What This Article Covers and Who It Helps
If you are specifying electrified locks, access-control readers, or credential hardware for a commercial opening, the RFID standard your credential uses determines everything downstream: which readers work, how secure the system is, and whether the hardware you pick today will still be serviceable five years from now. This guide explains the two main RFID frequency families in plain language, what the common standards mean on a spec sheet, and how that choice affects the door hardware you order from DoorwaysPlus.com.
What Is an RFID Credential?
RFID stands for Radio-Frequency Identification. In access control, a credential is any card, fob, or mobile token that the cardholder presents to a reader mounted at a door. The reader emits a low-power radio field; when a credential enters that field, it transmits a stored identifier back to the reader without any battery or physical contact. The reader passes that identifier to an access controller, which decides whether to release the lock.
On the door hardware side, this matters because the reader housing, the electrified lock or electric strike, the power supply, and the wiring through the frame all have to be sized and coordinated around that credential transaction. A mismatch in frequency or protocol means the reader simply will not recognize the card.
The Two Frequency Families You Will See on Every Spec
125 kHz -- Low-Frequency (Legacy)
125 kHz technology, commonly associated with formats such as HID Prox and EM4100, has been the workhorse of commercial access control for decades. Cards broadcast a fixed, unencrypted ID number. Readers are inexpensive and widely installed.
The problem: that unencrypted ID can be read covertly from several inches away with off-the-shelf hardware and cloned onto a blank card in minutes. For a school, healthcare facility, or any opening where security matters, 125 kHz credentials are increasingly considered end-of-life technology. Many security consultants and facility directors are actively migrating away from them.
13.56 MHz -- High-Frequency (Current Standard)
13.56 MHz is the frequency family that supports encrypted, standards-based credential protocols. The dominant formats you will see called out on a spec or submittal include:
- ISO 14443 -- the base standard for proximity communication at 13.56 MHz; covers MIFARE Classic, MIFARE DESFire, and ISO 14443-A/B card types.
- MIFARE Classic -- earlier 13.56 MHz product; encrypted but now known to have exploitable weaknesses. Still in broad use but generally not specified for new high-security work.
- MIFARE DESFire EV2 / EV3 -- AES-128 encrypted, mutual authentication, the current preferred format for healthcare, government, and K-12 large-project credentials. Resistant to cloning attacks that defeat 125 kHz and MIFARE Classic.
- ISO 15693 -- a 13.56 MHz vicinity standard with slightly longer read range; used in some industrial and inventory tracking applications but less common in door access.
- SEOS and other Mobile / BLE-supplemented formats -- some credential platforms layer Bluetooth Low Energy on top of 13.56 MHz to enable smartphone-based credentials. The reader must support both.
Why the Credential Standard Shapes the Hardware Spec
The credential standard is not just an IT decision. It drives four hardware choices at the opening:
- Reader model and rough-in: Multi-technology readers can handle both 125 kHz and 13.56 MHz during a migration, but they cost more and must be called out on the hardware schedule. Single-technology readers are leaner but commit the opening to one format.
- Electrified lock or strike type: The access controller output -- typically a relay closing to supply 12 VDC or 24 VDC -- is the same regardless of credential format. But the lock function (fail-safe vs. fail-secure, mortise vs. cylindrical, electric strike vs. electrified lock body) must still be coordinated with life-safety codes and the sequence of operation.
- Power supply sizing: Encrypted 13.56 MHz readers draw similar standby power to 125 kHz readers, but if you are adding mobile-credential BLE capability the reader current draw increases. Size power supplies accordingly, especially on multi-door panels.
- Wiring and transfer devices: Whether you run a Wiegand output reader (legacy) or an OSDP (Open Supervised Device Protocol) reader -- which is increasingly paired with 13.56 MHz for encrypted data transmission from reader to controller -- affects conduit, wire gauge, and whether an electrified hinge transfer device or door cord is needed.
Application Notes by Facility Type
- K-12 and higher education: Budget pressure often keeps 125 kHz cards in use for years past their security life. A phased migration plan using multi-technology readers lets facilities replace credentials without ripping out reader hardware all at once.
- Healthcare: HIPAA-adjacent areas, medication rooms, and server closets increasingly require DESFire-class encryption. Life-safety codes (NFPA 101) still govern egress hardware independently of the credential choice -- a card reader on a fire-rated door does not relieve you of closer, latching, and listing requirements.
- Retail and light commercial: MIFARE Classic or even 125 kHz may be acceptable where physical security risk is lower and credential volume is small. The real risk is purchasing a proprietary reader-credential pair that locks the owner into one vendor for replacements.
- Industrial and warehouse: Rugged reader housings (IP65 or better) matter as much as the credential protocol. Wiegand wiring is still common in industrial installs; OSDP adoption is growing but is not yet universal in heavy-industry applications.
OSDP: The Protocol Layer Worth Knowing
Credential format and reader-to-controller protocol are separate decisions that often get conflated. OSDP (IEC 60839-11-5) is a communication standard that encrypts the data path between a 13.56 MHz reader and the access controller. Without OSDP, a Wiegand reader -- even one reading a DESFire card -- transmits cardholder data on an unencrypted, unsupervised wire that can be intercepted or spoofed between reader and panel. OSDP closes that gap. Specifying both an encrypted credential format and OSDP is the currently recommended practice for any opening where security is a real requirement.
Matching Credentials to Electrified Hardware at DoorwaysPlus
At DoorwaysPlus.com we stock and source electrified mortise locks, electric strikes, electromagnetic holders, and the readers and power supplies that complete the opening. Brands such as Sargent, Corbin Russwin, Hager, and PDQ cover the lock and device side; credential and reader components from access-control-focused lines round out a complete opening package.
When your schedule calls for an electrified opening, bring the credential standard into the conversation early -- before the reader rough-in is set, before the lock function is committed, and before the power supply is sized. That sequence prevents the most common rework we see in the field.
Questions about coordinating credential standards with your door hardware spec? Contact the DoorwaysPlus team for product guidance, or browse our electrified hardware categories at DoorwaysPlus.com.