Melbourne CBD has one of the highest concentrations of short-stay rental apartments in Australia. The postcode 3000 area — which includes the CBD proper, Docklands, East Melbourne, and Southbank — has for years been a major market for Airbnb and short-stay platforms. The combination of a visitor economy drawing tourism to Federation Square, the restaurant precinct, Crown Casino, and the Melbourne sporting calendar, plus a residential building stock that’s overwhelmingly apartments, has made CBD short-stay hosting a significant segment of the local property market.
The short-stay rental landscape in Melbourne CBD shifted significantly with regulatory changes that came into effect in early 2025 and are now fully in force as of 2026. Both changes have direct implications for how hosts manage access to their properties — which is where a locksmith enters the picture.
This guide explains those regulations, the access security challenges specific to Melbourne CBD short-stay apartments, and what hosts need to think through with regard to key handover, lockboxes, re-keying, and managing guest lockouts in a building environment that may have its own restrictions on all of these.
The Victorian Short-Stay Levy and OC Ban Powers: Now in Full Effect
The Victorian Short-Stay Levy
Since 1 January 2025 — now over a year into operation — all short-stay accommodation in Victoria attracting stays under 28 nights is subject to a 7.5% levy on the booking amount. Platforms like Airbnb remit the levy automatically for bookings made through the platform; hosts managing direct bookings are responsible for remitting the levy themselves. Principal place of residence stays are exempt — if you host short-stay guests in your own home while you’re living there, the levy doesn’t apply.
For Melbourne CBD apartment investors who operate apartments as full-time Airbnb properties — common in the Southbank, Docklands, and Swanston Street markets — this levy is an additional compliance and cost consideration. But it’s the second change that has the more direct locksmith implication.
Owners Corporation ban power
Since early 2025, a Victorian Owners Corporation has been able to vote at a general meeting to ban short-stay accommodation in their building. The vote requires a 75% majority of lot owners. The ban can prohibit short-stay rentals across all lots in the building, with a carve-out: the ban cannot apply to an owner’s own principal place of residence. An investor who owns an apartment in the building but does not live there cannot use the principal-place exemption.
Multiple Melbourne CBD apartment buildings — including several in Southbank and the Docklands NewQuay precinct — have either already held such votes or have notified residents that an OC meeting to consider a ban is scheduled. The January 2025 change gave OCs a tool they previously lacked, and those buildings with high short-stay concentrations (and complaints from long-term residents about guest behaviour, noise, and security) are actively using it.
For a host considering a new short-stay operation in a Melbourne CBD building, or an existing host reviewing their operating environment, checking whether the building’s OC has passed or is considering a ban is now a necessary due-diligence step.
The Key Handover Challenge in Melbourne CBD Buildings
For a short-stay host in a Melbourne CBD apartment, key handover is a logistics challenge that doesn’t exist in the same form for a standalone property host. There are three common approaches, each with constraints specific to the CBD building environment.
Physical key handover
Host (or property manager) meets guest in person, hands over the physical key and any building access credentials (FOB, key card). The coordination overhead is significant — short-stay guests often arrive late, arrive early, or provide imprecise ETAs after international flights. The host or property manager needs to be physically present or arrange a contact who can be. In a Melbourne CBD building, this often means the host’s property manager or a local co-host acting as the in-person contact.
Lockbox (key safe)
A secure box containing the key, mounted somewhere accessible, opened by the guest with a code provided by the host. This is the preferred solution for convenience — the host can manage the code remotely, change it between guests, and eliminate the personal handover requirement. The challenge in a Melbourne CBD apartment building: where to mount the lockbox.
The common property rules of Melbourne CBD apartment OCs frequently prohibit fixtures attached to the external wall of the building, the corridor walls adjacent to apartment doors, or the lobby area. A lockbox mounted to the corridor wall outside an apartment door is attached to common property, and in most CBD buildings this requires OC approval. Some OCs explicitly ban lockboxes. Some tolerate them. Some have no stated policy and individual body corporate managers have different interpretations.
A host who installs a corridor-mounted lockbox without OC approval risks being required to remove it by the OC manager — potentially with notice served while guests are already checked in. The safe approach is to check with the OC manager or building manager before installing any external fixture. If OC approval isn’t available, physical handover or the third option below becomes the approach.
Smart lock / digital access
A smart lock on the apartment door that allows guest access via a unique PIN or NFC credential issued specifically for the guest’s stay and set to expire automatically at checkout. This eliminates physical key management entirely. As covered separately, smart lock installation in a Melbourne CBD apartment building is subject to OC rules — a retrofit adaptor to the inside face of the existing cylinder is the most compliant approach, but any smart lock that involves modification to the common-property face of the door (external keypad, new external hardware) may require an OC application. Check before installing.
Pro Tip: For a Melbourne CBD Airbnb host navigating OC lockbox or smart lock restrictions, the retrofit smart lock adaptor — fitted entirely to the inside face of the existing cylinder, with no modification to the external door hardware or common-property walls — is the approach most likely to be compliant without a formal OC application. Confirm with your specific building’s OC manager before installation.
Re-Keying Between Guests: Why and When to Do It
A security-conscious short-stay host re-keys the apartment cylinder between guest stays. This is not a standard practice at hotels (hotel lock systems use electronically re-codeable credentials for this purpose), but in an apartment with a physical cylinder lock, it is the only way to ensure that a departing guest has no ongoing physical key access to the property.
For a Melbourne CBD apartment operating as a frequent short-stay rental, the re-keying frequency can be high — several times per month if the apartment is fully occupied on a standard short-stay booking pattern. Each rekey involves a locksmith visit to service the cylinder and cut new keys. For a host operating multiple CBD apartments on a short-stay basis, the rekey cost at full occupancy frequency can be significant.
The practical alternative is a restricted keyway cylinder, which prevents key duplication: even if a departing guest retains a key (whether by oversight or intent), that key cannot be copied at any hardware store. A restricted keyway does not prevent a guest from simply using the retained key to re-enter — but it bounds the risk, and combined with a property management protocol for key return verification, reduces the re-keying frequency to genuine change-of-lock events (suspected retained keys, cylinder damage) rather than routine guest turnover.
The best approach for a high-frequency Melbourne CBD short-stay apartment from a locksmith’s perspective: smart lock with time-expiring guest credentials where OC rules permit, or restricted keyway cylinder plus restricted key protocol where physical keys must be used. The combination minimises both re-keying costs and the retained-key risk.
Guest Lockouts in a CBD Short-Stay Apartment: The 2am Scenario
A guest lockout in a short-stay apartment is a category of emergency locksmith call that has its own specific complications. In a residential apartment, the identity verification step relies on the resident being able to demonstrate they belong to the property. A guest in a short-stay apartment — who is not named on the lease, who may not have any document showing the address as their residence, who may be an overseas visitor with only a foreign passport and a booking confirmation — needs a different verification approach.
Good practice for Melbourne CBD Airbnb hosts regarding guest lockouts:
Provide the guest with the property manager’s and locksmith’s contact details in the welcome information.
Don’t leave a guest to discover these numbers at 2am. If they’re locked out, they need to be able to reach someone immediately.
Ensure the locksmith you’ve arranged for the property has your authorisation to attend guest lockouts on your behalf.
A locksmith opening a door for a guest who can’t prove residency needs a third-party authorisation — you as the host confirming by phone or pre-authorisation letter that the person at the door is legitimately your guest. If you’re overseas or asleep at 2am Melbourne time, your property manager needs to hold this authorisation.
Make the booking confirmation accessible.
A guest with access to their Airbnb booking confirmation on their phone — showing the address and check-in dates — provides useful supporting evidence for a locksmith attending a guest lockout, combined with the host or property manager’s phone authorisation.
The guest lockout scenario in a building where the OC has banned lockboxes and there’s no smart lock adds an additional layer: the only key backup is with the property manager or host, who may not be locally available. This is exactly the operational gap that a short-stay locksmith arrangement — a pre-agreed relationship between host and locksmith — addresses before it becomes an emergency.
Pro Tip: Establish a relationship with a Melbourne CBD locksmith before you need one for a guest lockout. Provide the locksmith with a letter of authorisation confirming they may attend the property for guest lockouts with booking confirmation as supporting evidence. This makes a 2am guest lockout a fast, frictionless service call rather than a complicated identity negotiation.
What Happened on Swanston Street: A Short-Stay Host Scenario
I was called at 1:15am to a Swanston Street apartment — a host-managed short-stay apartment on the 16th floor of a mixed-use building, retail ground floor, residential from the 8th floor up. The guest, a couple visiting from Singapore, had left the key inside the apartment when they went to dinner on Southbank, and realised when they returned at 1am that the spare key in the lockbox outside the building lobby had been removed earlier in the week by the OC manager after a notice about compliance with the OC’s common-property fixtures rule.
No lockbox available. Host: time zone in Singapore (10pm local time when I was called). Property manager: after-hours line, answering service, message taken.
Verification: the guests had their Airbnb booking confirmation on a phone, showing the address and their check-in date. The host was contactable via WhatsApp — the guests woke them at 10pm Singapore time. The host messaged me directly to confirm the guests were legitimate and authorised my entry.
Opened the apartment. The OC lockbox issue was raised with the host the next morning — they subsequently confirmed with the OC manager whether a discreet lockbox in a less conspicuous location on private (not common) property was acceptable, and installed a replacement with OC confirmation. Smart lock retrofit on the inside cylinder installed the following week.
That is a common Melbourne CBD short-stay scenario in the current regulatory environment — and it resolves most smoothly when the host has thought through the access chain before the guest arrives.