systems use formats that cannot be replaced by a third party?
HID iCLASS Seos, HID iCLASS SE with site-specific Elite keys, MIFARE DESFire with proprietary application encryption, and MIFARE Plus SL3 all use cryptographic protection that prevents third-party card production. Kastle Systems also uses a managed 32-bit credential that is not reproducible outside their platform. For these formats, credential issuance requires your system integrator or the OEM.
Are compatible office access cards as reliable as OEM cards?
Yes. Compatible cards sourced from American Key Cards use the same underlying 125 kHz proximity IC technology as OEM credentials, operate at the same frequency, and carry the identical Wiegand data payload to the access panel. The difference is cost and ordering channel — not performance. Readers and panels have no way to distinguish OEM from compatible-by-specification credentials.