Multiple burglaries using keyless entry with keypad code

Mach1E

Well-Known Member
Joined
Sep 5, 2021
Threads
93
Messages
10,508
Reaction score
13,293
Location
Florida
Vehicles
69 Mach 1, 11 GT, 21 GTPE- sold, 24 Taycan 4S, 20 F type R
Country flag
The factory code is stored in the BCM. Every BCM has the factory code printed on a label that is stuck to the BCM. While the code cannot be changed, the BCM can be changed, and in doing so, the factory code can be changed. This is the expensive route. It’s much cheaper to use FORscan to either disable the keypad or change to the non-US 7-digit code length. ??
And you can do all that and still get broken into because it’s the least likely way someone will break into your car. ?

I have a friend who in 40 years has never locked any car he’s owned. Because the broken window costs more than anything they could steal.
 

Arsenic17

Well-Known Member
First Name
Arsenic
Joined
Sep 23, 2022
Threads
10
Messages
314
Reaction score
257
Location
Denver, CO
Vehicles
MME GT 2023 Vapor Blue
Country flag
Highly doubt someone actually knows your factory code. There are easier ways to break into a car then sitting around guessing numbers. I would say they are somehow extending your Bluetooth unlock or RF fob signal to get in.

However, if you are truly worried about it and don't actually need the keypad for yourself, but not just cover the pillar entirely up with some god awful carbon fiber vinyl or something, assuming that would block the capacitive buttons on the keypad? They could maybe peel it off in the middle of the night, but hopefully you could at least tell if they did that and got in.
 

HuntingPudel

Well-Known Member
First Name
Steve
Joined
Mar 23, 2021
Threads
88
Messages
12,929
Reaction score
17,372
Location
Bay Area, CA
Vehicles
2024 MME GT with Performance Upgrade, 1979 Fire-Am, 1972 K/5 Blazer
Occupation
Engineering
Country flag
And you can do all that and still get broken into because it’s the least likely way someone will break into your car. ?

I have a friend who in 40 years has never locked any car he’s owned. Because the broken window costs more than anything they could steal.
LOL I used to leave the ‘71 Celica unlocked, sometimes with the windows down. Nobody ever thought to steal the engine. ??
 

ExtremeSkiBum

Member
First Name
Extreme
Joined
Mar 9, 2024
Threads
1
Messages
16
Reaction score
20
Location
New York
Vehicles
Ford Mustang Mach-E
Occupation
Ex-Party Animal
Country flag
Curious question: Are you documenting each day (and time) your vehicle has been broken into?
Also, have you notified the police?

Well, I've setup my MME with Garmin dashcam (67W for front and Mini 2 for rear) with Garmin Vault free storage, constantly recording, even when the vehicle is off. If there is an incident it will upload to the Garmin Vault when connected to WiFi. When the door is slammed while the car is off, it will record and upload. If I leave my vehicle in an undesirable neighborhood, I leave my WiFi hotspot in the car so I can view live and any incidents will be uploaded immediately. Works well for me, you might want to try this setup in your vehicle to record the suspect. I also have a safe in my center console so my hotspot is secure and so are my weapons.
Goodluck!
 


933233311602

Well-Known Member
Joined
Sep 29, 2023
Threads
30
Messages
247
Reaction score
229
Location
Canada
Vehicles
2021 Mach-E 4 Select 86,000+ Km
Country flag
Another risk is entering your keypad code while on camera.
This. It was once common for thieves to watch people key their office phone and passwords on pay phones as they checked their office voice mail in public places like hotel lobbies and airports. The same numbers could be used to log into the office phone and then make long distance calls through the company's phone network.

Considering that the Mach E factory code (and other cars?) cannot ever be changed, watching people key it sounds like a very likely thing that thieves would consider low risk / high reward to do.

Extraordinarily stupid that this code cannot be re-programmed by a Ford dealer.
 

Mach1E

Well-Known Member
Joined
Sep 5, 2021
Threads
93
Messages
10,508
Reaction score
13,293
Location
Florida
Vehicles
69 Mach 1, 11 GT, 21 GTPE- sold, 24 Taycan 4S, 20 F type R
Country flag
This. It was once common for thieves to watch people key their office phone and passwords on pay phones as they checked their office voice mail in public places like hotel lobbies and airports. The same numbers could be used to log into the office phone and then make long distance calls through the company's phone network.

Considering that the Mach E factory code (and other cars?) cannot ever be changed, watching people key it sounds like a very likely thing that thieves would consider low risk / high reward to do.

Extraordinarily stupid that this code cannot be re-programmed by a Ford dealer.
Except that they would have to be standing and looking over your shoulder for this to happen. That and you’d have to use the factory code for them to steal that one. Thats why most people create their own code.

I think the OP also mentioned not even knowing the factory code himself, so that wouldn’t be the cause in this instance.


What I know about criminals is they like low risk, high reward.

That means stealing stuff when no one is looking and doing it when you’re not around. Hanging out in a parking garage and looking over peoples shoulders makes you suspect #1.

But your post is a good reminder to never use the factory code in public places. ?
 

sci_goat

Well-Known Member
First Name
Chris
Joined
Mar 11, 2023
Threads
4
Messages
93
Reaction score
57
Location
Bay Area Pensinsula, CA
Vehicles
Mach-E 2023 Rte1 Grabber Blue
Country flag
This. It was once common for thieves to watch people key their office phone and passwords on pay phones as they checked their office voice mail in public places like hotel lobbies and airports. The same numbers could be used to log into the office phone and then make long distance calls through the company's phone network.

Considering that the Mach E factory code (and other cars?) cannot ever be changed, watching people key it sounds like a very likely thing that thieves would consider low risk / high reward to do.

Extraordinarily stupid that this code cannot be re-programmed by a Ford dealer.
Just to clarify for others who responded, I didn't say I would ever use the factory code, but some might. With phones and security cameras everywhere, the odds that your code is captured is higher.

What I propose is that if the dealer really needs a factory admin code, that this be something that is either only available to the dealer, or make it re-keyable.
 

njb

Well-Known Member
First Name
Nancy
Joined
Aug 31, 2022
Threads
1
Messages
309
Reaction score
255
Location
Illinois
Vehicles
Rapid Red 2023 GT
Country flag
It's possible that someone captured your key signal when you were using your fob/paak and they know the pattern that Ford uses for the "randomization" handshake and are now able to access your car at will.
 

Jerrytball

Well-Known Member
First Name
Jerry
Joined
Feb 21, 2024
Threads
30
Messages
2,150
Reaction score
1,133
Location
Gulfport MS
Vehicles
2026 bmw i4 M50
Occupation
Retired
Country flag
Car: Mach-E AWD Premium Extended Range (2023)

I had my car opened and searched for valuables twice within a single week without any damage done to it, living in an apartment complex with an underground parking.
The culprit definitely knows my factory code which I know I can't change or delete. It's also not possible to disable the keypad completely. Contacted Ford's customer support and was told something like: "if they guessed your factory code, the joke is on you - please contact the police because you won't hear anything else from our end".

This keypad only has 5 buttons, so there is only 3125 unique combinations which is insane given that you can make 7 attempts with just a fixed 1-minute lockdown interval - you only need about 8 hours to go through ALL the potential combinations with the car not notifying the owner about scanning attempts, having additional personal codes will greatly cut down the time needed to guess one of the codes.

That's why I was wondering if anyone tried physically disconnecting/removing the keypad at maybe a Ford's service center? Or would it be possible for Mach-E owners to get Ford to address the issues with the keypad?
I know somebody that had a lightning Ford truck and they disabled it through Forscan?
 

profdraper

Well-Known Member
First Name
Paul
Joined
Jul 10, 2024
Threads
2
Messages
114
Reaction score
85
Location
Brisbane, Australia
Vehicles
2023 Mach-e Select
Country flag
Car: Mach-E AWD Premium Extended Range (2023)

I had my car opened and searched for valuables twice within a single week without any damage done to it, living in an apartment complex with an underground parking.
The culprit definitely knows my factory code which I know I can't change or delete. It's also not possible to disable the keypad completely. Contacted Ford's customer support and was told something like: "if they guessed your factory code, the joke is on you - please contact the police because you won't hear anything else from our end".

This keypad only has 5 buttons, so there is only 3125 unique combinations which is insane given that you can make 7 attempts with just a fixed 1-minute lockdown interval - you only need about 8 hours to go through ALL the potential combinations with the car not notifying the owner about scanning attempts, having additional personal codes will greatly cut down the time needed to guess one of the codes.

That's why I was wondering if anyone tried physically disconnecting/removing the keypad at maybe a Ford's service center? Or would it be possible for Mach-E owners to get Ford to address the issues with the keypad?
Eh? Was the first thing I did: change the keypad code from that which was provided on a card included with the MME’s log book. Enter that in the infotainment location, then change & updated to my own.
 

Mach1E

Well-Known Member
Joined
Sep 5, 2021
Threads
93
Messages
10,508
Reaction score
13,293
Location
Florida
Vehicles
69 Mach 1, 11 GT, 21 GTPE- sold, 24 Taycan 4S, 20 F type R
Country flag
lol ? not suspicious at all. The guy with binoculars in a parking garage.

Maybe he could set up a tree stand and camo to wait for people to unlock their cars using the door code.

And they may have to camp out in a parking garage for days before a single person unlocks in this manner AND have to be at the correct angle to catch the code.

This theory of course may be worse than the one that involves 8 hours of punching in codes ?
 
OP
OP

ECharge729

Member
Joined
Jul 29, 2024
Threads
1
Messages
11
Reaction score
12
Location
Seattle
Vehicles
Mustang Mach-E 2023
Eh? Was the first thing I did: change the keypad code from that which was provided on a card included with the MME’s log book. Enter that in the infotainment location, then change & updated to my own.
I have some bad news for you: your factory code still works to unlock your car even if you have already set up a personal one. Moreover, now you have two working codes for your keypad which doubles the chances to guess one of them. The factory code can only be changed to a 7-digit version of itself or disabled with FORScan according to some of the commenters in this thread or through BCM replacement, apparently.
 
OP
OP

ECharge729

Member
Joined
Jul 29, 2024
Threads
1
Messages
11
Reaction score
12
Location
Seattle
Vehicles
Mustang Mach-E 2023
UPDATE from 2024/08/05 for people who do not want to read the full thread:
  • The car is 10 floors of concrete and steel apart from the apartment with walls being so thick that just one completely kills off all BT connections. You can think that the car is in the nuclear war bunker, completely off the grid - no mobile network, no Wi-Fi, no anything.
  • I have never used my car's keypad before the burglaries, so the chances of somebody seeing me do that are at ZERO.
  • I didn't have my factory code card to begin with, it has been lost by the dealership when they were transferring this car from one location to another, it was roughly a year ago, on purchase. I have only learned my factory code after the burglaries by using the two key fob trick.
  • I am that paranoid freak who double-verifies my "walk away" lock actually triggered before losing sight of my vehicle, so no, the car is definitely locked when those burglaries happen.
  • Just in case, I am not saying it was a professional thief who punched codes for 8 hours in a row in my case, I am only saying that going through all the potential combinations would take just 8 hours which I am not comfortable with for a code that gives somebody access to my car for the lifetime.
  • I am assuming that the culprit knows my factory code because I tried accessing my vehicle without my key fob and the keypad is the only thing that actually works, at least in theory.
  • If the perpetuator had a technology that allows to copy, analyze and imitate key fob signals, then I doubt they would search the vehicle regularly, taking some shitty sunglasses and gum. In that case, they would probably take the vehicle instead.

What I already did:
  • Learned my factory code with two key fob trick.
  • Erased all the PaaK and personal codes that might have been set.
  • Filed multiple police reports about the burglaries.
  • Contacted my building, asking them to check the security cameras feed.

What I am planning to do:
  • Using FORScan to disable the factory code.
  • Hiding a trail cam somewhere to see who and how is accessing my vehicle.
  • Maybe trying to leave a bait with a tracker inside. Not sure what this asshole would be interested in because the items they take are so random.
Sponsored

 
Last edited:
 







Top