PIN to drive: the affordable car immobiliser alternative for cars that never came with one

Your car already asks one question before it starts: is a valid key present. PIN to drive adds a second question with a completely separate answer, held by you rather than by the fob in your pocket. Solve the first question and you have solved nothing about the second.

That distinction matters because almost every current theft method works by answering question one convincingly. A relay attack stretches the signal from a fob sitting in your hallway until the car believes the driver has arrived. A cloning device plugged into the diagnostic socket writes a fresh key the vehicle then treats as genuine. In both cases the factory immobiliser does exactly what it was designed to do. It just does it for the wrong person.

The scale is not trivial. DVLA figures obtained under a Freedom of Information request and analysed by What Car? recorded 61,343 vehicles reported stolen in 2024, with 4,446 Ford Fiestas taken in that single year. Those are not exotic cars. They are ordinary vehicles parked on ordinary streets.

Fourth, use a signal blocking pouch, then test it properly. Put the key inside, seal it, walk up to the car and pull the handle. If the doors open, the pouch is decorative. Tracker has warned that substandard pouches are widespread and that owners should test rather than assume. Test the spare key as well, because a spare in a kitchen drawer near the front wall is the one that gets relayed.

Fifth, if you bought the car used, get the keys reprogrammed. You have no way of knowing how many keys exist for that vehicle or who holds them, and no electronic security helps if a previous owner or a previous trade buyer still has a working key. Police forces make the same point in their vehicle crime advice, alongside standard guidance on keys, pouches and physical locks.

A visible steering lock belongs on the list too, with an honest description of what it does. It will not stop anybody. It adds noise and time, and thieves working to a schedule tend to move on to the next driveway rather than spend four minutes on a hardened bar in view of a bedroom window.

The first limit is availability. Almost no mainstream manufacturer selling in the UK offers a driver code before every journey. Jaguar Land Rover, for example, answered the theft problem with body control module changes and ultra wide band keys rather than asking the driver to type anything, and it reported updates rolled out to more than 65,000 UK vehicles on that basis. Good engineering, but nothing you can enable yourself on a 2019 Golf or a Transit Custom.

The second limit is the bypass route. Tesla’s own owner documentation states that valet mode disables the PIN to Drive setting, and that a forgotten code can be cleared by entering Tesla account credentials on the touchscreen. Both are sensible for owners locked out of their own car. Both also mean your vehicle security now depends on your email account and your phone, which is a different risk, not a smaller one.

The third limit is physical. A code typed on the same four spots of a glass screen leaves marks. Tesla addressed this years ago by moving the keypad around the display, which tells you the concern was real enough to engineer against.

The fourth is human. Any measure you have to perform every time you drive gets abandoned around week three, usually in the rain with shopping in both hands. That is the single biggest argument for a system that can also release automatically to a tag or a paired phone and keep the code as the fallback rather than the daily routine.

The fifth is insurance. A start code is not a tracker. If your policy schedule specifies a Thatcham S5 or S7 device, only that device satisfies the condition, and the RAC guide to Thatcham categories explains the difference plainly.

The module joins the vehicle network rather than sitting on top of it. It reads two CAN bus lines plus the LIN bus and the ADC bus, which is how it recognises legitimate activity on your specific make and model instead of guessing from voltage alone. Programming is vehicle specific, and the unit can be reprogrammed for a different vehicle later.

You authorise it in one of three ways. A code entered on buttons the car already has, such as steering wheel or climate controls, so there is no keypad to find. The LockCar app over Bluetooth. Or an optional proximity tag that releases the car as you walk up, with the code kept as the backup for the day your phone is flat. Full setup detail sits in the CAN-IMMO guide and user manual.

There are no LEDs and no visible components, so somebody searching a dark cabin has nothing to find and no obvious wire to cut. Service and valet mode lets you hand the vehicle to a garage without handing over your security, and we show you how before we leave.