Spintly

What is Aliro and how will it impact the Access control industry

We use our phones to pay for groceries, book cabs, and even board flights. But when it comes to unlocking doors using digital keys, the experience is still messy and inconsistent.

Different locks work with different apps. Some phones are supported, others aren’t. And setting everything up can be confusing.

For example, your office access might require one mobile app, your apartment lock another, and your hotel room might not even work with your phone at all. The way phones communicate with locks today depends entirely on the manufacturer, which means there’s no universal way for them to work together.

This is exactly the problem Aliro is trying to solve.

What is Aliro?

“Aliro is a new industry-wide standard that aims to simplify digital access by creating a universal way for phones, smartwatches, and access control systems to communicate with smart locks regardless of which company made them.”

It does this by defining two key things:

  • A common digital credential format (basically, how your phone stores your digital key), and
  • A common communication method (how your phone talks to the lock).

These devices can then communicate securely using technologies like:

  • NFC, which allows you to tap your phone to unlock a door, similar to how you tap your card for payments, and
  • BLE+ Ultra-Wideband (UWB), which allows doors to unlock automatically when you’re physically nearby, without even taking your phone out.

     

This means that instead of needing different apps and different setups for every lock, one digital key stored on your phone could work across multiple Aliro-certified locks, with the same level of security and user experience everywhere.

In simple terms, Aliro is trying to make digital access as seamless and reliable as contactless payments.

Who’s Building Aliro?

Aliro is being developed by the Connectivity Standards Alliance (CSA), formerly known as the Zigbee Alliance, a global group of companies that develops and maintains open IoT standards such as Zigbee and Matter. 

But it’s not being built by just one company. Several major players across the mobile, semiconductor, and access-control industries are participating in the Aliro initiative through the Connectivity Standards Alliance, including:

  • Mobile platform providers like Apple, Google, and Samsung
  • Access control and lock manufacturers such as Allegion (makers of Schlage locks), HID, Spintly etc.
  • Semiconductor companies like NXP, STMicroelectronics, and Qualcomm

     

This kind of cross-industry collaboration is important because access control systems usually involve hardware from multiple vendors, phones from one company, locks from another, and readers from someone else.

By bringing all of these stakeholders together, Aliro is being designed as an open standard that can work across devices from different manufacturers instead of locking users into one company’s ecosystem.

How Aliro changes the access-control experience

  1. One key, many Aliro-certified doors: Instead of every lock requiring its own proprietary mobile integration, Aliro allows a single digital credential stored on your phone to work across multiple Aliro-certified access readers in a consistent way.
  2. Safer hands-free unlocking: Aliro supports Ultra-Wideband (UWB), which enables highly accurate distance measurement between your phone and the access reader. This makes it harder for attackers to carry out relay attacks by pretending your phone is nearby when it isn’t.
  3. Works without an internet connection at unlock time: Aliro enables secure, direct communication between your phone and the access reader using cryptography, meaning the unlocking happens through direct communication between the device and the lock, without needing Wi-Fi, a hub, or cloud connectivity at the time of access.
  4. Fair play for different manufacturers: Because Aliro is an open industry standard, it allows different manufacturers to build interoperable devices without depending on proprietary ecosystems from a single vendor.
  5. Consistent user experience: Tap-to-unlock and hands-free access can behave consistently across Aliro-certified phones, wearables, and access readers thus reducing compatibility issues between devices from different manufacturers.

Big-picture impact on the access control industry

For users 
  • Less friction: Instead of relying on proprietary integrations for each lock or platform, Aliro enables digital credentials to work in a more consistent way across Aliro-certified devices.
  • Stronger security foundations: Aliro supports hardware-backed digital credentials and secure communication between your phone and access readers. When combined with technologies like Ultra-Wideband (UWB), this can help reduce certain attack risks such as relay attacks.
  • Privacy-friendly unlocking: Because Aliro enables direct device-to-reader authentication using cryptography, the unlocking process itself does not necessarily depend on cloud connectivity which can improve privacy and reliability in low-connectivity environments.
For lock manufacturers and integrators
  • Simplified integration: By providing a standardized way for phones and access readers to communicate, Aliro can reduce the need to support multiple proprietary mobile access solutions across different platforms.
  • Clear certification pathway: Aliro-certified devices are expected to follow a common specification, which can make interoperability more predictable across mobile devices and access control systems.
  • Legacy compatibility challenges: Some older locks and readers may not have the required hardware such as secure elements or support for NFC/UWB and may require upgrades or replacement to support Aliro.
For phone and chipset makers
  • Evolving hardware support: Support for technologies such as secure elements, NFC, and optionally Ultra-Wideband (UWB) may become increasingly important for devices that aim to support Aliro-based digital access.
  • Platform-level integration: Mobile operating systems may introduce deeper system-level support for standardized digital credentials aligned with Aliro specifications.
For enterprises and buildings
  • More consistent credential handling: A standardized approach to mobile credentials can make onboarding, revocation, and access provisioning more uniform across Aliro-compatible environments.
  • Migration planning required: Organizations may need to evaluate how Aliro-compatible readers fit into their existing infrastructure and plan gradual upgrades where necessary.

Challenges and limits to watch for

Hardware requirements
While Aliro supports multiple communication technologies such as NFC, BLE, and optionally Ultra-Wideband (UWB), not all existing phones and access readers have the necessary hardware or secure credential storage capabilities required for Aliro-based implementations. As a result, adoption is expected to happen gradually over time.

Backward compatibility
Some existing smart locks and access control readers may not be upgradeable to support Aliro due to hardware or firmware limitations. In such cases, supporting Aliro may require hardware replacements or additional modules which can increase adoption costs.

Certification and ecosystem maturity
Like any new industry standard, Aliro’s success depends on the availability of certified devices and widespread vendor support. In the early stages, interoperability may be limited until more Aliro-compatible phones, readers, and access systems enter the market.

When will you actually see it in real life?

The Aliro specification has been progressing through development within the Connectivity Standards Alliance, with the first formal specification releases expected around the 2025–2026 timeframe.

However, like most hardware-driven industry standards, real-world adoption will take time.

Aliro-compatible phones, access readers, and smart locks are likely to appear first in premium devices and enterprise deployments, before gradually becoming more common as manufacturers begin integrating the required hardware and certification support into their products over the next few years.

Why Does Aliro Matter?

As mobile credentials become more widely used across homes, offices, and commercial buildings, the lack of interoperability between phones, locks, and access systems has created fragmentation in how digital access is implemented today.

Aliro aims to address this by introducing a standardized way for user devices and access readers to authenticate securely regardless of the manufacturer.

While adoption will take time due to hardware requirements and certification processes, Aliro has the potential to bring greater consistency, interoperability, and scalability to mobile access solutions.

In the long run, it could simplify how organizations deploy digital credentials and make secure, phone-based access a more reliable and standardized part of physical security infrastructure.

Secure Your Property Today.

Connect with a Spintly Expert within 24 hours.

Get in touch

Explore more blogs