Smartphones unlock hotel rooms at W

CHICAGO (WLS) -- From banking to frequent flier information, consumers are storing more and more sensitive data on apps. With the swipe of a phone, some hotel guests can get into their rooms. But security experts warn those who use the new technology to lock down their smartphones.

At the swanky W on Lakeshore Drive, guests can use their smartphones to access hotel rooms. The Starwood Hotel Group said it's the first in the world to roll out the new technology on the hotel's loyalty program app.

"It then interfaces with your phone and once you enable your phone, you get an email from a push notification that allows you to check in online and you can completely bypass the welcome office for registration and you can go right to your room," Pete Demay, W Lakeshore, GM, said.

"I checked in with my flight on my phone today. I would love to have ability to check into my room the same way," Christopher Audet said.

The app uses an encrypted bluetooth signal and software security codes. But could phones open the wrong doors?

"Someone would have to be very close to when you are checking in when that code is embedded in your phone to pick it up," William Kresse, assistant professor at Governors State University, said. "Is it possible? Sure it is possible. Is it likely? Not really."

The bigger issue, Kresse said, is locking down a smartphone.

"Somebody picks your pocket, steals your purse, gets your phone. You don't have it locked. They can get into your room, get into your bank accounts. They can get into everything," he said.

Starwood said it can immediately deactivate the code if a phone is reported stolen. The hotel chain said it has hired third party, an independent safety firm, to analyze the technology.

However, other companies may not be as cautious. Trustwave's 2015 security pressures report revealed that 77 percent of IT departments are "pressured" to roll out new cloud and mobile application projects despite having unresolved security issues.

"That they're willing to sacrifice on security to take advantage of the market and that's a big problem, " VP of Product Management John Shaul, Trustwave, said.

Kresse warns all hotel guests to be mindful of what they're doing, and to bring a cable lock to wrap around luggage.

"Loop it through the bedframe of the desk," Kresse said. "The bad guys will get it by being on the inside, stealing it from an employee or bringing an employee because the bad guys don't want to just get into your room. They want to get into all of the rooms."

Smartphone hotel key technology is expected to become available at more hotels in the next year. Those without a smartphone, can still use an old-fashioned keycard, according to the W general manager.

Starwood and the W reinforced several times that the mobile keys are designed to be equally secure.