Gun Safes and Lockboxes: What to Actually Buy

On July 9, 2026, the Consumer Product Safety Commission recalled 9,100 biometric gun safes. The published remedy was blunt: stop using the fingerprint reader, take the batteries out, and use the key instead (CPSC recall 26-607).

That was the seventh recall of its kind since October 2023. Added up, they cover more than 320,000 safes whose fingerprint locks could be opened by people the owner never enrolled.

None of that is on the product page. If you're buying your first storage for a gun, you're being asked to judge a security product using nothing but marketing copy, and the marketing copy is pointing you at exactly the feature that keeps failing.

This guide covers what Oregon law actually requires (a lower bar than most people assume), what the security ratings mean when a product carries one, and how to check a specific model before you pay for it.

What actually matters when you're starting out?

Two questions, and they have separate answers.

Does it satisfy the law? In Oregon this is a low bar, and almost any locking box clears it. Legal compliance is worth understanding, but it is not a security rating and it was never meant to be one.

Does it resist someone actually trying to get in? This is the question the law doesn't ask. It's answered by construction, by how the box is anchored, and by whether an independent lab has attacked the thing and published the result.

There's a third thing sitting across both of those: how fast you can open it. A gun kept for home defense that takes forty seconds to reach isn't doing the job you bought it for, and a gun left out so it's reachable isn't stored. Every product in this category is some negotiation between those two, and where you land depends on what the gun is for.

One number is worth holding onto while you shop. In a 2025 review in BMC Pediatrics, 99% of unintentional firearm injury deaths among children aged 0–5 between 2003 and 2021 involved a firearm stored both unlocked and loaded (Miller et al., BMC Pediatrics, 2025, drawing on the National Violent Death Reporting System). Locked is the variable that moves. Which lock is a distant second question, but it's the one this guide is about.

The options, explained

Trigger locks and cable locks

A cable lock threads through the action or the magazine well and physically blocks the gun from closing or firing. A trigger lock clamps over the trigger guard. Most new handguns ship with one in the box, and they're often free from your county health department or sheriff.

They satisfy Oregon's storage requirement on their own. They're also the least secure option available, because the lock is attached to the gun rather than putting a barrier between the gun and a person. Anyone who picks up the firearm has the lock in their hands and unlimited time with it.

Reasonable as a backstop, as a second layer inside a container, or for a gun you're transporting. Not a storage plan by itself if there are kids in the house.

Portable lock boxes

A steel or aluminum box with a keypad, a key, or a dial, usually sized for one or two handguns, often with a steel cable to tether it to a bed frame or a car seat rail.

The good version of this is genuinely useful: it's the only category that travels, and a tethered lock box in a vehicle is a real answer to a real problem. The bad version is a thin stamped-metal shell with an unrated lock, and there's no way to tell them apart from the photos.

The cable is the weak point people underestimate. A tether stops a grab-and-go; it does not stop someone with ten minutes and a pair of bolt cutters.

Quick-access pistol safes

Built for one job: get a defensive handgun into your hand in a few seconds, in the dark, without a key. Entry is by keypad, by a mechanical pushbutton lock, by RFID fob, or by fingerprint.

This is the category with the recall problem. Every one of the seven CPSC recalls since 2023 was a biometric lock that opened for people who weren't enrolled. The largest, in June 2024, covered about 133,370 Sanctuary and Sports Afield safes after 77 reports of the safe being opened by unauthorized users (CPSC). The 2023 Fortress recall covered 61,000 units after 39 reports of safes opening to unpaired fingerprints, and CPSC noted a lawsuit alleging a 12-year-old boy died from a firearm obtained from one of them (CPSC).

Here is the full list, so you can check it against anything you already own or are about to buy.

That totals 323,990 units, and BBRKIN is on the list twice — recalled in February 2024, recalled again in July 2026. Every entry has the same hazard language: the biometric lock can be opened by unauthorized users.

The category isn't the problem. Fast access is a legitimate need and these solve it. The fingerprint reader is the problem, and it's optional.

Full-size safes

A heavy steel cabinet, bolted to the floor or a stud wall, holding long guns and everything else. This is where the one meaningful independent security rating lives.

That rating is UL 1037 Residential Security Container, usually printed as "RSC" on a label inside the door. It comes in attack levels. At level one, a container has to withstand a five-minute attack by one technician using common hand tools such as drills, screwdrivers and hammers; level two raises that to a ten-minute attack by two technicians using more aggressive tools, including picks and high-speed carbide drills (UL Solutions).

Read the level-one bar carefully, because it's a real one and a modest one. One person, hand tools, five minutes. It's the difference between a safe and a locked closet, not the difference between a safe and a bank vault, and it's considerably less than most people picture when they see "UL rated" on a box. If a label says RSC without naming a level, it's worth asking which one. A safe that isn't bolted down is a different problem again, because an unanchored safe can be carried out and opened somewhere with more time and better tools.

A gun room

Oregon names this one specifically, and it's a legitimate option that costs nothing if you already have the room. It's a closet or interior room with every entrance on a tamper-resistant lock, kept locked whenever nobody's in it. See the legal section below for the statutory definition, which is more particular than "a closet with a lock on it."

What should you avoid?

A fingerprint reader as the only way in. Seven recalls, more than 320,000 units, and in the two most recent the manufacturer's own remedy was to stop using the biometric feature and fall back to the key. Treat a fingerprint reader as a convenience layered on top of a mechanical or keypad lock, and buy nothing that has no second method of entry. If a safe you already own is on that list, CPSC's advice is to pull the batteries and use the key until you get the repair kit.

Unrated boxes sold on the strength of the photo. If a product doesn't state a standard it was tested against, assume it wasn't tested. Absence of a UL mark isn't proof a box is flimsy, but it does mean nobody outside the company has ever tried to break in and written down what happened.

Fire ratings that came from the company selling the safe. The independent fire standard is UL 72, which measures whether the interior stays under a defined temperature during a furnace test. Many residential gun safes carry a fire number generated by the manufacturer's own testing or by a lab working to a proprietary protocol rather than to UL 72, and those numbers aren't comparable to each other or to a UL rating. If fire is a reason you're buying, look for the standard by name.

Buying before you check the recall database. CPSC publishes every recall at cpsc.gov/recalls, searchable by product and brand. It takes about a minute and it's the single highest-value step in this whole process. California's DOJ also maintains a public roster of firearm safety devices that passed its testing requirements (roster search). That's a California legal requirement and not an Oregon one, but as a free way to check whether a specific model was ever independently tested, it works from anywhere.

Storing ammunition loose in the same unsecured space. Separate storage doesn't have to be elaborate. It does have to be a decision you made on purpose.

What does Oregon require?

Oregon's storage rule is ORS 166.395, enacted in 2021 as part of the Cindy Yuille and Steve Forsyth Act. An owner or possessor has to secure a firearm at all times it isn't carried by or under the control of an authorized person, using one of three methods: an engaged trigger or cable lock, a locked container, or a gun room (ORS 166.395(1)(a)).

Now read how the statute defines "container": "a box, case, chest, locker, safe or other similar receptacle, including, within a vehicle, a glove compartment, enclosed trunk or center console, equipped with a tamper-resistant lock" (ORS 166.392(2); chapter text at oregonlegislature.gov).

That's the whole definition. No steel gauge, no rating, no test. A $40 box and a $2,000 safe are the same object in the eyes of the statute. Oregon's law is a floor, not a security standard. That's exactly why a recalled biometric safe could be fully compliant with Oregon law and still open for a stranger's finger.

Two further points from the same statute worth knowing:

A firearm is not considered secured if the key or combination is readily available to someone you haven't authorized, or if it's a handgun left unattended in a vehicle in view from outside (ORS 166.395(1)(b)). Where you keep the key is part of the storage decision, not an afterthought.

A "gun room" has a specific statutory meaning: an area enclosed by walls, a floor and a ceiling, including a closet, with all entrances secured by a tamper-resistant lock and kept locked whenever it's unoccupied (ORS 166.392(5)).

On consequences, the statute is layered. A violation is a Class C violation, carrying a maximum fine of $500 (ORS 153.018). It rises to a Class A violation, maximum $2,000, if a minor obtains the unsecured firearm and the owner knew or should have known a minor could get to it. Each firearm counts as a separate violation. And if a firearm obtained because of a storage violation is used to injure a person or property within two years, the statute makes the violation negligence per se in a civil suit, meaning the owner can't defeat the presumption by showing they acted reasonably. The statute carves out injuries resulting from lawful self-defense or defense of another, and firearms taken by someone unlawfully entering a dwelling (ORS 166.395(3)–(4)).

The fine is not the exposure. The civil liability is.

This is general information about Oregon law as written, not legal advice, and firearm law in this state has been moving (see our Measure 114 status update). If your situation is complicated (shared custody, a roommate who can't legally possess a firearm, a rental with rules of its own), talk to a lawyer rather than a buying guide.

Which should you choose?

For most people bringing home a first handgun, the honest answer is two purchases, and the second one can wait.

Buy first: a quick-access pistol safe with a mechanical or keypad primary lock, bolted down. Bolted to a nightstand frame, a shelf, or the floor. The mounting holes are there for a reason, and an unanchored box is a portable container for a thief. Take a fingerprint reader if it comes as a secondary method and you want it, but don't buy a safe whose only entry is biometric, and don't buy one from a brand with an unresolved recall on this list.

Buy later, if it applies: a bolted, RSC-rated full-size safe for long guns, spare firearms, and anything you don't need in a hurry. This is the purchase where the UL 1037 RSC mark earns its cost, and where a UL 72 fire class is worth paying for if documents are going in alongside the guns.

Before either purchase, run three checks that cost nothing: search the brand and model at cpsc.gov/recalls, look for a UL mark naming the standard rather than the word "certified" on its own, and confirm there's a mechanical way in when the batteries die.

We recommend no specific brands here on purpose. Recall status changes — the table above has a company on it twice — and a recommendation written today is a liability in eighteen months. The three checks will outlast any list we could publish.

The short version

• Oregon's storage law sets a floor, not a security standard. A "locked container" under ORS 166.392(2) is any receptacle with a tamper-resistant lock. Compliant and secure are different words.
• The real exposure is civil, not the fine. A storage violation that leads to injury within two years is negligence per se under ORS 166.395(3).
• Don't buy a safe whose only entry is a fingerprint. Seven CPSC recalls since 2023, more than 320,000 units, all the same failure.
• UL 1037 RSC is the security rating that means something; UL 72 is the fire rating that means something. Anything else is the company grading its own work.
• Bolt it down, and keep the key somewhere an unauthorized person can't reach.
• Check cpsc.gov/recalls before you buy. One minute, free.

Storage is the part of gun ownership that does its work when you're not in the room, which is exactly why it's worth getting deliberate about rather than improvising after the gun is already home. If you're earlier in this than the safe purchase, our first-time gun owner guide covers the sequence from the beginning.

And if the honest situation is that you own a firearm you've never been properly taught to handle, storage is a good problem to have solved and a poor place to stop. That's what we do, in your home, at your pace — start here.

Frequently Asked Questions

Does Oregon require a gun safe?

No. ORS 166.395 requires a firearm to be secured whenever it isn't carried by or under the control of an authorized person, and it accepts three methods: an engaged trigger or cable lock, a locked container, or a gun room. A safe is one way to meet that, not a requirement.

Is a trigger lock enough to comply with Oregon law?

Yes, on its own it satisfies the statute. It is also the least secure option available, because the lock travels with the gun instead of putting a barrier between the gun and a person. Anyone who picks up the firearm has the lock in their hands and unlimited time with it.

Are biometric gun safes safe to buy?

Not as your only way in. Since October 2023 the Consumer Product Safety Commission has issued seven recalls covering 323,990 biometric gun safes whose fingerprint locks could be opened by people the owner never enrolled, and in the most recent ones the published remedy was to stop using the fingerprint reader and use the key. Treat a fingerprint reader as a secondary method on top of a keypad or mechanical lock.

What does a UL RSC rating actually mean?

That an independent lab attacked the container and it held. At attack level one, the bar is a five-minute attack by one technician using common hand tools; level two is ten minutes and two technicians with more aggressive tools (UL Solutions). It is a real bar and a modest one, and it is the only widely used residential security rating that isn't self-reported.

How do I check whether a gun safe has been recalled?

Search the brand and model at cpsc.gov/recalls. It takes about a minute and it is free. California's DOJ also publishes a roster of firearm safety devices that passed its testing requirements — a California legal requirement rather than an Oregon one, but usable from anywhere as a check on whether a specific model was ever independently tested.

What happens if I don't secure a firearm in Oregon?

A violation is a Class C violation, up to $500. It rises to a Class A violation, up to $2,000, if a minor obtains the unsecured firearm and the owner knew or should have known a minor could get to it, and each firearm counts separately (ORS 153.018). The larger exposure is civil: if a firearm obtained through a storage violation injures a person or property within two years, the violation is negligence per se, with carve-outs for lawful self-defense or defense of another and for firearms taken by someone unlawfully entering a dwelling (ORS 166.395(3)–(4)).