CAR KEY PROGRAMMING AND LOCKSMITH

TOOLS
 Lishi Picks and Decoder : that is used to decode vehicles locks
 Lock –Pick sets : used for wafer and pin locks
 Key cutter : used for duplicating a simple keys
 Key programmer : for modern car key programming
Key programming
 The process of synchronizing a new key or fob with a vehicle’s
immobilizer system or smart lock or is the process of configuring a car
key's transponder chip to communicate with a vehicle's immobilizer
system
 WHEN - Lost/damaged key
- Adding spare keys
-Repairing immobilizer issues

Types of Programmable Keys

 These are keys with a chip inside (RFID) that used to

communicates with the car's immobilizer system(Chip inside key
(RFID))
Remote or Fobs Keys
 Key fobs combine remote key functions with additional features
like trunk release and panic buttons (Keyless entry with buttons)
Smart or Fob Keys
 These keys, also known as proximity keys, allow for keyless entry
and push-button start (Push-to-start, proximity-based )
Mechanical Key
 Traditional cut key (no electronics) need a Key cutter, code
machine
 Biometric: Fingerprint/face recognition High-end luxury cars
 Transponder
 A transponder chip is a small electronic component embedded in
a car key or key fob that allows the vehicle's immobilizer system
to recognize and communicate with the key, enabling the engine
to start.
 Transponder chips contain a unique code that the car's computer
(immobilizer) recognizes
 Which chip communicates with the car immobilizer system to
allow the engine to start
 Security (This system is a key anti-theft measure, as it prevents
the car from starting without the correct transponder chip.

Types of chips
 Ceramic: These chips are designed to be compatible with specific
car models(Made of clay and hardened by heat )

 Small glass tubes: used to encapsulate RFID transponders,

particularly for animal identification and tracking

 Larger glass tube: These chips are a type of RFID (radio

frequency identification) and are essential for the security of
modern vehicles
Function
 When the key is inserted into the ignition, the chip will read or
sends a signal to the ECU , then if codes matches the car will start

Types of Transponder
 Fixed code transponder : that use a single code for all key (The
code stored in the transponder chip is always the same and it
easier to clone because codes are fixed
 Rolling Code transponder: that generate a new code each time
they are used (is a security feature used in remote keyless entry
systems. It works by generating a new, unique security code each
time the remote control is used, making it difficult for
unauthorized individuals to intercept and replay the code to gain
access.
 Encrypted Transponder :Which has more advanced security and it
makes harder to clone
Common vehicle

 Ford , Toyota , Honda : that uses the rolling code transponders

 BMW and Mercedes BENZ :That uses high security encrypted
transponder

IMMOBILIZATION
 It is an anti-theft that prevent the car from starting without its
original key or programmed key or Is an anti-theft security
system in modern vehicles that prevents the engine from starting
without the correct key
 It works with verifying the chip signal from the key before
allowing ignition

How an Immobilizer Works

Component Functions
 Transponder Key: Contains a unique RFID chip (passive or
active)
 Immobilizer ECU: Standalone module or integrated with the
main ECU
 Coil Antenna (Ring): Is around ignition barrel, that’s it reads
the key’s chip
 Engine ECU: Checks immobilizer authorization before
allowing fuel/spark
 Authentication Process
 Key Insertion: The antenna ring powers the key’s chip (if passive)
 Key Sends Code: Transmits a crypto-signature (fixed or rolling
code).
 Immobilizer ECU Checks: Matches the key’s code with stored
values.
 Engine ECU Enable: If valid, the ECU allows fuel injection &
ignition

Bypassing/Disabling an Immobilizer
 (Warning: May be illegal in some regions. Only for
educational/repair purposes.)

Methods
Use the Correct Key
 Only a programmed key with a matching transponder works.
 If lost, dealerships can program a new key (requires proof of
ownership).

ECU Cloning
 Copy the immobilizer data from a working ECU to a replacement.

Emulator/Decoder Tools
 Devices like AD900, X-horse Key Tool Max can simulate
transponder signals.

Immobilizer Delete (Tuning)

 Some tuners can flash the ECU to ignore immobilizer checks
(common in race cars).

Transponder Bypass Kit

 Hides a valid transponder near the antenna ring (used in remote
starters).
 Common Immobilizer Problems
 Dead Key Battery: Car doesn’t detect key (smart keys): Replace
battery
 Faulty Antenna Ring: No communication with key: Replace
antenna
 Failed Immobilizer ECU: No start, security light on
:Repair/replace module
 Key Not Programmed: New key won’t start car: Reprogram at
dealer
 ECU-Immobilizer Mismatch: After ECU replacement: Sync with
diagnostic tool

Diagnosing Immobilizer Issues

Check Dashboard Lights
 Security/Immobilizer Light: (flashing = system active, solid =
fault)
 If no light, check fuse/antenna power.

Scan for Codes

 Use an: OBD2 scanner (some can read immobilizer codes).
 B1602: Transponder communication error
 P0513: Incorrect immobilizer key
Test Key & Antenna
 Try a spare key (if available).
 Check antenna resistance (~50-200Ω, it varies by model).

ECU Diagnostics
 Advanced tools (e.g. Autel IM508, Launch X431) can
reset/reprogram immobilizers.
 Relay Attacks (for keyless cars): Thieves amplify the key’s signal.
 OBD2 Hacking: Some tools can program new keys if security is
weak.
 CAN Bus Injection: Hackers simulate valid immobilizer signals.
 Immobilizers reduce theft risk by ~40%
 Never delete an immobilizer on a street-driven car (safety/legal
risks).
 For lost keys dealerships or locksmiths can reprogram

Key components Immobilizer

 ECU – it stores the programmed key code
 Transponder key – that contains a chip
 Antenna – that reads the signal form the key

Cloning
 It involve the copying the transponder chip data onto a new
blank transponder and they work with best fixed codes
transponder

Steps
 Insert the original key into key programmer
 Read and copy the chip data
 Insert the new blank transponder key
 Then write copied data onto the new key
 Test to ensure if the starts

New keys to vehicle ECU

 First connect the key programmer to the OBD2 port
 Then select the car’s make which is model and year
 Then enter the pin security if its required
 Insert the key and follow on screen instruction from
programming tool
 Then test to ensure if the vehicle starts

Common Issues and solution

  Car won’t start after programming
 You may check if the ECU has accepted the key
 Ensure if the key correctly coded
 No communication with ECU from key programmer
 Make sure the OBD2 port is working
 Check the resistance on coil (its suppose to over k-ohms

E-EPROM
 Is a erasable programmable- read –only- memory this is type of
memory chip used on a ECU that can be programmed and
reprogrammed
 This module handles reading, writing, and manipulating EPROM
data in vehicle immobilizers, ECUs, and key transponders
 EPROM chips store critical security data for keys and immobilizer
systems
 It is used to store calibration data such as engine map and
tuning parameters
 EEPROM is also commonly used for storing data like VIN (
Vehicle Identification Number) , Immobilizer data and other
Non-volatile setting
 EPROM returns its data even when powers is turned off

EPROM Identification
 Detects EPROM type e.g. 93C46, 24C16, 95040
 Checks if the chip is locked or rewritable
 Reads VIN, PIN, and immobilizer data (where applicable)
Reading & Writing Data
 Dump full memory (EEPROM/Flash backup)
 Modify specific bytes PIN, key IDs, mileage
 Clone chips (for key duplication)
 Common Use Cases
 All keys lost (AKL) recovery
 Mileage correction (odometer modules)
 Immobilizer bypass (in emergencies)

Chip Type Common Use Case

93C46 Older Toyota, Nissan, Ford

24C02 / 24C16 VW, Audi, BMW, Mercedes

95040 GM, Opel, Saab

MC68HCxx Honda, Acura

PIC12F / PIC16F Aftermarket immobilizers

Troubleshooting
 EPROM not detected
Check voltage 3.3V v-s 5V wiring (SPI/I2C), and chip
compatibility
 Write fails
Some chips are locked (need unlock sequence)
 Corrupt data
Always backup original data before modifying

NOTE!
 Modifying EPROM data may violate laws (odometer fraud,
unauthorized key cloning)
 Some ECUs have checksums incorrect writes can brick the module
Always verify ownership before extracting PINs or VINs