Smart Locks Wholesale from China: A Sourcing Guide

The smart lock market has changed fast. What used to be a $200+ product category is now flooded with Chinese OEM options starting at $20 landed cost. That’s a real business opportunity. It’s also a compliance minefield if you don’t understand what you’re importing.

Where Smart Locks Are Made

Shenzhen is the center of smart lock production in China. The factories there have years of experience producing for both domestic brands and international OEMs.

A few names you’ll recognize on US shelves are actually Chinese-manufactured products. Ultraloq is a US-facing brand with Chinese manufacturing. Philips’ lock division (not the same entity as Philips Electronics) sources from Chinese factories. Kaadas is a Chinese smart lock brand that sells globally.

The platform that ties a lot of this together is Tuya Smart. Tuya is a Chinese IoT platform that gives factories a ready-made app, cloud backend, and device management system. An OEM factory using Tuya can have your private-label smart lock app running in 4-6 weeks. You pick the colors, your logo, and your feature set. Tuya handles the cloud infrastructure.

That’s a real advantage if you want to sell under your own brand without building software from scratch.

Product Types

Smart locks sold from Chinese factories break into four main categories.

Keypad and fingerprint deadbolts are the baseline product. No internet connection required. The lock works with a PIN code, a fingerprint scanner, or a physical key. These are the simplest to import because they often have no wireless radios, which keeps the FCC situation straightforward.

WiFi-connected locks add an app and remote access. You can unlock from anywhere. That’s valuable to consumers and property managers. The tradeoff is battery drain. A WiFi radio in a lock that runs on AA batteries will kill the batteries in 2-3 months under normal use. Some manufacturers solve this by using a sleep mode where the WiFi only wakes on request. Others solve it with USB-C charging or a large internal lithium pack.

Zigbee and Z-Wave locks connect to a smart home hub rather than WiFi directly. They use less power than WiFi and are more reliable in crowded wireless environments. The catch is the buyer needs a compatible hub (SmartThings, Home Assistant, Hubitat, etc.). This narrows your market to serious smart home buyers, but that’s also a buyer who spends more and returns less.

Bluetooth-only locks work locally. No internet, no app cloud dependency. They’re reliable and secure but limited, you can only unlock within Bluetooth range, roughly 30 feet. Good for rental property managers using a local gateway, less useful for remote access.

FCC and Wireless Certification

Any smart lock with a wireless radio must have FCC certification before it can be legally sold in the US. This is non-negotiable.

WiFi (2.4 GHz or 5 GHz) and Bluetooth both require FCC certification. Zigbee modules require FCC certification. Z-Wave modules are certified at the module level, which usually means the module manufacturer holds the FCC ID, verify this on the FCC ID database before assuming coverage.

When you request samples and then quotes, ask the factory directly: “Do you have an FCC ID for this product?” Ask them to provide the FCC ID number. Then verify it yourself at fccid.io. The certification should show the correct product class and not be expired.

Some factories will show you a certificate document that isn’t an actual FCC certification. Look for a real FCC ID number in the format XXXXXXXXXXX (a grantee code followed by a product code). If they can’t give you that number, the product is not certified.

Importing uncertified wireless devices exposes you personally. The importer of record is liable under FCC rules, not the factory.

ANSI/BHMA Grades

The ANSI/BHMA grading system rates the mechanical durability of a lock, not its electronic security. There are three grades.

Grade 1 is commercial. The test standard requires the lock to survive 250,000 open-close cycles, resist a 360 lb forced entry load, and meet several other impact tests. Schlage and Kwikset’s commercial lines carry Grade 1.

Grade 2 is premium residential. It’s 125,000 cycles and lower force resistance. Most US residential locks from major brands are Grade 2.

Grade 3 is light residential. 80,000 cycles. Basic protection.

The problem with Chinese smart locks: most of them have no ANSI rating at all. They haven’t been tested by an ANSI-accredited laboratory. If a factory tells you their lock is “Grade 2 equivalent,” that means nothing legally.

This matters if you’re selling to:

• Property managers or hotel operators who want to verify lock durability
• Commercial applications where building codes may require Grade 1
• Buyers who comparison-shop and ask about ratings

For pure consumer retail, a lack of ANSI rating may not be a dealbreaker. But you need to know it’s missing and decide whether to get your own testing done or disclose it clearly in product listings.

Getting ANSI certification on your own product is possible but expensive, around $3,000-8,000 per product through labs like Intertek or Bureau Veritas. For a private-label product you’re selling at volume, it’s worth budgeting for.

Security Testing: The UL 437 Question

ANSI grades measure mechanical durability. UL 437 measures lock security: resistance to picking, drilling, pulling, and other physical attacks.

Schlage’s commercial deadbolts carry UL 437. Kwikset’s Deadbolt line does not. Most Chinese-manufactured smart locks do not.

For a consumer buyer at Amazon, this may not matter. For someone sourcing locks for a commercial security application or a property management company that’s had break-ins, it does.

Be honest in your product descriptions. If a lock doesn’t have UL 437, don’t imply security claims you can’t back up.

ADA and Building Code Considerations

If you’re selling to commercial customers, ADA compliance is a real question. ADA Section 4.13.9 requires operable parts of accessible doors to be operable with one hand without tight grasping, pinching, or twisting of the wrist.

Most keypad locks and fingerprint locks pass this test. The question is whether the specific model has been tested and documented.

Some US building codes require Grade 1 locks for certain commercial door applications. If your buyer is outfitting an office, hotel, or multi-family building, they or their general contractor will ask about this.

This isn’t something you can resolve at the product sourcing level. You need to document what certifications and ratings the product does and doesn’t have, and let the buyer determine whether it meets their local code. Never tell a commercial buyer that a product “meets code” for their jurisdiction. That’s a liability claim you can’t support.

Wholesale Pricing

Pricing varies significantly by product type and order size.

Basic keypad deadbolt with no wireless radio: $20-45 per unit at OEM pricing for MOQs of 200-500 units. This gets you a PIN code lock with physical key backup, typically in brushed nickel or matte black finishes.

WiFi-connected lock with app control: $35-80 per unit depending on battery configuration and whether the factory is using Tuya or their own platform. Tuya-based locks tend to be at the lower end because the software is standardized.

Fingerprint plus WiFi premium units: $50-120 per unit. These are the highest-margin products in the category. A fingerprint sensor with fast, accurate recognition costs more to source but commands $150-300 retail.

Add $3-8 per unit for custom packaging, logo printing, and color customization when you’re doing a private-label order.

MOQ expectations: most factories will work with 100-200 unit minimums for standard models. Private-label with custom firmware or app configuration usually requires 500+ units because there’s real engineering time involved in setting up the Tuya profile.

The Tuya Platform in Practice

If you’re going the private-label route, understand what Tuya actually gives you.

Tuya’s Smart Life app is a white-label IoT app platform. You create an account on Tuya’s IoT development platform, configure your product, and Tuya generates a branded app for the App Store and Google Play. You pay Tuya a per-device fee (typically fractions of a cent per message, or a flat annual platform fee depending on your model).

The app includes lock scheduling, user management, access logs, and Alexa/Google Assistant integration. That’s genuinely useful functionality that would cost $50,000+ to build from scratch.

The downside: Tuya is a Chinese company. Your customer data lives in their cloud. For B2B customers with security concerns, this is worth disclosing. Tuya has a US data region available, but verify that your factory partner is actually configuring devices to use it.

What to Check in Samples

Before you place a full order, get samples and test them hard.

Fingerprint recognition speed and accuracy matter more than specs suggest. Test with multiple fingers, across different users, with wet or dirty hands, and in cold temperatures. A lock that works perfectly in a warm factory will fail outdoors in January.

Battery life is the most common complaint category for smart locks. Run the lock for 30 days with simulated usage (50 lock/unlock cycles per day) and measure actual battery consumption. Compare to the spec sheet.

WiFi signal sensitivity affects battery life more than most factories admit. Test the lock at 20 feet from a router versus 60 feet with one wall in between. Battery drain often doubles at longer distances.

Physical key backup quality is often ignored but matters. The physical key is the emergency fallback. Test the key cylinder. If it’s a cheap cylinder with obvious gaps, it’s pick-resistant for about 10 minutes.

Installation difficulty predicts your return rate. Have someone unfamiliar with locks install the product using only the included instructions. Count how long it takes and what goes wrong. Locks with confusing wiring or poor-fit door preps generate customer service calls.

Drop test the unit from 4 feet onto concrete. Premium locks survive this. Budget locks lose display function, fingerprint accuracy, or WiFi connectivity.

FAQ