Raspberry Pi Door Opener: Build a Secure RFID and Relay Access System

Project Overview & Hardware Decision Path

Building a Raspberry Pi door opener bridges the gap between embedded logic and physical security. Unlike microcontrollers (ESP32/Arduino), the Raspberry Pi offers a full Linux environment, making it ideal for logging access attempts, integrating with MQTT home automation, or snapping photos of denied entries. This guide targets the Raspberry Pi 4 Model B (4GB) running Raspberry Pi OS (Bookworm), as its native SPI0 pinout remains the most stable for RFID modules compared to the Pi 5's multiplexed peripheral routing.

Before wiring anything, you must select the correct locking mechanism. Choosing the wrong lock type is a critical safety and security failure. Use the decision tree below to pick your hardware.

Hardware BOM & Pin Mapping

The RC522 operates at 3.3V logic, which perfectly matches the Raspberry Pi's GPIO levels. Do not use 5V-tolerant level shifters here; direct wiring is required for stable SPI communication.

GPIO Pin Mapping Table

Wiring & Installation Steps

1. Enable SPI Interface: Open the terminal and run sudo raspi-config. Navigate to Interface Options > SPI and select Yes. Reboot the Pi.
2. Wire the RC522: Connect the SPI pins exactly as mapped above. Double-check that the 3.3V pin is used. Feeding 5V into the RC522 VCC will instantly fry the module's internal voltage regulator.
3. Wire the Relay and Lock: Connect the 12V PSU positive terminal to the Common (COM) terminal on the relay. Connect the Normally Open (NO) terminal to the positive wire of the electric strike. Connect the strike's negative wire directly to the PSU negative terminal.
4. Install the Flyback Diode: Solder the 1N4007 diode directly across the electric strike's two wire terminals. The silver stripe on the diode must point toward the positive (12V) side. This clamps the inductive voltage spike when the relay opens, preventing it from arcing across the relay contacts or feeding back into the Pi's 5V rail.
5. Verify with a Multimeter: Before connecting the Pi, power the 12V PSU and measure across the relay COM and NO terminals. It should read open circuit (OL). Manually jump the relay IN pin to 5V; you should hear a click, and the multimeter should read near 0 ohms.

Python Control Code

The following script uses the mfrc522 library. It targets the Pi 4 running Bookworm. Because Bookworm deprecates RPi.GPIO in standard virtual environments, install the dependencies via the system package manager or use the --system-site-packages flag when creating your venv.

Terminal setup:
sudo apt update && sudo apt install python3-rpi.gpio python3-spidev
pip3 install mfrc522

#!/usr/bin/env python3
import time
import sys
import RPi.GPIO as GPIO
from mfrc522 import SimpleMFRC522

# --- Pin Definitions ---
RELAY_PIN = 24  # BCM GPIO 24 (Physical Pin 18)
UNLOCK_DURATION = 3  # Seconds to keep the door unlocked

# --- Authorized UIDs ---
# Add your scanned RFID tag UIDs here as integers
AUTHORIZED_UIDS = [
    847392019384,
    192837465102
]

def setup_hardware():
    GPIO.setmode(GPIO.BCM)
    GPIO.setwarnings(False)
    GPIO.setup(RELAY_PIN, GPIO.OUT)
    GPIO.output(RELAY_PIN, GPIO.LOW)  # Ensure relay is off (door locked)

def unlock_door():
    print('[ACCESS] Door unlocked.')
    GPIO.output(RELAY_PIN, GPIO.HIGH)
    time.sleep(UNLOCK_DURATION)
    GPIO.output(RELAY_PIN, GPIO.LOW)
    print('[STATUS] Door relocked.')

def main():
    setup_hardware()
    reader = SimpleMFRC522()
    print('[SYSTEM] Raspberry Pi Door Opener initialized. Scan tag...')
    
    try:
        while True:
            # read() blocks until a tag is detected
            uid, text = reader.read()
            
            if uid in AUTHORIZED_UIDS:
                print(f'[AUTH] Valid UID: {uid}')
                unlock_door()
            else:
                print(f'[DENIED] Unknown UID: {uid}')
            
            # Debounce delay to prevent double-reads
            time.sleep(1.5)
            
    except KeyboardInterrupt:
        print('\n[SYSTEM] Shutting down gracefully.')
    except Exception as e:
        print(f'[ERROR] Unexpected failure: {e}')
    finally:
        GPIO.cleanup()
        sys.exit(0)

if __name__ == '__main__':
    main()

Debugging: SPI Errors & Relay Failures

When your Raspberry Pi door opener fails to read tags or trigger the lock, do not guess. Follow this exact diagnostic sequence.

The First Three Things to Check

1. SPI Interface State: Run ls -l /dev/spidev*. If it returns 'No such file or directory', SPI is disabled in raspi-config or your /boot/firmware/config.txt is missing dtparam=spi=on.
2. 3.3V Rail Continuity: Use a multimeter to measure voltage between the RC522 VCC and GND pins. It must read exactly 3.3V. If it reads 0V, your Pi's polyfuse may have tripped, or your jumper wire is broken.
3. Flyback Diode Orientation: If the Pi reboots randomly when the door locks, the inductive kickback is browning out the 5V rail. Check that the 1N4007 diode stripe faces the 12V positive wire.

Exact Error Strings & Ranked Causes

Extending or Simplifying the Build

Depending on your deployment environment, you may need to scale this project up for enterprise features or down for basic reliability.

How to Simplify (High Reliability, Low Code)

If the RC522 SPI library is causing persistent OS-level conflicts, swap the RFID reader for a 125kHz Wiegand Keypad (e.g., HID Compact). Wiegand outputs simple data pulses. You can wire the Wiegand D0/D1 lines directly to the Pi's GPIO and use the wiegand Python library, which is vastly more stable than SPI bit-banging. Alternatively, for a purely offline setup, bypass the Pi entirely and use a $15 standalone 12V RFID access controller board.

How to Extend (Smart Home & Security)

• MQTT Integration: Add the paho-mqtt library to the Python script. Publish an access_granted payload to your Home Assistant broker to trigger hallway lights when the door unlocks.
• Visual Logging: Connect a Raspberry Pi Camera Module 3. Use the libcamera-still command via Python's subprocess to snap a photo every time an Unknown UID is scanned, saving it to a timestamped folder for security review.
• Exit Button: Wire a physical Normally-Open pushbutton between GPIO 17 and GND. Add an interrupt in the Python code to trigger unlock_door() when pressed, allowing people to exit without scanning a tag.

For a robust, secure deployment on a standard wooden exterior door, stick to the HES 1001 Fail-Secure Electric Strike paired with the Pi 4 and optocoupler-isolated relay. This combination guarantees the door remains physically secure during power outages while providing the full logging and smart-home capabilities of a Linux-based access controller.