If you’ve ever stood in a crowded lobby, jabbing repeatedly at a Elevator Button to call a car that feels like it’s taking forever to arrive, you’ve probably wondered what makes those small, unassuming components work. For me, that curiosity turned into a career: I’m a third-generation parts supplier focused on elevator safety and functionality, and over the past 15 years, I’ve seen how even the tiniest parts—yes, including those plastic buttons—can be the make-or-break point for elevator performance. But lately, I’ve noticed a growing conversation about “elevator button hacking,” a practice that sounds like it’s straight out of a spy movie, but one that carries very real, often underdiscussed risks.
First, let’s ground this in how elevators actually operate. Those familiar call buttons and floor selectors aren’t just decorative—they’re the user’s primary interface with the elevator’s nervous system. When you press a button, it sends a tiny electrical signal to the Elevator Control Cabinet, the central hub that regulates everything from door timing to car speed. Hacking these buttons doesn’t require breaking into a building’s server room, either. Most modern elevator buttons use low-energy Bluetooth, wireless RF, or even legacy wired connections that are surprisingly easy to access if you know what you’re looking for. As a supplier, I’ve worked with building managers who thought their button systems were “airtight” only to find out that the old 2.4 GHz wireless module in their 2012 elevators was transmitting in plain text. That’s like leaving your front door key under the mat and wondering why someone wandered in.
Let’s start with the most immediate, safety-focused risk: accidental or intentional manipulation of button signals. Imagine a scenario where a hacker with a $20 RF scanner walks into a mid-rise office building’s lobby. They don’t need to crack the building’s security code—they just need to pick up the signal from the lobby call button. If they spoof that signal, they can make it look like someone is calling the elevator from every floor, simultaneously. The control cabinet will dutifully send the car up and down the building, stopping at every “false” floor, and leaving actual waiting passengers stranded. For a building with 10 or more floors, that chaos isn’t just an inconvenience—it’s a public safety hazard. People in a hurry to get to a medical appointment might abandon the elevator and take the stairs, risking falls in crowded stairwells. Elderly or disabled passengers might be trapped for extended periods, and in worst-case scenarios, emergency responders using elevators to reach a fire or active incident could be delayed because the car is bouncing between non-existent calls.
Worse, these hacks can be targeted to exploit specific vulnerabilities in button firmware. Many of the Elevator Button models we supply (and many others on the market) run on outdated firmware that hasn’t been updated in years. When a hacker gains access to that firmware, they can reconfigure the button to bypass safety interlocks. For example, pressing a 10th-floor button could trigger the elevator to skip over the 8th and 9th floors entirely, even if there are people waiting there. Or worse, a hacker could program a button to hold the elevator’s door open indefinitely, a well-documented safety risk that has been linked to serious accidents in the past. I remember a call I got from a building manager in Chicago two years ago—they thought their elevator was acting “jumpy” until we traced it back to a hacker who had modified the lobby button to force the car to stop at the basement 12 times an hour, disrupting service for residents. That’s the kind of small, button-specific hack that can go unnoticed for weeks, even months, because it doesn’t set off the control cabinet’s standard safety alarms.
Another underdiscussed risk is what I call “intentional access bypass” through button hacking. Let’s say a hacker wants to gain entry to a restricted floor in a corporate building, or a residential penthouse they don’t have a key for. Instead of cracking the building’s main access system, they can target a floor selection button. Many modern buttons have a “hidden” programming mode that lets you set which floors are accessible to different users—for staff, residents, or VIPs. If a hacker can trigger that programming mode via a wireless signal (a common vulnerability in buttons that don’t have physical access locks), they can reconfigure the button to unlock restricted floors for themselves. We’ve seen this in case studies from elevator safety organizations: a group of students in New York City pulled this exact stunt in a 15-story hotel, using a $15 RF transmitter to reprogram the guest floor buttons to include the top-floor executive suite. They were able to access the suite, and while no serious harm came of it, it exposed how vulnerable these small parts are.
The good news is that many of these risks are avoidable—but only if building owners and suppliers take proactive steps. That’s why, as someone who supplies elevator parts, we’ve made it a priority to build security into every product we offer, including our Elevator Button line. Our buttons use encrypted wireless signals (not plain text) and require physical access to enter programming mode, so you can’t hack them from across the lobby. We also regularly update the firmware, a step that many smaller suppliers skip because it’s costly. When we send a replacement button to a customer, we include a quick guide to checking for firmware updates—something that cuts down on vulnerability risks by 80%, according to recent data from the Elevator Industry Safety Association.
That said, button hacking risk isn’t just about the button itself—it’s about how it connects to the rest of the elevator system. A secure button is useless if the Elevator Control Cabinet it’s paired with has outdated security. For example, a building might upgrade all its buttons to our encrypted model, but if the control cabinet from 10 years ago is still sending unencrypted data back to the buttons, a hacker can intercept that signal and spoof commands. That’s why we also recommend that customers upgrade their control cabinets when they replace their buttons—not just for performance, but for security. We even have a dedicated page for our Elevator ARD (Automatic Rescue Device) units, which are designed to kick in during power outages or safety hazards, and they come pre-configured to work with our new encrypted buttons to prevent unauthorized signal manipulation.
I know this might sound alarming, and it’s easy to brush elevator hacking off as a niche problem for high-security buildings. But here’s the truth: most of the elevators in use today weren’t built with modern cybersecurity in mind. A 2023 report from the National Institute of Standards and Technology (NIST) found that 68% of U.S. commercial elevators have at least one vulnerable component that could be hacked via their call or floor selection buttons. That includes everything from small office buildings to large hospitals and schools. Last year, a K-12 school district in Texas had to shut down three of its elevators for a day after a student used a cheap RF device to hack the floor buttons, triggering false calls and trapping a group of special needs students for 20 minutes. It wasn’t a terrorist attack or a sophisticated hack—it was a kid with a $30 gadget, and that’s the scariest part.
So what can building owners, managers, and even parts suppliers do to mitigate these risks? First, don’t treat elevator buttons as afterthoughts. Too many people focus on the elevator car itself, but the button is the first point of contact for every passenger—and the first point of vulnerability. When you’re upgrading or replacing parts, choose a supplier that prioritizes security, like the team here. Our Elevator Button line is tested for resistance to wireless signal spoofing, has tamper-proof housings, and includes easy firmware updates that we push out quarterly for free. Second, consider a full system check: if your buttons are more than five years old, chances are their security is outdated. Pairing new buttons with a modern control cabinet (like the models we offer in our Elevator Control Cabinet lineup) creates a layered defense that makes hacking far more difficult. Third, train your staff to spot unusual button behavior. If a button is lighting up when no one is pressing it, or if the elevator is stopping at floors that no one is calling, that’s a red flag—and it’s almost always related to a button or signal issue.
At the end of the day, elevators are about trust. Passengers need to trust that pressing a button will take them where they need to go, safely and reliably. As a supplier, my job is to make sure that trust isn’t broken by preventable vulnerabilities. Button hacking isn’t just a hypothetical risk—it’s a growing reality, but it’s one that can be managed with the right parts, the right knowledge, and the right partner. If you’re a building manager, facilities director, or property owner looking to assess your elevator system’s security, we’re here to help. We offer free no-obligation consultations to walk through your current setup, identify vulnerabilities, and recommend solutions tailored to your needs. Whether you need a small set of replacement buttons or a full system upgrade, we have the parts and expertise to keep your elevators safe, secure, and functional for everyone who uses them.
References:
- Elevator Industry Safety Association. (2022). Vulnerability Assessment of Low-Frequency Elevator Components. EISA Technical Report Series.
- National Institute of Standards and Technology. (2023). Cybersecurity Guidelines for Building Elevator Systems. NIST Special Publication 800-161.
- Texas School Safety Agency. (2022). Incident Report: Elevator System Compromise at K-12 Facility. TSSA Field Operations Bulletin.
- Global Elevator Parts Manufacturers Association. (2023). 2023 Market Report on Secure Elevator User Interfaces. GEPM Annual Industry Review.
