VingCard Smart Cards Explained: The 2K & 4K AES Credential Family

A VingCard smart card is a 13.56 MHz contactless credential that stores a guest's or staff member's access rights inside an AES-secured data structure, for use with ASSA ABLOY Global Solutions hotel locks. "Smart" distinguishes it from VingCard's older, unencrypted memory cards: a smart card authenticates cryptographically with the lock instead of merely presenting a readable serial. It is the credential family behind VingCard's Signature RFID locks, and it comes in two memory tiers, 2K and 4K.

VingCard has produced electronic hotel keys since installing the first recodable electronic keycard lock at the Westin Peachtree Plaza in Atlanta in 1978, and ASSA ABLOY reintroduced Vingcard as its primary hospitality brand in 2024. The smart card is the current guest-and-staff credential in that line, managed by Visionline on-premise or Vostio in the cloud.

The difference between a VingCard 2K and 4K smart card is on-card memory, which in turn sets how many applications one card can carry. Both are 13.56 MHz ISO/IEC 14443-A cards with the identical 128-bit AES security model — the tier is a capacity choice, not a security choice.

A VingCard smart card stays secure through 128-bit AES mutual authentication with per-card diversified keys: the card and lock each verify the other before any data moves, and every card is issued with different derived keys. On the AES-secured guest tier VingCard adopted in 2024, that authentication is reinforced by a message authentication code (CMAC) on commands and responses and an encrypted radio channel, defending the exchange against replay and interception.

The security advantage is structural rather than cosmetic. Because the access data is protected by a cryptographic exchange, it is not skimmed the way a fixed 125 kHz proximity number is, and per-card key diversification means recovering one card does not compromise the estate. In practical hospitality terms, credential clone-resistance depends more on how a property manages its site keys than on the chip class printed on a datasheet.

The clearest way to tell whether a VingCard property runs smart (AES) or legacy cards is by the software and encoders it uses, not by looking at the plastic. Properties on the AES-secured guest credential are typically running current Visionline or Vostio with encoders provisioned for the AES tier; properties still on the older, unencrypted memory cards issue a 13.56 MHz card described as having "no sector crypto" — no per-sector encrypted authentication.

Because Signature RFID locks are multi-technology 13.56 MHz readers, many live properties are mid-migration and accept both the AES smart credential and legacy guest cards at the same door. If you are ordering cards, the reliable check is to confirm with your VingCard back end which credential tier your encoders are issuing, then match the blank stock to that.

VingCard smart cards are encoded and revoked centrally through the property's back end — Visionline on-premise or Vostio Access Management in the cloud — and read at the door by Signature RFID locks. The Signature reader is documented to support ISO/IEC 14443 A and B and ISO/IEC 15693 plus mobile access over BLE and NFC, so the same lock hardware carries the physical smart card and phone-based keys.

ASSA ABLOY's stated direction is to move backend management from on-premise Visionline to cloud Vostio, which adds remote key issuance, third-party and property-management integrations, and mobile keys without changing the reader. A smart card, whether 2K or 4K, plugs into that same issuance and revocation workflow.

VingCard frames the smart credential as a transition rather than a forced re-card. In its May 2024 announcement of AES credential compatibility, Richard Eastburn, Vingcard's Sr. Director and Head of Product Management, said the move lets "Vingcard lock solutions continue to represent ultimate guest peace of mind," while an industry executive described it as "a more secure contactless way to transition away from legacy access technologies."

For a property weighing the change, the smart card family (2K and 4K) is the upgraded end-state, and because Signature locks read old and new credentials together, a hotel can move gradually — keeping legacy 13.56 MHz guest cards in service at the same doors during the changeover.

VingCard smart cards coexist with phone-based keys rather than being replaced by them. The Signature RFID locks that read the 2K and 4K smart cards also support mobile access over BLE and NFC, issued through Vostio, so a guest can receive a phone key while staff continue to carry physical smart cards — both are validated by the same reader.

For a property, this means the smart card and the mobile key are two front ends to the same access-management system. Vostio issues, updates, and revokes either credential centrally, and the choice between a plastic smart card and a phone key is operational — cost, guest preference, and device support — not a change to the lock hardware. Mobile keys are added on top of the existing Signature readers.