Tailgating in Access Control: What It Is and How to Stop It

It is the most courteous security breach in the business. A resident swipes in, then holds the door a beat longer for the person walking up behind them, and just like that someone who was never cleared is standing in the lobby. That small act of politeness is tailgating, and in access control it is the gap that the best locks and the priciest credentials cannot close on their own. Knowing how it works, and the stacked defenses that actually blunt it, is what divides a door that looks secure from one that is.

We build entry systems for New York buildings where this plays out every single day, so here is a grounded look at tailgating, its cousin piggybacking, and what genuinely moves the needle on both.

In a sentence: tailgating is when an uncleared person trails a cleared one through a secured door before it shuts, skipping the credential entirely. There is no one cure — beating it takes a blend of hardware, technology, and resident habit, because no single measure catches every try.

Tailgating in access control: the core problem

What makes tailgating sting is that it walks straight past the entire premise of access control. The reader read, the controller decided, the lock obeyed — every component performed flawlessly — and the intruder simply strolled in on the coattails of someone allowed.

That is the crux: this is a behavioral leak, not a technical fault, which is exactly why it refuses to go away. The system did its job; a human held a door. Of the handful of security problems you cannot buy your way out of with a better lock, this is the headliner, and every serious entry plan has to face it head-on rather than hope it away.

What tailgating actually is

Tailgating is the moment one person presents a valid credential, the door yields, and a second, uncleared person slips through the same opening. The intruder never taps, never types, never shows a thing.

Most of the time it is entirely innocent. Someone holds the door for the figure behind them out of plain reflex, never clocking that they have just walked an unauthorized visitor inside. Other times it is calculated — a stranger loitering near the entrance, timing their step to fall in behind a resident. The outcome is identical either way: a person got in who should not have, and the entry log shows only the one legitimate swipe, blind to the second body.

Why it guts your access control

The whole system rests on checking each person at the threshold, and tailgating quietly breaks the one-person-per-unlock assumption underneath it. The fallout spreads outward.

• A lying record: The log notes 1 cleared entry while 2 people actually walked through, so your history is simply wrong.
• Rules made pointless: All the careful logic about who may enter which doors is moot if someone is never checked at all.
• False comfort: A building can feel airtight because it has credentials, while the easiest way in stands wide open.
• A cold trail: After an incident, there is no honest account of who was actually inside.

Tailgating or piggybacking?

The two words get swapped freely, but the line between them is handy. Both name an uncleared person entering on the heels of a cleared one.

The usual split is intent and awareness. Tailgating tends to mean the authorized person has no idea, the intruder ghosting through unseen. Piggybacking tends to mean the authorized person knowingly holds the door, an act of misplaced helpfulness. The remedies overlap heavily, but the framing earns its keep: tailgating is mostly a detection-and-hardware puzzle, while piggybacking is also a policy-and-culture one, since it hinges on a cooperative resident who needs to grasp the risk.

Stopping it: defense in layers

Because the problem is half physics and half behavior, no lone fix suffices; the answer is layers, where what one misses the next one catches.

• Physical chokepoints: Hardware that mechanically permits only 1 person per authorization.
• Eyes that count: Sensors and cameras that notice when 2 bodies cross on a single unlock.
• Smarter rules: Logic such as anti-passback that flags entry patterns that cannot physically be true.
• The people: Residents who understand why holding the door for a stranger is a problem, not a kindness.

Anti-passback, explained

One of the sharper software tools against this is anti-passback, a rule that insists on a sensible in-then-out sequence. A credential just used to enter is barred from entering again until it has been used to exit.

That single rule defuses a common trick — one person enters, then slips their card back out for the next to reuse — and it surfaces oddities in the log, like a credential that appears to enter twice with no exit between. Anti-passback will not physically stop a stranger from walking in behind someone, but it slams the door on credential-sharing and bolts accountability onto the system. In practice it works best paired with a physical or visual layer that handles the bodies it cannot.

Hardware that physically blocks it

For entrances that demand real protection, physical hardware is the most dependable defense, because it deletes the opportunity rather than merely noting it after the fact.

• Turnstiles: Speed gates and turnstiles let exactly 1 person pass per valid credential — a staple of busy lobbies.
• Mantraps: A 2-door vestibule where the first door must shut before the second opens, isolating one person at a time.
• Tailgating sensors: Overhead optical units that tally people through a doorway and raise an alert within about 2 seconds when the count outruns the unlocks.
• Door-ajar alarms: A warning when a door hangs open past a set 30 seconds, discouraging propping and loitering.

What video and the intercom add

Cameras and intercoms do not physically bar tailgating, but they pile on detection and deterrence, and most buildings already have them stationed at the door. They are a natural extra layer.

A camera at the entrance records who truly came and went, so even when someone tailgates, there is footage instead of a blank in the log. Video analytics can be set to flag multiple people crossing on one unlock, turning a silent gap into an alert worth chasing. And a visible camera, like a visible turnstile, nudges the opportunist who would rather not be on tape to look elsewhere. Bolted onto the intercom that already runs the front door, video makes tailgating far easier to catch afterward and a touch less likely to begin with.

The cheapest layer: people

The layer that costs nothing but attention is door security as a shared habit, and since piggybacking leans entirely on a cooperative resident, an informed building is a genuine defense.

Plain, repeated nudges do the work: ask residents not to hold the secured door for faces they do not know, to let each person badge themselves in, and to flag doors that fail to latch. A line of signage at the entrance reinforces it without singling anyone out. None of this stands alone, but laid over hardware and software it seals the human side of the gap — and in many residential buildings, this is the layer that moves the needle the most, for the least money.

A right-sized plan for a building

You do not need every control on every door; you need the right ones where the risk actually sits. The smart move scales the defense to the entrance.

• Main entrance: The priority — a camera, a door that latches reliably, and resident awareness do the heavy lifting, with a turnstile in higher-security lobbies.
• Sensitive doors: Add anti-passback and weigh a sensor or mantrap where the stakes justify the spend.
• Side and service doors: Make sure they latch and alarm if held, since these are the soft tailgating targets.
• Everywhere: Keep entries logged and actually reviewed, so patterns surface before they become incidents.

Frequently asked questions

What does tailgating mean in access control?

It is an uncleared person following a cleared one through a secured door before it shuts, getting in without ever presenting a credential.

How is it different from piggybacking?

Tailgating usually means the authorized person is unaware of the intruder; piggybacking usually means they knowingly hold the door open for someone else.

How do you actually prevent it?

In layers — physical chokepoints like turnstiles, detection from sensors and cameras, software rules like anti-passback, and resident habit, because no single control catches every case.

What is anti-passback in plain terms?

A rule that blocks a credential used to enter from entering again until it has been used to exit, killing card-sharing and flagging impossible patterns.

Will a camera stop tailgating?

It will not physically block it, but it records who entered, can alert on multiple people per unlock, and deters intruders who would rather not be filmed.

Worried about who is slipping through your doors? We design layered entry security sized to your building. Walk through our access control service, see how it pairs with our intercom systems, browse the catalog, or ask us to assess your entrances.