Vestibules, Mantraps, and Entry Sequencing in Commercial Design

A card reader authenticates a credential. It does not authenticate a person, and it cannot count how many bodies passed through the opening while the door was held. That gap is the entire reason entry sequencing exists.

What an interlocked door pair actually does

A security vestibule, historically called a mantrap, is a small enclosed space between two doors that are electrically interlocked so that only one can be unlocked at a time. A person presents a credential, the outer door releases, they step in, the outer door secures, and only then can the inner door be released. The enclosure forces entry into a serialized, one at a time sequence.

The important part is not the room. It is the sequence. Because the space between doors is enclosed and occupied by one authorization event at a time, an unauthorized second person cannot simply follow through a held door. Some installations add a weight sensor, an occupancy sensor, or an operator review step before the inner door releases.

The threat being addressed

The behavior is usually called tailgating or piggybacking. Tailgating is following an authorized person through an opening without their cooperation; piggybacking is the same movement with their cooperation, usually social rather than adversarial. Someone holds the door because holding the door is polite.

This matters because credentialing systems are otherwise pretty good. The credential is hard to forge, the audit log is reliable, and revocation is instant. Tailgating bypasses all of that without attacking any of it. The record shows one entry. Two people entered.

Sequencing as one part of an access control process

Federal guidance treats entry control as a process rather than a device. The Interagency Security Committee's best practice for facility access control walks the full sequence from employee and visitor entry, through security screening, to the first point of authentication into nonpublic space. It also makes a point that applies to any building, federal or not: a facility should ensure all perimeter entry points are or can be secured so that individuals cannot access the facility without passing through the screening or approved entry areas.

That is the real design question. Sequencing at the front door accomplishes very little if the loading dock is propped, the stair discharge door has a worn strike, or the garage lobby door is on a timer. An interlock is only as good as the weakest opening on the same perimeter, and the weakest opening is rarely the one anyone budgeted for.

Egress must never be defeated by an interlock

This is the constraint that governs every design decision in a vestibule. Interlock logic is about controlling entry. It cannot be allowed to become a mechanism that holds people inside.

The baseline rule is that an exit route door must be openable from the inside at all times without keys, tools, or special knowledge. State adopted building code carries the same principle forward, permitting locks and latches to prevent the operation of doors only in narrowly enumerated situations, as Washington's provisions on doors, gates and turnstiles illustrate. In practice this means the outbound path through a vestibule needs free egress, the interlock has to release on fire alarm and on loss of power, and the whole arrangement needs review by the authority having jurisdiction rather than by the integrator alone. A vestibule installed on a required means of egress without that review is a life safety problem wearing a security badge.

Cheaper alternatives that address the same behavior

• Optical turnstiles. Waist high lanes with beam arrays that detect a second body in the lane and alarm. Far higher throughput than a vestibule, much lower cost, and they do not enclose anyone. They deter rather than prevent.
• Full height turnstiles. Rotating barriers that physically pass one person per rotation. Common at unstaffed perimeters and service entries. Ugly in a lobby, effective at a fence line.
• Staffed reception. A person watching the lane is still one of the most effective anti tailgating measures available, and the only one that also handles visitors, deliveries, and judgment calls.
• Anti passback rules. Software that refuses a second entry on a credential that never registered an exit. No hardware, meaningful friction against credential sharing.

Deciding whether it fits

Vestibules earn their cost where the consequence of one unauthorized entry is severe and irreversible: data halls, cash handling, controlled substances, evidence storage, critical utility spaces. They fit poorly at high volume lobbies, where the throughput penalty guarantees someone will eventually prop a door and undo the investment.

Work from consequence, not from catalog. Ask what one extra body inside actually costs you, count how many other openings share that perimeter, and fix the cheapest gaps first.