1 00:00:00,620 --> 00:00:03,860 Thanks for joining us today at the Tool Lockpicking Village. 2 00:00:03,860 --> 00:00:06,100 The talk I'm giving today is key duplication. 3 00:00:06,100 --> 00:00:07,480 It's not just for the movies. 4 00:00:08,480 --> 00:00:12,880 My name is Tony Varelli, aka Byte Stealer, or some people just call me Byte. 5 00:00:12,880 --> 00:00:15,120 You can find me mostly on Twitter if you want to talk. 6 00:00:15,260 --> 00:00:18,380 And that's twitter.com at Varelli. 7 00:00:20,700 --> 00:00:24,540 I am a member of the Open Organization of Lockpickers, or Tool. 8 00:00:25,000 --> 00:00:28,460 And I'm based out of Iowa, and I'm a member of the Des Moines chapter there. 9 00:00:29,280 --> 00:00:37,960 So, I highly encourage you that after this talk today, stick around, keep checking out the Lockpicking Village in DEF CON safe mode. 10 00:00:37,960 --> 00:00:40,160 We're going to have a lot of great talks going on. 11 00:00:40,620 --> 00:00:46,760 A lot of really smart people when it comes to locks, bypassing them, and physical security. 12 00:00:46,760 --> 00:00:49,800 So, I highly suggest you stick around for those talks as well. 13 00:00:50,600 --> 00:00:54,120 Today, I'm going to cover two types of key duplication. 14 00:00:54,120 --> 00:00:57,000 The first one I'm going to cover is how you can 3D print a key. 15 00:00:57,200 --> 00:00:59,740 And the second one will be molding and casting a key. 16 00:00:59,740 --> 00:01:07,020 This gives you two different attack vectors, specifically because in option one of 3D printing a key, you never need access to that key. 17 00:01:07,140 --> 00:01:12,940 And with option two, we can go a little bit further with what we can do on complexity of keys. 18 00:01:12,940 --> 00:01:15,940 You're not limited to the key type, we'll say. 19 00:01:17,520 --> 00:01:21,160 So, first we're going to cover 3D printing, and it's way easier than you think. 20 00:01:21,580 --> 00:01:28,720 There's a few things you're going to need, obviously, which is a 3D printer, the material you need, and I'm going to go through that entire list now of what you need. 21 00:01:29,480 --> 00:01:31,440 So, first of all, you're going to need a 3D printer. 22 00:01:31,740 --> 00:01:38,480 The 3D printers I work with are an Ultimaker 2 Plus, and I also have a Prusa i3 MK3S. 23 00:01:38,540 --> 00:01:41,200 These are just the printers I own, that's why I use them. 24 00:01:41,760 --> 00:01:44,000 If you have your own printer, it should work well. 25 00:01:44,000 --> 00:01:49,540 Some lower end printers, sub 200, sub 100 printers might have problems with this. 26 00:01:49,540 --> 00:02:01,000 But if you're experienced with 3D printing, and you know how to really dial your settings in and get it configured just properly, you might have success with even some lower end, cheaper printers. 27 00:02:02,480 --> 00:02:06,840 A lot of questions I get about the 3D printers are, what size nozzle diameter do I use? 28 00:02:06,840 --> 00:02:12,600 It's a 0 .4 millimeter nozzle, and I normally print at 0.1 millimeter layer heights. 29 00:02:12,600 --> 00:02:18,780 You could get away with 0.2 millimeter layer heights, I just go for the 0.1, especially if you're doing higher security keys. 30 00:02:20,020 --> 00:02:23,140 And I use PLA plastic all the time. 31 00:02:23,140 --> 00:02:29,580 You could use something stronger if you wanted to, but PLA works perfectly for what we're doing here. 32 00:02:29,920 --> 00:02:32,540 The next thing you're going to need is the key you want to duplicate. 33 00:02:32,600 --> 00:02:37,000 Now, you absolutely do not need to have access to this key. 34 00:02:37,180 --> 00:02:45,980 I can't be the only person who has a friend on Facebook or other social media who is not security conscious, and they're new homeowners or something along those lines. 35 00:02:45,980 --> 00:02:51,320 And you see this picture where they're taking a big smiley picture and holding their keys up. 36 00:02:51,520 --> 00:02:57,420 If you get the right angle on that key, you can take that photograph and use it to duplicate a key. 37 00:02:57,700 --> 00:03:12,380 If you are a real world pen tester, and you can get a photograph of a key, for example, if you have the ability to walk up to a security desk, and on the background of the wall, there's keys hanging there, and you can get a photo of those. 38 00:03:13,040 --> 00:03:14,000 That's all you need. 39 00:03:14,000 --> 00:03:31,740 If you can get a photo and you can identify the type of key, you can use those to duplicate the key from a photo, which is a really cool attack vector compared to casting and molding a key, because that you do require access to the key for at least a short period of time. 40 00:03:31,740 --> 00:03:37,500 For the examples I'm going to show today, I just did a basic quick set KW1 key way. 41 00:03:38,700 --> 00:03:41,440 And then you're going to need a measuring tool. 42 00:03:41,940 --> 00:03:49,100 This isn't 100% necessary, but it makes life a lot easier, which is a key gauge. 43 00:03:49,100 --> 00:03:58,840 If you have physical access to that key, a key gauge lets you very quickly just move the key through the key gauge to get the bidding depths, the cut depths of that key. 44 00:03:58,840 --> 00:04:03,640 So you can quickly just know, okay, that's a one, that's a two, that's three, so on and so forth, depending on your key type. 45 00:04:04,440 --> 00:04:08,440 When you're working with photos of a key, though, you're going to need a pair of calipers. 46 00:04:08,580 --> 00:04:09,920 Calipers make your life super simple. 47 00:04:09,920 --> 00:04:13,120 You can get a cheap pair for like $20 or less on amazon.com. 48 00:04:13,120 --> 00:04:18,060 And digital calipers are... I prefer digital calipers because they just read off very quickly. 49 00:04:20,120 --> 00:04:26,660 And then if you're going to do photos, I highly suggest taking a look at Deviant Olaf's GitHub repository. 50 00:04:26,700 --> 00:04:28,880 He has a repository called Decoding. 51 00:04:29,040 --> 00:04:32,680 And on here, he has photographs for all these different key measurements. 52 00:04:33,000 --> 00:04:40,020 If you look on the screen, you can see just a couple like American, MasterQuickSet, Schlage, Sargent, EL, a ton of them are up there. 53 00:04:40,020 --> 00:04:43,380 It's a very awesome resource for decoding keys. 54 00:04:43,380 --> 00:04:47,140 Here's an example of a QuickSet one he has. 55 00:04:47,140 --> 00:04:51,300 It shows the entire key from tip to bow. 56 00:04:51,600 --> 00:04:56,020 And on that, it shows the spacing you need for the cuts. 57 00:04:56,020 --> 00:05:02,920 And then on the bottom right hand side, it shows the depths you need to make for each of the depths. 58 00:05:02,920 --> 00:05:07,120 So one depth is 8.36 millimeters, so on and so forth, all the way across. 59 00:05:07,120 --> 00:05:11,120 So it's very cool that you can use this for a reference. 60 00:05:11,760 --> 00:05:18,260 I'm not going to cover filing keys down, but this would be very good for that kind of reference if you're measuring to have that information. 61 00:05:19,620 --> 00:05:24,140 He also has photos on his repository that look like this. 62 00:05:24,340 --> 00:05:27,280 And where these come in use is when you have a photo of a key. 63 00:05:27,540 --> 00:05:33,760 So for this example, for this presentation, I just went out and searched QuickSet key on Google Images. 64 00:05:33,880 --> 00:05:35,960 And I got this key, I brought it into Photoshop. 65 00:05:35,960 --> 00:05:37,900 Now you can use any photo editing software you want. 66 00:05:37,900 --> 00:05:41,440 I happen to have Photoshop, but you can use GIMP or anything else. 67 00:05:41,600 --> 00:05:54,640 And what you do is you bring the picture in of the key and then you cut out the key profile for the most part and you scale it down to fit on the photo here that you get from his repository. 68 00:05:54,880 --> 00:05:59,640 So here's a picture that I brought in and scaled down off Google Images. 69 00:06:00,220 --> 00:06:04,080 Now it may not 100% line up all the time, depending on how much you fiddle with it. 70 00:06:04,080 --> 00:06:08,520 But the good news is that it doesn't have to be that precise to get a basic idea of your depths. 71 00:06:08,780 --> 00:06:19,900 So if you start at the bow of the key, what someone might call the back or the handle, and we work our way to the tip of the key, we can see here that the first depth cut is about a seven. 72 00:06:19,900 --> 00:06:23,300 Now I don't see the line for the seven, but I can see it's shorter than the six. 73 00:06:23,420 --> 00:06:25,500 So it's easy for me to assume that's a seven cut. 74 00:06:25,520 --> 00:06:29,140 And if I move to the next cut there, we can see that that's a five cut. 75 00:06:29,140 --> 00:06:30,660 The one next to it's a five cut. 76 00:06:30,720 --> 00:06:34,280 We jump up to a four cut, and then we go back down to a five cut. 77 00:06:34,400 --> 00:06:39,140 So we have the code for this, which is 75545. 78 00:06:39,140 --> 00:06:45,060 This is a horribly bitted key, except for that far back deep cut on the seven. 79 00:06:46,500 --> 00:06:50,280 But now that I have this information, what can I do with this? 80 00:06:50,280 --> 00:06:56,580 This is a great way to get a photo and get the depth cuts, but how do I take this and model a key? 81 00:06:56,580 --> 00:07:07,080 So a lot of people don't have the skill or ability to sit there and get the warding cut into a key and the proper size, height, and all this, the right angles. 82 00:07:07,080 --> 00:07:12,840 That would take a lot of work and using something like Fusion 360, AutoCAD, SolidWorks, whatever you want to use. 83 00:07:13,700 --> 00:07:18,900 Well, that's where a great talk that I believe happened at DEF CON 21 occurred. 84 00:07:19,300 --> 00:07:21,400 In the credits, I'll have a link to that talk. 85 00:07:21,400 --> 00:07:24,580 That's on YouTube, I believe, and all the people who are part of that talk. 86 00:07:24,580 --> 00:07:32,440 But it was something along the lines of key duplication and defeating high security Primus locks. 87 00:07:33,960 --> 00:07:42,420 And the people who created that created a software called Keygen, and they launched a website called keygen.co. 88 00:07:42,600 --> 00:07:45,040 This website is absolutely amazing. 89 00:07:45,180 --> 00:07:48,260 In your type, you select the type of key you're working with. 90 00:07:48,460 --> 00:07:54,480 Your outline might be like, if it's a five pin, six pin, seven pin, whatever, master lock, padlock, a four pin. 91 00:07:54,500 --> 00:07:58,680 And then your warding type, depending on which key you're using, might have a different warding. 92 00:07:58,680 --> 00:08:03,960 And then using the previous slide, we figured out the cuts, like a seven, five, five, four, five. 93 00:08:03,960 --> 00:08:08,000 You just simply enter that number combination into the bidding and hit generate. 94 00:08:08,100 --> 00:08:10,380 And this generates an STL file. 95 00:08:10,720 --> 00:08:19,880 For those of you not familiar with 3D printing, an STL file is the base file you use as your 3D model to generate your 3D prints. 96 00:08:20,680 --> 00:08:24,140 So here's a quick video demo of me using the site. 97 00:08:24,720 --> 00:08:26,520 This is not the key I showed you previously. 98 00:08:26,520 --> 00:08:28,340 It's just a demo real quick, but this is a Kwikset. 99 00:08:28,340 --> 00:08:31,000 On Kwikset, they only have the KW1 keyway and warding. 100 00:08:31,320 --> 00:08:35,760 And this is a bidding I entered for a test key I have for an actual lock I own. 101 00:08:37,020 --> 00:08:37,840 It's 25363. 102 00:08:37,840 --> 00:08:38,680 I hit generate. 103 00:08:38,680 --> 00:08:44,000 It takes a couple seconds here, and then it generates this beautiful 3D render of the key. 104 00:08:44,340 --> 00:08:48,200 I mean, they even have the end of the key to match what it would actually look like on the key. 105 00:08:48,280 --> 00:08:49,880 You hit download STL. 106 00:08:49,880 --> 00:08:52,720 It downloads the STL file to your computer. 107 00:08:54,040 --> 00:08:57,560 And then I opened this up real quick in Windows 3D file viewer. 108 00:08:58,020 --> 00:08:59,200 They call it print 3D. 109 00:08:59,200 --> 00:09:01,720 And this is just a basic idea of how it imports. 110 00:09:02,040 --> 00:09:06,580 It's an absolute perfect replication of a Kwikset key. 111 00:09:07,320 --> 00:09:13,580 At the time, I was printing this on an Ultimaker 2 Plus, and the slicer software I used for that is called Cura. 112 00:09:14,020 --> 00:09:19,440 If you don't know what a slicer software is, it's a software that 3D printers print on layers. 113 00:09:19,460 --> 00:09:26,140 This slices the STL file into layers so that the 3D printer can print. 114 00:09:26,140 --> 00:09:31,940 Now, I don't print vertically like this because it makes it very unstable and weak, and it wobbles as it prints. 115 00:09:31,940 --> 00:09:34,660 So the first thing I do is I rotate it flat down to the bed. 116 00:09:35,360 --> 00:09:38,940 And in this preview, you're going to see this big ring around the outside. 117 00:09:38,960 --> 00:09:40,180 That's called a brim. 118 00:09:40,180 --> 00:09:41,700 It just helps bed adhesion. 119 00:09:41,700 --> 00:09:44,400 When I actually go to print it, I don't use that brim. 120 00:09:45,380 --> 00:09:53,300 I do print with supports depending on the warding, but for the most point, you don't need to use even supports on that. 121 00:09:53,760 --> 00:09:55,520 So here's just a quick time lapse. 122 00:09:55,520 --> 00:09:56,240 I'll probably skip ahead. 123 00:09:56,240 --> 00:10:01,640 I'm not going to watch the whole thing on this of my Ultimaker printing that exact key we just showed and modeled. 124 00:10:04,610 --> 00:10:08,510 So if you're not familiar with 3D printing, this is just a quick overview of what that looks like. 125 00:10:13,810 --> 00:10:16,110 The gap you see on the bottom is part of the warding. 126 00:10:16,250 --> 00:10:18,990 I didn't do supports on this one because I didn't need them. 127 00:10:23,340 --> 00:10:27,260 And you can see towards the top there, there's a little bit of stringing between the cut. 128 00:10:27,260 --> 00:10:27,860 That's simple. 129 00:10:27,860 --> 00:10:30,760 When I'm done, I usually take an X-Acto knife and just clean that up. 130 00:10:31,140 --> 00:10:34,080 It doesn't really affect a quick little cut with an X-Acto knife. 131 00:10:34,080 --> 00:10:39,720 It cleans up any stringing or weird little print artifacts that you may receive on the print. 132 00:10:42,730 --> 00:10:44,110 So this gives you the general idea. 133 00:10:44,110 --> 00:10:45,570 We don't need to watch the whole print. 134 00:10:45,750 --> 00:10:53,010 On average, this print takes between 10 to 15 minutes, depending on your printer, but it takes about 10 to 15 minutes to knock out an entire key print. 135 00:10:54,330 --> 00:10:59,350 So this is the Kwikset lock I modeled, or that I modeled the key off of. 136 00:10:59,710 --> 00:11:00,850 This is the key I printed. 137 00:11:00,850 --> 00:11:01,950 You can see I stopped it early. 138 00:11:01,950 --> 00:11:03,650 That's why it's cut off on top. 139 00:11:03,830 --> 00:11:08,510 I insert it in and it turns the key, or it turns the lock, opens the lock. 140 00:11:08,830 --> 00:11:17,310 One thing to keep in mind here is that this is a deadbolt and this deadbolt is not attached to the actual bolt, right? 141 00:11:17,890 --> 00:11:24,690 So a 3D printed key will twist this open because there's nothing, there's no resistance from the bolt having to be slid forward and backwards. 142 00:11:25,330 --> 00:11:41,050 One thing I could suggest if you're worried about snapping the key off in a lock, is you can either use a tension wrench at the bottom, trim a little bit off the bottom of the 3D printed key with an X-Acto knife, and slide a thin tension wrench in, or a small screwdriver to assist the turn. 143 00:11:41,850 --> 00:11:52,330 Because when you actually throw a bolt, you're going to have a lot more weight behind it and it's going to be a little more difficult to turn, and you don't want to bend or snap a 3D plastic key off inside the deadbolt lock. 144 00:11:52,330 --> 00:11:54,770 So that's just something to keep in mind. 145 00:11:55,010 --> 00:11:57,750 So I had this key, but what now? 146 00:11:57,750 --> 00:11:59,190 I have a 3D printed key. 147 00:11:59,710 --> 00:12:02,590 3D printed keys are not durable. 148 00:12:02,590 --> 00:12:03,850 They will not last. 149 00:12:04,030 --> 00:12:09,750 So I was walking through my local hardware store, Mine's Menards, and I saw the KeyMe machine. 150 00:12:09,750 --> 00:12:17,050 And I'm not going to get into how much I hate this company and the ridiculous security options they offer. 151 00:12:17,890 --> 00:12:20,370 And by ridiculous, I mean they don't have them. 152 00:12:20,410 --> 00:12:22,450 So I printed two keys on this machine. 153 00:12:22,450 --> 00:12:26,230 And what this is, is if you have a key, it'll duplicate your key for you unmanned. 154 00:12:26,390 --> 00:12:28,230 And you can see I'm entering... this is a Schlage. 155 00:12:28,230 --> 00:12:29,450 It's a totally different key. 156 00:12:29,470 --> 00:12:31,430 I was testing it another time. 157 00:12:32,390 --> 00:12:33,950 It was a white filament. 158 00:12:35,570 --> 00:12:39,410 And we assume they use optics to scan this key for depths. 159 00:12:39,410 --> 00:12:40,990 And it misread the key. 160 00:12:40,990 --> 00:12:45,690 You'll see here in a second that it misread the first key, thinking it was something that it's not. 161 00:12:45,810 --> 00:12:46,930 And it failed. 162 00:12:46,930 --> 00:12:51,690 I had also printed this in a black or a dark , dark gray PLA as well. 163 00:12:51,930 --> 00:12:54,570 And I'll show you that here in a second and how that works. 164 00:12:54,570 --> 00:12:56,750 So you can see it says here, this is a less common key. 165 00:12:56,750 --> 00:13:00,030 It thinks it's some weird Schlage, which it absolutely is not. 166 00:13:00,610 --> 00:13:03,230 So at this point, I was confused why it wasn't working. 167 00:13:03,510 --> 00:13:07,510 So I canceled out of this and I decided I'm going to try again. 168 00:13:10,400 --> 00:13:16,320 And at this point, I went ahead and pulled the white key out and I put the darker key in. 169 00:13:16,320 --> 00:13:17,540 And it definitely helps. 170 00:13:17,540 --> 00:13:25,860 So I would suggest if you're going to take this attack vector to the point where you want to try to get a real key made from it, that you use a darker PLA. 171 00:13:25,860 --> 00:13:26,600 Don't use white. 172 00:13:26,600 --> 00:13:28,100 Something that's going to be super reflective. 173 00:13:28,100 --> 00:13:31,200 So here's the darker, dark gray key. 174 00:13:31,200 --> 00:13:38,480 I'm being very gentle shoving it in because it's got spring loaded shutters on it and I didn't want to snap it off inside there. 175 00:13:39,560 --> 00:13:41,480 And yes, you did see that correct. 176 00:13:41,560 --> 00:13:46,500 That is an NFC reader, RFID reader on one side and it's got a fingerprint scanner on the other side. 177 00:13:46,900 --> 00:13:55,600 The fingerprint scanner's purpose, as horrible as this is, is that you can save all your key profiles in the cloud. 178 00:13:56,740 --> 00:13:59,700 So if you don't have your key with you, you can always come back and later. 179 00:14:00,440 --> 00:14:02,740 I don't want to get into the security implications of that. 180 00:14:02,740 --> 00:14:08,480 So you see that it's $1.99 to get a key duplicated here. 181 00:14:08,480 --> 00:14:09,600 Standard brass. 182 00:14:09,700 --> 00:14:14,540 If you'd like, you can get your Mickey Mouse or Darth Vader key, but this is for testing purposes. 183 00:14:14,540 --> 00:14:16,320 So after tax, it was $2.12. 184 00:14:17,800 --> 00:14:22,920 This is the part where I turn the camera away as I insert my credit card to pay for this transaction. 185 00:14:28,090 --> 00:14:31,110 Sorry, this video is a bit of a lengthy video because it took me a minute. 186 00:14:31,730 --> 00:14:34,850 Before they had this KeyMe, they used to have a machine called MinuteKey. 187 00:14:34,910 --> 00:14:35,830 And I liked the MinuteKey. 188 00:14:35,830 --> 00:14:36,350 It worked well. 189 00:14:36,350 --> 00:14:37,110 It was very simple. 190 00:14:37,110 --> 00:14:40,550 There wasn't all this extra save your data, all this different crap. 191 00:14:41,150 --> 00:14:42,330 They're trying to do an upsell here. 192 00:14:42,330 --> 00:14:44,990 I get a secondary key here for a few bucks cheaper. 193 00:14:45,410 --> 00:14:46,350 I'm like, no, I'm good. 194 00:14:46,350 --> 00:14:47,710 I just need to test to make sure this works. 195 00:14:47,710 --> 00:14:52,710 And then they want your email address so they can email your receipt, aka mark it to you. 196 00:14:53,170 --> 00:14:55,890 So of course, you know me, I enter my real email address 197 00:15:05,130 --> 00:15:09,530 and they want to know if you want to save your key for later. 198 00:15:09,530 --> 00:15:11,210 That's where the fingerprint comes in. 199 00:15:12,110 --> 00:15:13,290 Hell no. 200 00:15:14,470 --> 00:15:15,330 Moving on. 201 00:15:15,330 --> 00:15:18,210 So it starts going down this path where it starts updating you. 202 00:15:18,310 --> 00:15:19,170 So here's the concept. 203 00:15:19,170 --> 00:15:21,730 You have a 3D printed key that is not durable. 204 00:15:21,730 --> 00:15:31,230 However, I can take a 3D printed key, go to an unmanned key duplication system in the very back of a hardware store that is in my local town. 205 00:15:31,730 --> 00:15:33,770 And I can duplicate this key. 206 00:15:33,770 --> 00:15:42,130 Now you saw it does have the ability to do higher security keys than your standard Schlage or Kwikset or less common keys, we'll call it. 207 00:15:42,430 --> 00:15:47,190 To do that though, they do ask for a mailing address because they cut it and then they mail it to you. 208 00:15:47,470 --> 00:15:49,110 So that's something to keep in mind as well. 209 00:15:49,110 --> 00:16:02,730 But if you have a standard Schlage, a standard Kwikset or other master lock standard keys that are what this company considers common, it's going to cut this key in front of you and then dispense it out from the machine. 210 00:16:02,730 --> 00:16:10,790 And again, I have to definitely apologize for the time of this video. 211 00:16:12,230 --> 00:16:17,250 The other thing is it says that it does have an Android and iOS app that it can scan your keys in home. 212 00:16:17,250 --> 00:16:25,630 I have not tested this, but I'm planning on it where I'm wondering if I'm able to just set my key down on a desk and the app will scan it. 213 00:16:25,630 --> 00:16:32,130 So I'm going to be testing that in the because if you could do that, if you had access to a physical key, it'd be set. 214 00:16:32,130 --> 00:16:33,590 Okay, so the key's done cutting. 215 00:16:33,590 --> 00:16:36,510 You can see it does an absolutely horrid job. 216 00:16:36,510 --> 00:16:39,490 You can see little pieces of flashing sticking off where it cut it. 217 00:16:39,970 --> 00:16:50,810 But nonetheless, you now have a real physical metal duplicated brass key of something you just 3D printed, which is awesome. 218 00:16:50,810 --> 00:16:56,350 So that concludes the 3D printing and cutting a key. 219 00:16:56,350 --> 00:16:57,850 Like I said, it's very simple. 220 00:16:57,850 --> 00:17:01,310 The hardest part is... well, let me rephrase that. 221 00:17:01,310 --> 00:17:03,590 If you have access to the key, this is dead simple. 222 00:17:03,610 --> 00:17:10,090 You get the measurements with the key gauge, you type it into keygen.co, you spit out an STL file and you print it and you're done. 223 00:17:10,090 --> 00:17:11,330 You have a 3D printed key. 224 00:17:11,330 --> 00:17:19,210 You can take that to an unmanned key duplication because if you go to a hardware store and ask a real person to cut this key, you might get a weird look. 225 00:17:19,270 --> 00:17:22,550 I'm considering trying that just to see what happens if they'll even do it. 226 00:17:23,890 --> 00:17:28,730 But you'll have a physical key if you can go to an unmanned key duplication center. 227 00:17:29,410 --> 00:17:31,690 So now we're going to go into molding and casting a key. 228 00:17:31,690 --> 00:17:40,890 And this is where you start to feel a little more like James Bond or a spy in this case, because you're starting to do a little more covert, see it in the movies kind of stuff. 229 00:17:40,910 --> 00:17:42,810 And the cool part is you get to play with fire. 230 00:17:44,110 --> 00:17:45,610 So where did I get the idea to try this? 231 00:17:45,610 --> 00:17:48,870 So I've been wanting to try key duplication for a while now. 232 00:17:49,450 --> 00:17:56,530 But I'd always seen every video, you need a clamshell, you need something to put the clay in to mold this key in. 233 00:17:56,630 --> 00:18:01,730 And they're always milled or CNC'd out of like an aluminum or some kind of metal. 234 00:18:01,730 --> 00:18:03,170 And I didn't have access to that. 235 00:18:03,170 --> 00:18:06,950 I live in a very small city, like population 10,000 people. 236 00:18:08,430 --> 00:18:10,330 And I didn't know anyone. 237 00:18:10,330 --> 00:18:13,510 And if you were to send this off to be done, it would be kind of a high cost. 238 00:18:13,790 --> 00:18:20,830 And then Devian Olof put out a video on his YouTube channel, which if you're not subscribing, I don't know why you absolutely should be subscribing to his videos. 239 00:18:22,090 --> 00:18:27,830 He put out a video and he talked about how you could absolutely 3D print this. 240 00:18:28,190 --> 00:18:33,050 So I went out and searched Thingiverse for a 3D printable clamshell. 241 00:18:33,610 --> 00:18:34,910 And lo and behold, I found one. 242 00:18:34,910 --> 00:18:38,330 And I'll get into who that's by here in a second. 243 00:18:38,610 --> 00:18:44,550 So once I saw that, Deviant talks about every little thing you need to cast a key. 244 00:18:44,550 --> 00:18:46,590 He goes step-by-step process on how to do this. 245 00:18:46,590 --> 00:18:50,310 So I watched his video, took inspiration from it and tested it myself. 246 00:18:50,310 --> 00:18:51,530 And here's the link at the bottom. 247 00:18:51,530 --> 00:18:55,070 If you're seeing that to his original key molding and casting video. 248 00:18:56,730 --> 00:19:01,310 If you don't know who Devian Olof is, there's this beautiful mug right there. 249 00:19:01,310 --> 00:19:05,010 His website is deviating.net, Devian Olof at Twitter. 250 00:19:05,330 --> 00:19:07,150 Check him out on Twitter for sure. 251 00:19:08,290 --> 00:19:10,150 So we're going to go over everything you need. 252 00:19:10,150 --> 00:19:13,330 There's a much higher bill of materials on this. 253 00:19:13,530 --> 00:19:14,890 So let's go through them one by one. 254 00:19:14,890 --> 00:19:20,430 I try to give you an idea of where you can get them off Amazon pretty cheap and or the prices you can expect to pay. 255 00:19:21,630 --> 00:19:29,350 So in this case, you are going to need physical access to the key you're wanting to duplicate. 256 00:19:29,790 --> 00:19:35,910 If you prepare ahead of time, I'll talk about in a second, you don't need much time. 257 00:19:35,910 --> 00:19:43,010 You maybe need like anywhere between 15 to 30 seconds hands on with that key. 258 00:19:44,830 --> 00:19:59,350 Depending on what you're allowed to do on a job or your story for your job, you could get access to this key for like requesting access to a server room or wherever you're trying to access specifically. 259 00:19:59,370 --> 00:20:05,170 Had you need that key, you may have just enough time to get the mold of that key. 260 00:20:05,210 --> 00:20:08,970 And again, I did this all with a Kwikset KW1 key. 261 00:20:09,870 --> 00:20:13,110 Then you're going to need a low melting point metal. 262 00:20:13,630 --> 00:20:19,490 So I do this demonstration at a lot of cons, and some of these cons have kids. 263 00:20:20,530 --> 00:20:25,650 One metal that Deviant talks about, and if you talk to other people, they suggest is called woods metal. 264 00:20:25,810 --> 00:20:33,870 The problem with woods metal is that it has lead in it and other toxic chemicals that when burnt, the fumes rise up and you're breathing these in. 265 00:20:34,350 --> 00:20:37,110 Woods metal is relatively cheap. 266 00:20:37,110 --> 00:20:39,570 You can get a lot of it for a very low cost. 267 00:20:39,750 --> 00:20:48,590 However, because I was going to have kids, A, touching the metal after they're done, melting it themselves, all this different stuff, I didn't feel comfortable using a woods metal because of the toxins. 268 00:20:48,810 --> 00:20:53,030 And talking to some people in the tool slack, they suggested fields metal. 269 00:20:53,730 --> 00:20:58,030 Fields metal is much more expensive by weight. 270 00:20:58,150 --> 00:21:09,370 I was able to get a small little brick of it, probably about two and a half to three inches by three inches by quarter of an inch thick for about 35 bucks off eBay. 271 00:21:09,470 --> 00:21:11,590 That's the exact link to the one I buy. 272 00:21:11,590 --> 00:21:13,350 This is a reputable buyer. 273 00:21:13,450 --> 00:21:19,830 He's got a hundred percent positive feedback as of this presentation, and he's always sent me the products I've needed. 274 00:21:19,870 --> 00:21:31,810 I did a con in Omaha, Nebraska, and at that con, I ordered five different bricks, and he got them to me, and he was willing to work with me on price, which I thought was awesome. 275 00:21:32,010 --> 00:21:33,090 So this is where I get my metal. 276 00:21:33,090 --> 00:21:33,730 It's fields metal. 277 00:21:33,730 --> 00:21:35,410 It's very low point metal. 278 00:21:35,410 --> 00:21:42,950 Like the picture shows, it melts at about 144 degrees Fahrenheit, and it doesn't have the toxins in it. 279 00:21:43,030 --> 00:21:48,350 And then you're going to need something to melt that brick you get down so you can make ingots. 280 00:21:48,810 --> 00:21:52,630 Deviant has some really cool big melting pot that he bought. 281 00:21:52,630 --> 00:21:53,730 I looked it up on Amazon. 282 00:21:53,730 --> 00:21:55,470 I think it was like 35 or 40 bucks. 283 00:21:55,470 --> 00:21:57,010 He might've gotten it cheaper somewhere else. 284 00:21:57,010 --> 00:22:02,890 But I was walking through Walmart one day in the camping section, and I saw this cast iron skillet, and it was like five bucks. 285 00:22:02,890 --> 00:22:07,030 So I was willing to drop five bucks on a cast iron skillet, which I bought. 286 00:22:07,130 --> 00:22:09,330 Obviously, I'll only use it for this purpose moving forward. 287 00:22:10,370 --> 00:22:18,770 And then Deviant had these perfectly square, small ingots of his metal. 288 00:22:18,790 --> 00:22:26,470 And it just so happened that this ingot was exactly the right amount of metal to mold and cast one single key. 289 00:22:26,470 --> 00:22:31,390 So I reached out to him on, I can't remember if it was Twitter or Slack, and talked to him. 290 00:22:31,390 --> 00:22:33,210 And he's like, oh dude, it's awesome. 291 00:22:33,210 --> 00:22:34,950 And there are these ice cube trays. 292 00:22:34,950 --> 00:22:39,810 So these are these silicone rubber ice cube trays that are meant to make tiny ice cubes. 293 00:22:39,810 --> 00:22:42,950 You can drop them in like in the mouth of a bottle of water or soda. 294 00:22:42,950 --> 00:22:44,430 And they're super tiny. 295 00:22:45,030 --> 00:22:50,890 You can get them off Amazon and you get two trays, which make a ton of ice cubes or ingots in this case. 296 00:22:50,890 --> 00:22:52,790 And they're 10 bucks for both of them. 297 00:22:52,790 --> 00:22:56,690 Again, these prices might be different now, especially with COVID going on. 298 00:22:56,690 --> 00:23:02,930 They could have completely changed because all prices and availability on Amazon are off the charts compared to what they used to be. 299 00:23:02,930 --> 00:23:04,550 But I got two of them for 10 bucks. 300 00:23:04,550 --> 00:23:09,010 So you can either use them both or use one for key casting and one for your ice cubes. 301 00:23:10,150 --> 00:23:11,670 Then you're going to need the clay. 302 00:23:11,670 --> 00:23:17,590 And the clay is what you actually mold the shape and the indent of the key into. 303 00:23:17,770 --> 00:23:22,070 And Sculpey is something that Deviant recommended. 304 00:23:22,190 --> 00:23:29,190 One tip, when you search Sculpey clay on Amazon, select all the colors available. 305 00:23:29,430 --> 00:23:34,750 The reason I say this is that the price varies based on the color you select. 306 00:23:34,750 --> 00:23:35,570 I don't know. 307 00:23:35,570 --> 00:23:36,550 I don't get it. 308 00:23:36,970 --> 00:23:40,590 I've gotten yellow and green so far because they're usually between two to $3. 309 00:23:40,690 --> 00:23:48,370 But if you select black or white or orange, it might be $7 to $10 for the same size, the two ounce size I buy here. 310 00:23:49,290 --> 00:23:54,810 This two ounce size, you can see from the picture, there's indents along each of the thing. 311 00:23:54,810 --> 00:23:57,930 And pretty much it's got four logs of clay. 312 00:23:57,930 --> 00:24:04,030 One log of clay is exactly what you need to cast a key. 313 00:24:04,030 --> 00:24:06,970 So you get a minimum of four castings. 314 00:24:06,970 --> 00:24:11,770 I found that you can reuse this clay over and over again. 315 00:24:11,770 --> 00:24:13,510 It does dry out over time. 316 00:24:13,610 --> 00:24:14,650 It is heat set. 317 00:24:14,650 --> 00:24:15,610 It's oven baked clay. 318 00:24:15,610 --> 00:24:17,770 So heat sets it and makes it hardened. 319 00:24:18,090 --> 00:24:21,350 So you're not going to get 100% reusability over and over again. 320 00:24:21,350 --> 00:24:22,670 And your results might vary. 321 00:24:22,670 --> 00:24:25,850 But I've gotten four or five keys out of a single piece of clay. 322 00:24:26,130 --> 00:24:31,810 But again, it all depends on how hot you heat your metal to before you pour it in. 323 00:24:32,610 --> 00:24:34,650 And then you're gonna need some kind of talcum powder. 324 00:24:35,170 --> 00:24:36,890 I bought mine at Walmart. 325 00:24:36,890 --> 00:24:38,410 I bought the little baby powder. 326 00:24:38,410 --> 00:24:39,870 It's a little size about this big. 327 00:24:39,870 --> 00:24:41,470 It's a travel size baby powder. 328 00:24:41,570 --> 00:24:42,270 And it's perfect. 329 00:24:42,270 --> 00:24:44,750 And this just stops the clay from sticking to itself. 330 00:24:44,810 --> 00:24:52,870 So when you cast the two key or take the two pieces of the clamshell and stick them together, when you pull them apart, they separate without the clay sticking together and ruining your whole mold. 331 00:24:54,130 --> 00:24:56,250 Then you're gonna need the clamshell. 332 00:24:56,310 --> 00:24:58,870 I 3D printed mine from Thingiverse. 333 00:24:59,670 --> 00:25:03,490 ZBZZN Boris is the person who created this. 334 00:25:03,490 --> 00:25:07,650 There's a bitly link I created to link straight to the Thingiverse link for that. 335 00:25:09,590 --> 00:25:12,290 It works absolutely perfect. 336 00:25:12,370 --> 00:25:13,310 It's three pieces. 337 00:25:13,310 --> 00:25:15,130 You're gonna have a left and a right to your clamshell. 338 00:25:15,270 --> 00:25:16,730 And then a base. 339 00:25:16,790 --> 00:25:18,090 And this base is awesome. 340 00:25:18,090 --> 00:25:20,410 In Deviant's video, he had an aluminum one, I believe. 341 00:25:20,410 --> 00:25:27,330 And then he used like a C-clamp to clamp it to hold it together and like kind of stabilize it on the table. 342 00:25:27,330 --> 00:25:29,990 This base you print for it works absolutely perfect. 343 00:25:29,990 --> 00:25:31,070 I love this clamshell. 344 00:25:31,070 --> 00:25:33,450 I've used it over a hundred times. 345 00:25:34,110 --> 00:25:35,830 And there's no deformation. 346 00:25:36,310 --> 00:25:37,990 It absolutely does not deform. 347 00:25:37,990 --> 00:25:38,850 It holds up to the heat. 348 00:25:38,850 --> 00:25:49,730 You have to realize that when you print PLA, you print at a minimum usually of 190 degrees Celsius to 220 degrees Celsius. 349 00:25:49,910 --> 00:25:55,010 And we're only hitting around 140 to 160 degrees Fahrenheit. 350 00:25:55,170 --> 00:25:58,170 Now, unfortunately, I use American units. 351 00:25:58,170 --> 00:26:01,750 I wish we'd switched to metric and Celsius, but I don't understand it off the top of my head. 352 00:26:01,950 --> 00:26:03,350 So you could do the conversion. 353 00:26:03,350 --> 00:26:08,410 But the point is you never get close to that melting temperature or the glass temperature of the filament. 354 00:26:08,410 --> 00:26:09,830 So you're gonna be absolutely fine. 355 00:26:10,370 --> 00:26:12,090 Then you're gonna need a melting ladle. 356 00:26:12,090 --> 00:26:14,090 This thing was like 10 bucks off Amazon. 357 00:26:14,170 --> 00:26:18,350 It's for melting lead, you know, casting ammunition, things along those lines. 358 00:26:18,450 --> 00:26:19,690 It was 10 bucks on Amazon. 359 00:26:19,690 --> 00:26:22,010 It fits a perfect ingot inside of it. 360 00:26:22,010 --> 00:26:25,670 And you can hold a lighter underneath it to melt that down. 361 00:26:28,390 --> 00:26:29,930 Then you're gonna need a lighter. 362 00:26:30,570 --> 00:26:32,550 Deviant suggested a torch lighter. 363 00:26:32,550 --> 00:26:33,250 I do as well. 364 00:26:33,250 --> 00:26:35,710 I think it puts out a little more heat than just a standard lighter. 365 00:26:36,110 --> 00:26:37,630 But I've tested with fields metal. 366 00:26:37,630 --> 00:26:41,250 You can use like a tea candle or a standard Bic lighter or a Zippo lighter. 367 00:26:41,250 --> 00:26:43,030 It will get it hot enough over time. 368 00:26:43,030 --> 00:26:44,270 It's just not as fast. 369 00:26:45,170 --> 00:26:49,290 If you're like me and you like a cigar renown again, I already own a cigar lighter. 370 00:26:49,290 --> 00:26:55,730 I bought this one off Amazon for 15 bucks like years ago for the purpose of actually having cigars. 371 00:26:55,730 --> 00:26:58,730 It just so happened to work perfectly for this situation as well. 372 00:26:59,350 --> 00:27:02,850 So this is a video of me trying not to upset my wife. 373 00:27:03,610 --> 00:27:12,570 This is the five dollar cast iron skillet I bought from Walmart with the brick of metal of fields metal I bought off of eBay. 374 00:27:12,670 --> 00:27:15,050 I'm slowly just melting it down inside this pan. 375 00:27:15,810 --> 00:27:19,450 I make a very noob mistake here. 376 00:27:19,450 --> 00:27:20,770 Do not make my mistake. 377 00:27:20,770 --> 00:27:30,630 I took a like a kebab skewer and I was making sure it was fully melted and kind of stirring it around to make sure there was no more chunks of metal that it was 100% completely melted on my stove. 378 00:27:30,990 --> 00:27:38,170 And then to make sure I, like an idiot, swirl it around in the pan like you would with butter if you're about to fry steak. 379 00:27:39,370 --> 00:27:42,530 And what I do is I just coat my entire pan with fields metal. 380 00:27:42,530 --> 00:27:45,090 So I lost a bit of metal because of that. 381 00:27:45,710 --> 00:27:51,230 But like I said, I'm not using this pan for anything but melting fields metal in the future. 382 00:27:51,230 --> 00:27:52,470 So it works perfectly. 383 00:27:52,470 --> 00:27:56,510 I put the wax paper underneath the ice cube tray in case I spilt. 384 00:27:56,510 --> 00:27:58,290 That's the only person I have that there. 385 00:27:58,290 --> 00:28:03,210 If I did an overspill, it would land on the wax paper and not my stove and my wife would still love me. 386 00:28:03,210 --> 00:28:05,210 So I quickly just pour this in here. 387 00:28:05,750 --> 00:28:10,690 And you can see that I got a whole bunch of full cube pours and then a whole bunch of random ones. 388 00:28:11,530 --> 00:28:12,990 And then you can see the cubes it makes. 389 00:28:12,990 --> 00:28:15,390 I think I got about 16 cubes out of that one piece of metal. 390 00:28:15,390 --> 00:28:16,910 So that's enough for 16 keys. 391 00:28:17,610 --> 00:28:22,790 One note, when I poured into this ice cube tray, it doesn't fully fill all the cubes. 392 00:28:22,790 --> 00:28:24,610 So what I did is I popped them all out. 393 00:28:24,750 --> 00:28:26,910 Anything that was a full cube, I set aside. 394 00:28:26,950 --> 00:28:30,070 Anything that was a partial cube, I took into my melting ladle. 395 00:28:30,090 --> 00:28:38,970 I melted it down, all the little fragments, little pieces, and I slowly poured them in cube by cube until I got a full ingot for each one. 396 00:28:38,970 --> 00:28:40,570 So that's just a little pointer there. 397 00:28:41,950 --> 00:28:46,610 So now we're going to switch to demo time, aka time to play with fire. 398 00:28:47,610 --> 00:28:52,750 Don't try this at home or if you do, just don't blame me if you get hurt. 399 00:28:52,750 --> 00:28:55,430 I highly suggest you try this at home. 400 00:28:56,310 --> 00:29:08,690 Full disclosure, I've had this demo pre-recorded for a time because it's one of those things that with COVID going on, I've done a lot of virtual conferences. 401 00:29:08,970 --> 00:29:11,790 And with a virtual conference, it's just difficult to plan ahead. 402 00:29:11,790 --> 00:29:14,530 So I pre-recorded the actual demonstration of this video. 403 00:29:14,990 --> 00:29:18,070 So you're going to see here, the background is going to change. 404 00:29:18,070 --> 00:29:19,690 My hat won't, you won't see my face. 405 00:29:19,690 --> 00:29:23,330 It's going to be all on table kind of thing, but you're going to see the whole demonstration. 406 00:29:23,330 --> 00:29:26,790 So we're going to do that demonstration and then I'll come back right after that. 407 00:29:26,990 --> 00:29:27,710 Enjoy. 408 00:29:28,390 --> 00:29:30,530 Okay, so I'm going to get started with my demo here. 409 00:29:30,530 --> 00:29:32,470 I'm going to go over what I have here on the table. 410 00:29:33,750 --> 00:29:35,430 So some of the things you're going to need. 411 00:29:35,430 --> 00:29:37,230 The first thing is a clamshell. 412 00:29:37,730 --> 00:29:40,250 This is what we're going to use to actually mold the key. 413 00:29:40,310 --> 00:29:42,090 This is actually 3D printed. 414 00:29:42,370 --> 00:29:45,630 It's fully available for free download off thingiverse.com. 415 00:29:46,610 --> 00:29:48,570 And I'll try to make sure the links are available. 416 00:29:52,950 --> 00:29:54,690 They're on the base. 417 00:29:54,690 --> 00:29:59,270 The base is pretty much so you don't have to hold this as you're pouring molten metal into it. 418 00:29:59,650 --> 00:30:01,630 It just lets you freehand it. 419 00:30:01,890 --> 00:30:05,890 Speaking of pouring molten metal, the next thing we have here is a ladle. 420 00:30:05,910 --> 00:30:07,870 And this is a lead ladle. 421 00:30:08,190 --> 00:30:11,470 You could use this for pouring lead, but it works perfectly for what we're doing. 422 00:30:11,910 --> 00:30:15,830 So we'll be pouring the metal in to the clamshell like that. 423 00:30:16,550 --> 00:30:20,670 The next thing we're going to need is some sculpting clay. 424 00:30:20,670 --> 00:30:21,630 This is Sculpty. 425 00:30:21,630 --> 00:30:24,210 It's like a few bucks on Amazon for this package. 426 00:30:24,470 --> 00:30:28,650 This package is pre-split into four different bars. 427 00:30:29,290 --> 00:30:32,930 And just one bar is exactly perfect to fill this mold. 428 00:30:32,930 --> 00:30:35,550 You rip that one bar in half and you fill each half of the mold. 429 00:30:35,550 --> 00:30:36,770 It works perfect. 430 00:30:37,590 --> 00:30:40,470 You're going to need some baby powder, some talcum powder. 431 00:30:40,570 --> 00:30:44,010 I buy this nice little jar or nice little bottle from Walmart. 432 00:30:44,010 --> 00:30:48,290 It's like a buck something, just because it's small and convenient. 433 00:30:48,870 --> 00:30:57,450 And I travel with all this stuff in this like pencil bag I found one time at Walmart during school shopping time. 434 00:30:57,450 --> 00:31:00,970 It's like a dollar or two dollars for this zipper bag and it holds everything I need. 435 00:31:03,810 --> 00:31:05,130 You're going to need a lighter. 436 00:31:05,130 --> 00:31:06,970 I suggest a torture cigar lighter. 437 00:31:06,970 --> 00:31:08,150 This is a cigar lighter. 438 00:31:08,790 --> 00:31:13,070 You can't really see the flame on camera I'm guessing, but that's what that is. 439 00:31:13,270 --> 00:31:16,230 And then I also have the metal. 440 00:31:16,410 --> 00:31:18,470 So there's different kinds of metals you can use for this. 441 00:31:19,930 --> 00:31:22,710 A very common popular one is called woods metal. 442 00:31:22,790 --> 00:31:26,550 The problem with woods metal is that it contains lead, so it's toxic. 443 00:31:26,550 --> 00:31:28,550 The fumes it puts off are toxic. 444 00:31:28,890 --> 00:31:32,470 So I would highly suggest against it if you're going to be doing this around kids or in the public. 445 00:31:32,470 --> 00:31:33,850 For your own use, that's up to you. 446 00:31:33,850 --> 00:31:35,510 You decide if that's okay with you. 447 00:31:35,610 --> 00:31:36,970 This is Fields metal. 448 00:31:37,230 --> 00:31:38,910 Fields metal is non-toxic. 449 00:31:38,910 --> 00:31:42,630 I get mine off Amazon and it's like $35 for a brick. 450 00:31:42,770 --> 00:31:46,230 And one brick makes pretty much enough to fill this little sleeve here. 451 00:31:46,230 --> 00:31:54,910 So about 16 little cubes, which you saw in the previous video that I made melting it into a pan and then pouring it in this mini ice cube tray. 452 00:31:55,790 --> 00:31:59,110 So let's get into molding an actual key. 453 00:31:59,350 --> 00:32:01,150 So I have this lock. 454 00:32:01,150 --> 00:32:04,310 It's a Kwikset lock and here's the key for that lock. 455 00:32:05,430 --> 00:32:06,770 It works perfect. 456 00:32:07,030 --> 00:32:09,130 So this is the key we're going to mold. 457 00:32:10,470 --> 00:32:13,070 So to get started, I'm going to move some stuff out of the way here. 458 00:32:14,390 --> 00:32:19,870 First thing I'm going to do is get my clamshell opened up and laid flat in front of me and I'm going to open my clay. 459 00:32:23,720 --> 00:32:27,660 Now I try to open this nicely so that I can kind of wrap it back in the clay later. 460 00:32:28,180 --> 00:32:30,040 That's only because I'm doing it for demo purposes. 461 00:32:30,120 --> 00:32:31,280 This doesn't really matter. 462 00:32:31,280 --> 00:32:38,280 I've actually 3D printed a holder for this clay just because I like to be organized with my stuff, especially in 3D printing. 463 00:32:38,560 --> 00:32:45,540 So if you look at this again, you can see that there's, it's hard, maybe hard to see, but you can see there are these lines that pre-cuts into these bars. 464 00:32:45,820 --> 00:32:48,020 And this one bar is exactly the right shape. 465 00:32:48,020 --> 00:32:56,680 So if I take this bar and break it in half or relatively in half, like so, this is exactly perfect for each side. 466 00:32:56,680 --> 00:33:03,060 So just take one and mash it up, just like play-doh, soften it up just a little bit. 467 00:33:03,440 --> 00:33:09,280 And then what you're going to do, and it's up to you, some people like to take talcum powder and put this in so the clay comes out easier. 468 00:33:09,340 --> 00:33:11,300 For demo, I don't really care. 469 00:33:11,400 --> 00:33:14,840 If you needed to do multiple back-to-back, maybe that would make sense. 470 00:33:14,840 --> 00:33:16,000 Otherwise it doesn't matter. 471 00:33:16,840 --> 00:33:25,060 Anyways, I get into about a shape like that and then I just push it down into the clamshell and try to get as flat as possible. 472 00:33:26,080 --> 00:33:32,140 So I'm pushing it down in, back-filling this big gap at the top, the big void at the top. 473 00:33:36,830 --> 00:33:42,490 And you want it to be as level with the top of this as possible. 474 00:33:42,490 --> 00:33:46,790 You don't want a big bulge of clay sticking up because it won't give you a good mold. 475 00:33:46,790 --> 00:33:49,490 It'll wrap around the key, which you do not want. 476 00:33:53,910 --> 00:33:57,130 So get this as flat as flat as you can. 477 00:33:57,970 --> 00:34:00,150 Again, it doesn't have to be absolutely perfect. 478 00:34:00,470 --> 00:34:03,170 When you squish these two together, you're probably going to get some leak out. 479 00:34:03,170 --> 00:34:03,930 That's fine. 480 00:34:03,930 --> 00:34:05,530 Just get it as best as you can. 481 00:34:08,250 --> 00:34:09,650 So you can see I have it. 482 00:34:09,750 --> 00:34:11,010 It's pretty level. 483 00:34:11,010 --> 00:34:13,290 It's hard to see on camera, but it's pretty level. 484 00:34:13,770 --> 00:34:22,430 Now this part, you're going to want to depress this down in, like so, to create a well because you need some place to pour the molten metal into. 485 00:34:22,430 --> 00:34:25,370 So I'm creating like this lip that I can bend backwards. 486 00:34:25,370 --> 00:34:30,290 And it's just this well because the top of the doesn't need to be molded. 487 00:34:30,290 --> 00:34:31,250 That's not important. 488 00:34:31,430 --> 00:34:35,030 So pretty much you do this again and just repeat it on the other side. 489 00:34:36,150 --> 00:34:41,490 So I'm going to take the clay and again soften it up by squishing it. 490 00:34:54,100 --> 00:34:57,820 And you want to make sure that you go above the border here. 491 00:34:57,980 --> 00:35:00,820 You want that lump and then you want to press it down to flatten it out. 492 00:35:00,820 --> 00:35:05,040 Otherwise, if you try to skim it in, you might get an air pocket below. 493 00:35:05,040 --> 00:35:08,780 And when you squish the key in, all the clay moves down and you won't get a good impression. 494 00:35:11,080 --> 00:35:14,940 Okay, so I've pushed it all down in and I still have a bulge. 495 00:35:14,940 --> 00:35:22,560 So now I'm going to work on getting that bulge down so it's not above the plane of the top of the clamshell. 496 00:35:22,660 --> 00:35:24,940 And again, I'm going to fill this void in on the top. 497 00:35:32,320 --> 00:35:34,260 People have asked me if the color of clay matters. 498 00:35:34,260 --> 00:35:35,060 It doesn't. 499 00:35:35,320 --> 00:35:39,020 Literally, if you go on Amazon, one day one color is cheaper than the other color. 500 00:35:39,820 --> 00:35:41,400 So sometimes you'll see this in yellow. 501 00:35:41,400 --> 00:35:43,580 Sometimes you'll see it in green, black, red, blue. 502 00:35:43,580 --> 00:35:44,460 It doesn't matter. 503 00:35:44,680 --> 00:35:47,860 It is literally just whatever's the cheapest I buy. 504 00:35:48,220 --> 00:35:54,340 Because why pay $8 or $5 for red when green is $1.99. 505 00:35:54,960 --> 00:35:59,640 So okay, so I have that pretty well in there. 506 00:35:59,640 --> 00:36:03,480 I'm going to check to make sure I don't have it too too low. 507 00:36:04,040 --> 00:36:05,260 I think I'm good. 508 00:36:05,260 --> 00:36:09,940 Now I'm just gonna again create that well on the top of my thumb, squishing it back. 509 00:36:09,940 --> 00:36:15,840 So I create a lip and when I put these two together, it'll create a pore spout kind of like this that the metal can go down in. 510 00:36:17,160 --> 00:36:28,480 So now the next important part is to cover these two pieces or these two sides in talcum powder, so that when you push the two clays together, and you separate them that they separate and they don't just stick into one big glob of clay. 511 00:36:29,060 --> 00:36:34,700 So you just take a little talcum powder and sprinkle it on the sides here. 512 00:36:35,260 --> 00:36:39,640 And then just take your finger and rub that talcum powder across the top of all the clay. 513 00:36:45,260 --> 00:36:46,540 Just like that. 514 00:36:54,070 --> 00:36:56,070 Check this, it seems a little bulgy. 515 00:36:56,650 --> 00:36:59,750 Now that I've pressed it down, I'm going to put a little more powder on. 516 00:37:00,670 --> 00:37:03,590 Okay, so we have these both sides coated. 517 00:37:03,750 --> 00:37:04,850 They're good to go. 518 00:37:04,850 --> 00:37:06,250 So I'm done with the talcum powder. 519 00:37:06,830 --> 00:37:08,170 I'm done with the clay. 520 00:37:08,870 --> 00:37:11,230 So the next thing we're going to need here is we're going to need the key. 521 00:37:11,870 --> 00:37:16,430 Now it's important that when you press this down that you think about this key as having two halves. 522 00:37:17,350 --> 00:37:19,150 Have one, have two over here. 523 00:37:19,170 --> 00:37:23,390 You don't want to shove the whole key down 100% into one side. 524 00:37:23,450 --> 00:37:32,550 You want to push it down about halfway on one side so that when you put the other clamshell on top, half the keys on one clamshell and half the keys on the other side of the clamshell. 525 00:37:32,710 --> 00:37:46,250 So to start with, I'm just going to place this in here so that the bow of the key, which is right here, is make sure that that's in thick clay, not in the well. 526 00:37:47,030 --> 00:37:49,790 So I want it down far enough that we're good there. 527 00:37:50,210 --> 00:37:55,590 Okay, and then I'm going to press down and rock it back and forth, just trying to get it down about halfway in. 528 00:37:56,290 --> 00:37:58,550 And just lean in and check on it. 529 00:37:58,550 --> 00:38:01,710 Make sure you're about halfway in all the around. 530 00:38:02,590 --> 00:38:05,070 So now you can see the key stuck in halfway there. 531 00:38:05,410 --> 00:38:13,530 Now the next thing to do is take this clamshell, place it on top, and then squeeze these two pieces together. 532 00:38:13,550 --> 00:38:18,130 Now it's suggested that you stand on this, which I'm not going to do because you're not going to see it anyways. 533 00:38:18,250 --> 00:38:21,110 So I'm just going to place my hands on the table and press. 534 00:38:22,310 --> 00:38:27,110 You want to get a nice firm pressure on this and just stand on it. 535 00:38:27,110 --> 00:38:27,750 Put some weight on it. 536 00:38:27,950 --> 00:38:32,070 Give it a second for the clay to move out of the way for the key to come in. 537 00:38:32,230 --> 00:38:36,250 Because remember, you have the warding and all the parts of the key that you need to get up in. 538 00:38:36,570 --> 00:38:37,730 Okay, that should be good. 539 00:38:39,430 --> 00:38:43,030 Now you want to carefully open this, separate it apart. 540 00:38:43,130 --> 00:38:45,210 Don't rock it back and forth because you're gonna mess up the clay. 541 00:38:45,210 --> 00:38:48,630 Just try to get it apart as cleanly as possible, like so. 542 00:38:49,130 --> 00:38:51,430 And we have a pretty decent impression over here. 543 00:38:51,430 --> 00:38:56,070 It looks like the key sunk in a lot on this side, so I'm hoping this all turns out well. 544 00:38:56,870 --> 00:38:59,750 But you saw how the clay came apart without sticking. 545 00:38:59,750 --> 00:39:01,230 That's because we used the talcum powder. 546 00:39:01,310 --> 00:39:03,090 So I'm going to bend this lip back. 547 00:39:03,970 --> 00:39:07,410 I'm going to use the true method of flicking the key out. 548 00:39:07,830 --> 00:39:14,270 The reason we do this is we want to get it out as fast as possible because if you lift it up, it can cause the tip of the key to dig into it. 549 00:39:14,270 --> 00:39:15,990 So we want to get it out as fast as possible. 550 00:39:17,550 --> 00:39:18,810 So there, it's out. 551 00:39:19,210 --> 00:39:21,310 It shot across the room, but that's fine. 552 00:39:21,910 --> 00:39:24,430 So where do we go from here? 553 00:39:24,430 --> 00:39:28,210 So the next step to do is we're going to go ahead and take these two pieces of clamshell. 554 00:39:28,210 --> 00:39:29,250 We're going to put them back together. 555 00:39:30,050 --> 00:39:31,350 And now we have a void. 556 00:39:31,350 --> 00:39:37,870 Now I'm going to open up these lips on the top to make sure that I can see down into where we're about to pour, which I can see fine. 557 00:39:38,330 --> 00:39:40,410 So I'm going to place that into this holder. 558 00:39:40,990 --> 00:39:42,530 And this does two things. 559 00:39:42,710 --> 00:39:45,050 One, it keeps these two pieces tight together. 560 00:39:45,530 --> 00:39:49,890 And two, it makes it so I don't have to hold this in my hands as I pour molten metal over it. 561 00:39:49,890 --> 00:39:54,430 And if I bump it or miss, I'm not going to end up with melted metal all over my hands. 562 00:39:54,810 --> 00:40:01,790 So the next step I'm going to do is I'm going to take out one cube of my Fields metal. 563 00:40:01,790 --> 00:40:05,290 And again, this metal is meant to melt at very low melting points. 564 00:40:05,370 --> 00:40:08,890 So a candle or a lighter works fine. 565 00:40:09,370 --> 00:40:13,390 And one cube is almost absolutely perfect for your average key. 566 00:40:13,390 --> 00:40:16,190 So like a standard Schlage key or Kwikset key. 567 00:40:17,290 --> 00:40:21,930 So I'm going to drop this in the end of the ladle, like so. 568 00:40:22,110 --> 00:40:26,210 And I'm going to try to do my best here to let you see this melt and how fast it goes. 569 00:40:26,210 --> 00:40:28,330 But it's going to be kind of hard to do. 570 00:40:28,330 --> 00:40:29,570 So we'll do our best here. 571 00:40:34,130 --> 00:40:35,370 So I can already see it moving. 572 00:40:35,370 --> 00:40:36,690 So it's already starting to melt. 573 00:40:38,210 --> 00:40:42,070 And as soon as the metal below it starts melting, you get a little bit of liquid metal. 574 00:40:42,450 --> 00:40:45,250 That metal heats up the rest of the cube and it melts really quickly. 575 00:40:45,250 --> 00:40:46,270 So there it goes. 576 00:40:47,050 --> 00:40:49,270 So now I've got to kind of look at it here to verify. 577 00:40:50,210 --> 00:40:51,950 So it just hit completely liquid. 578 00:40:51,950 --> 00:40:55,070 I'm going to go a little bit longer to make sure it doesn't start solidifying on me quite yet. 579 00:40:56,110 --> 00:40:56,750 There we go. 580 00:40:56,750 --> 00:40:57,610 We're good to go. 581 00:40:58,390 --> 00:40:59,710 And now we just pour this metal 582 00:41:04,790 --> 00:41:05,470 down in. 583 00:41:05,470 --> 00:41:09,510 And I'm kind of doing this because I want it to get down in and I want any air bubbles to get out. 584 00:41:10,690 --> 00:41:12,150 But that should be good. 585 00:41:13,450 --> 00:41:14,950 And now we just let it sit. 586 00:41:14,950 --> 00:41:20,170 Now, depending on how long you heat this for... let me bring this in. 587 00:41:20,450 --> 00:41:23,490 This is silicone, so I can put something hot on it and it won't melt. 588 00:41:26,050 --> 00:41:28,690 Depending on how long you heat the metal for, it's going to take longer to cool. 589 00:41:28,690 --> 00:41:33,450 Now this takes quite a bit longer to cool because it's such a low melting point. 590 00:41:33,450 --> 00:41:39,590 If you use woods metal, the toxic stuff, it doesn't take as long to do. 591 00:41:40,150 --> 00:41:45,050 If you watch any of Deviant's videos, you'll see that he uses... his clamshell is actually... 592 00:41:45,050 --> 00:41:49,830 I think it's milled out of aluminum, which if you think about what aluminum is, it's a heat sink. 593 00:41:50,310 --> 00:41:53,610 So that would help awesome to cool the key faster. 594 00:41:53,610 --> 00:41:56,210 Where this is plastic, this isn't going as a heat sink. 595 00:41:56,270 --> 00:41:59,250 So if you can get a metal clamshell, great. 596 00:41:59,490 --> 00:42:00,430 Again, it's not needed. 597 00:42:00,430 --> 00:42:01,870 This is super simple to make. 598 00:42:01,890 --> 00:42:04,810 It's probably like a few dollars worth of plastic in this. 599 00:42:04,850 --> 00:42:06,490 So it works really well. 600 00:42:06,490 --> 00:42:08,570 You don't have to have metal if you've ever seen it. 601 00:42:08,570 --> 00:42:10,470 When I first started, that's why, again, that's what I thought. 602 00:42:10,470 --> 00:42:12,330 I thought, oh, I didn't have a metal clamshell. 603 00:42:12,330 --> 00:42:13,670 How am I supposed to try this? 604 00:42:13,830 --> 00:42:16,270 And when I saw the 3D printed one, it was fantastic. 605 00:42:18,430 --> 00:42:19,690 So I'm watching the top. 606 00:42:19,690 --> 00:42:23,110 I'm kind of shaking it, and I can see that the center is starting to solidify. 607 00:42:23,770 --> 00:42:25,590 But the sides are still jiggly. 608 00:42:25,590 --> 00:42:29,290 And I wish I could tip this to show you, but if I do, that metal might run out. 609 00:42:29,370 --> 00:42:34,030 So it doesn't have to be cooled down to take it out, but it does need to be solidified. 610 00:42:34,350 --> 00:42:36,930 So we're going to finish letting this go here. 611 00:42:36,930 --> 00:42:38,210 I'm just tapping it. 612 00:42:38,390 --> 00:42:44,290 And pretty much what I'm looking for is if the metal is still kind of jello-y on top, or you can see liquid still. 613 00:42:44,290 --> 00:42:47,410 And as soon as I don't see that anymore, then I'm pretty sure we're good to go. 614 00:42:47,990 --> 00:42:51,010 So there's just a few little spots that are still like that down in here. 615 00:42:54,850 --> 00:42:56,370 We're very close now. 616 00:42:57,410 --> 00:43:00,990 Some very, very small spots still jiggling, which means they're cooling off. 617 00:43:01,090 --> 00:43:06,490 And if you open this too early, and it's not solidified down, you're going to have molten metal just running out. 618 00:43:06,490 --> 00:43:09,050 So better to be safe than sorry. 619 00:43:26,520 --> 00:43:28,000 Okay, it looks pretty solidified. 620 00:43:28,000 --> 00:43:36,500 I'm going to give it a couple, like one more minute here, just to cool off a little bit to guarantee it's good all the way down. 621 00:43:37,240 --> 00:43:42,140 And when we pull this out, you may or may not see some gaps, some air gaps, that's fine. 622 00:43:42,140 --> 00:43:43,540 The key can still work. 623 00:43:43,540 --> 00:43:47,800 The important part, obviously, is the bidding of the key and the warding. 624 00:43:48,040 --> 00:43:49,860 But if there's holes in the warding, we're fine. 625 00:43:49,860 --> 00:43:55,740 If there's holes in the bidding, then we have problems because there might make a dip where it won't lift the pins to the proper height. 626 00:43:56,300 --> 00:43:57,440 Okay, I think we're good. 627 00:43:57,560 --> 00:43:59,540 So I'm gonna go ahead and take the base off this. 628 00:44:00,980 --> 00:44:03,120 Okay, and then we're going to split this open. 629 00:44:05,120 --> 00:44:07,720 And it looks like we have a good casting. 630 00:44:07,760 --> 00:44:10,880 So let's see, well, I've got to keep it in the light so you can see it here. 631 00:44:11,280 --> 00:44:12,420 So there's the key. 632 00:44:13,020 --> 00:44:16,180 And you can see, we just, we don't have the entire top of the head. 633 00:44:16,220 --> 00:44:19,020 We have just enough, though, that we can grab onto it and turn it. 634 00:44:19,020 --> 00:44:21,740 And we can see all the key in here, we can see the warding. 635 00:44:21,960 --> 00:44:23,720 So let's go ahead and peel this out. 636 00:44:25,300 --> 00:44:27,660 So we've got a little clay on the tip, that's not a big deal. 637 00:44:27,660 --> 00:44:28,700 Just pull it off. 638 00:44:28,840 --> 00:44:32,000 So you can see there's a lot of flashing around here and stuff like that. 639 00:44:32,000 --> 00:44:33,100 But again, none of this matters. 640 00:44:33,100 --> 00:44:35,760 And if that bothers you, it's so thin and soft. 641 00:44:35,760 --> 00:44:37,260 Just bend it back. 642 00:44:37,480 --> 00:44:43,060 Okay, now we have a little bit of flashing, it looks like, around this bidding area. 643 00:44:44,340 --> 00:44:49,300 But again, I'm not overly concerned with that because of the way the cut is. 644 00:44:49,300 --> 00:44:52,060 I can just kind of bend that flashing out of the way. 645 00:44:52,580 --> 00:44:54,820 So I think we're completely good to go here. 646 00:44:55,220 --> 00:44:56,980 So now it's the moment of truth. 647 00:44:57,260 --> 00:44:59,100 Because, you know, demos fail. 648 00:45:00,180 --> 00:45:01,120 What's new? 649 00:45:01,300 --> 00:45:03,620 So let's place it into the lock. 650 00:45:04,040 --> 00:45:05,080 It goes into the lock. 651 00:45:05,080 --> 00:45:05,800 That's good news. 652 00:45:05,800 --> 00:45:07,200 Now we'll open the lock. 653 00:45:08,020 --> 00:45:09,020 There it goes. 654 00:45:09,020 --> 00:45:10,740 So there was that little bit of flashing. 655 00:45:10,800 --> 00:45:12,540 So when I first started turning it, it caught. 656 00:45:12,540 --> 00:45:15,940 But as soon as I turned that flashing bent out of the way, we're good to go. 657 00:45:15,940 --> 00:45:19,600 So now we have a fully working duplicate of that key. 658 00:45:19,840 --> 00:45:24,760 So like when we talked about with 3D printing of this key, this key is very bendable. 659 00:45:24,760 --> 00:45:25,700 It's very soft. 660 00:45:25,860 --> 00:45:30,820 But I can take a pair of calipers or again, I can take the key depth measurement guide here. 661 00:45:31,820 --> 00:45:33,460 Let's see, quick set. 662 00:45:33,700 --> 00:45:34,700 Where'd you go? 663 00:45:35,320 --> 00:45:35,980 There. 664 00:45:36,020 --> 00:45:37,760 And I can take this now. 665 00:45:38,540 --> 00:45:42,900 I can get the measurements from this on my own time because I have a duplicate of this key now. 666 00:45:43,180 --> 00:45:45,080 Take my own time to get my measurements. 667 00:45:45,360 --> 00:45:54,100 I can 3D print this key and take this to a key me or a key duplication, unmanned key duplication machine and have a permanent copy of this key forever. 668 00:45:54,100 --> 00:45:56,640 If you only need to get them once or twice, this will work. 669 00:45:56,640 --> 00:45:59,020 Again , this will last for a while. 670 00:46:00,680 --> 00:46:03,940 So I'm making a mess, but like that, it worked perfectly. 671 00:46:04,880 --> 00:46:08,020 However , I want to show that this key is soft. 672 00:46:08,040 --> 00:46:10,540 So I'm going to bend it here just to show you. 673 00:46:11,960 --> 00:46:14,420 That doesn't take a lot of power to bend that. 674 00:46:14,680 --> 00:46:17,200 You can see it's completely bent key now. 675 00:46:19,040 --> 00:46:22,960 But if I lay it on a table, I flatten it back out. 676 00:46:23,740 --> 00:46:25,520 We're still, we should be good to go. 677 00:46:25,520 --> 00:46:26,740 Let me just test it. 678 00:46:27,640 --> 00:46:29,740 Yep, we still get an open. 679 00:46:29,960 --> 00:46:38,980 So that is duplicating key with casting a key and melting metal and casting it in clay. 680 00:46:38,980 --> 00:46:45,380 So let me flip back to my other screen here and we'll continue on. 681 00:46:46,340 --> 00:46:47,200 Okay. 682 00:46:47,200 --> 00:46:48,880 So time to get some credit here. 683 00:46:48,880 --> 00:46:51,660 So first of all, we have the keygen.co. 684 00:46:51,660 --> 00:46:54,280 There's the GitHub repository for that. 685 00:46:54,400 --> 00:47:00,160 And below that is the talk I specifically mentioned earlier where keygen.co came from. 686 00:47:00,160 --> 00:47:07,560 It was from DEF CON 21, key decoding and duplication attacks for the YouTube video of that talk. 687 00:47:07,800 --> 00:47:11,980 And that was done by David Lawrence, Eric Van Albert, and Robert Johnson. 688 00:47:12,540 --> 00:47:13,900 Big shout out to them. 689 00:47:14,100 --> 00:47:17,980 I believe the tool is also available as just a Python script you can download and run locally. 690 00:47:17,980 --> 00:47:19,740 So you don't need to rely on their website. 691 00:47:19,820 --> 00:47:21,560 The website is just super quick and easy. 692 00:47:22,360 --> 00:47:25,460 Obviously, I have to give a massive shout out to Devin Olaf. 693 00:47:26,520 --> 00:47:29,200 I didn't think I could do key duplication before I saw his video. 694 00:47:29,200 --> 00:47:35,920 After watching that video, he gave an in-depth, very, very detailed way of how to do key duplication. 695 00:47:35,920 --> 00:47:40,100 And the fact that he mentioned you could use 3D printed clamshells is what even sent me down this path. 696 00:47:40,140 --> 00:47:42,900 So check out his website and check out his Twitter. 697 00:47:44,160 --> 00:47:48,220 And then the link below that is the original key molding and casting video. 698 00:47:48,220 --> 00:47:55,240 And again, a big shout out to Boris for the 3D printed clamshell that he makes freely available to the world on Thingiverse. 699 00:47:55,380 --> 00:47:59,580 If you go back in the slides, you will definitely see the link to that. 700 00:47:59,580 --> 00:48:04,760 So I want to thank you guys for letting me talk to you today about key duplication. 701 00:48:05,080 --> 00:48:08,140 If you have a 3D printer, please give this a try. 702 00:48:08,140 --> 00:48:08,860 It's super simple. 703 00:48:08,860 --> 00:48:14,180 Just enter a random bidding code, if you will, just to test it out and print a 3D key just so you can see how easy it is. 704 00:48:14,180 --> 00:48:18,520 If you have your own key, go ahead and duplicate your own key just to test it out and see how well it works. 705 00:48:18,780 --> 00:48:20,820 It's super simple using thekeygen.co. 706 00:48:20,860 --> 00:48:26,640 If you have any questions, any comments, or anything else you want to talk about, again, hit me up at Twitter, at Vareli. 707 00:48:26,640 --> 00:48:28,540 It's the easiest way to find me. 708 00:48:29,460 --> 00:48:30,420 And then questions. 709 00:48:30,420 --> 00:48:32,960 If you have questions, obviously I'll be sticking around. 710 00:48:32,960 --> 00:48:34,540 You can find me in the Discord channel. 711 00:48:34,540 --> 00:48:41,040 I'll be available to answer any questions you might have, details about printing, molding and casting, anything like that. 712 00:48:41,160 --> 00:48:44,600 So again, I want to thank you for taking the time to watch this presentation. 713 00:48:44,640 --> 00:48:52,080 I hope you have a great DEF CON safe mode and stick around at the Lockpicking Village with Tool for all the other amazing talks that are coming up. 714 00:48:52,280 --> 00:48:53,480 Thanks a lot.