Typing a password slows you down, so now you’ll need to enter a 2fa and a password. Fucking brilliant!
You must log in or # to comment.
I dont have this problem with my 1996 F-350 :)
Damn its wild I dont get these issues on my 1994 renault 5 either, really gets the noggin joggin
I feel like whoever screenshotted this cropped a following paragraph telling users to use passkeys… That’s the only way this would make sense
Ah yes, the third kind of evil.
Passkeys can be kinda nifty. Restrictions on what is accepted as a valid device for passkeys and that sort of issues suck though.
You’re ridiculous
Im not convinced. Considering my first examples of seeing passkeys were from Microsoft and Meta trying to force feed them to me just like they do with their AI, I’m in the camp of believing there’s a more nefarious purpose behind them until completely proven otherwise. These companies are completely allergic to altruistic motives especially when it’s something being pushed this hard.
i barely see the point of passkeys anyways, you can do 90% the same thing with a password manager which 1) keeps your credentials under your own control, and 2) adds another layer of security by encrypting your list of “passkeys” (i.e. very long passwords).
The biggest selling point with passkeys is the mutual authentication. Solving for attacker in the middle phishing is huge.
That’s the only way this would make sense
Like, as fud to sell the walled garden? Yeah, that’s pretty common recently.
“My tea is cold”
“Have you learned about our Lord and Savior passkeys?”
It is for passkey
That seems like an idiot took the copy for two competing internal opinions and pasted them without understanding.
Person heading towards lonely, empty carpark late at night after work or uni finished.
Notices someone following them.
Increases speed.
So does the person following.
Rushes to their car as the person following them starts running towards them.
Gets in their car and slams the door just as the person reaches the car, furiously smashing at the window to try and get in.
Person begins to start the car and the car responds:
“We have sent a 6-digit code to the following mobile phone number. When you receive it, type the code into your car’s keypad to authenticate”.
But the car’s ‘voice’ is drowned out by the screams as the window smashes.
Demanding you to use 2FA? Should be standard in this day and age.
As long as session cookie lasts for, dunno, months. Extended automatically.
Mandating 2FA for every fucking time you use the app, and only using email for 2FA? Special place in Hell. (I’m looking at you McDonald’s)
(Could be worse. Could be SMS 2FA.)
I went to a McDonald’s for the first time in years recently, and the first thing they ask you now is not some variation of what you’d like to order, but “Did you order on the app?”
Will you be using the McDonald’s app today?
Could be that. All I could hear through their crappy speaker was “McDonald’s app” asked in an interrogative tone.
Wow, look at that whole heap of why modern cars can fuck all the way off.
In exchange for being able to check what the charge is on our car - basically, whether it’s time to leave coffee shop - I get one of the most information-stealing, asks too-many-privileges apps on my phone. And it’s quite hard to do without it with an electric car. Looking at you, Ford, although I understand all manufacturers do the same.
MFAA and a password in exchange for eg. an OAuth token so that you can manage the devices on your account, and then use your phone’s usual security to control access to the app, would be one thing. But this looks more like the security team has made some demands, and the developers have implemented it in the laziest, MVP-compliant, way that they can.
I get one of the most information-stealing, asks too-many-privileges apps on my phone
Ford’s app doesn’t actually require ANY permissions other than network access to do what you said. It doesn’t even require Nearby Devices to lock/unlock the car, nor start climate, set departure times, etc. Their app is actually pretty non-intrusive.
…this is thanks to the fact that the car’s onboard modem is so “cloud connected” instead, so it’s even more difficult to avoid telemetries! So cool, right?
This is also why I will always make sure I have a physical keyfob if I’m ever driving a Ford somewhere. It has happened way too often that when Google Cloud has problems, Ford’s “keyless entry” goes down.
But this looks more like the security team has made some demands
More like the marketing team has made some demands that the information absolutely must never, at all costs, be provided in an open API that third-party apps that don’t steal your private info can use.
We need so much more consumer protection regulation than we have.
This could have been done by issuing a private key stored locally on device via Bluetooth. 2FA by requiring biometric on opening the app. Bonus points for allowing USB and then use whatever that monstrosity is as fallback.
Then for other sensitive details have whatever account do go through one time proof of ownership flow.
Doing it this way is just lazy.
Just another reason not to use the app I already don’t use
But think of all the useful data you’re missing out on generating. Sure, it’s not useful to you, but how is the manufacturer supposed to keep making money after you drive it off the lot? If you’re not thinking of the shareholders, you’re a selfish person.
Haha, love it
I think it might be a bit overkill to require a login to start your car.
It’s only for remote start, or off you have the highest trim versions, using your phone instead of a key fob. Using the standard key fob requires no logging in. Though I do wish you could choose to require a pin to start the car, that would actually be a nice security feature.
“I can see you’re trying to adjust your headrest. I can help you with that. To assist me, please log in to your Ford account with MFA…”
“Seat adjustment detected a new driver. Please login to add a second driver to your account. Please drink verification can to continue.”
To help speed up your log in experience, you’ll now also need to separately log into another app in order to log into this one in addition to the current method.
It’s so smooth
I’ve used this feature once to unlock the car after I forgot the keys inside. It’s nice enough to have, but that’s about the only scenario I’m likely to ever use for.
How does that happen? Does the door not unlock when you open it from the inside? Sounds like a very bad design decision on the manufacturer’s part
I don’t think they were locked in the car, the keys were.
I understand, but what I don’t understand is how the keys end up inside a locked car. Surely you need the keys to be outside to look the door through which you are exiting?
Nope. Lock button on the inside of the door, near the window buttons.
I’ve nearly done it myself a couple of times 😬
That should only lock doors that are currently closed
That’s why I like that my car just uses a normal key and not an electronic one. I just made a fuck ton of copies of it lol. Keep them everywhere. One’s even hidden on the exterior of the car itself.
Ah shit that makes so much more sense.
You don’t understand the concept of keys getting locked inside a car? This is about the most “touch grass” situation in the history of Internet comments. Locking keys in a car is super common, plenty of locksmiths make a living off the fact that it happens. Not sure how you missed that.
I think the confusion is this was a solved problem 30 years ago. Door automatically unlocks if you open from the inside and can’t be locked until you close it again. You had to work hard to get you keys locked in the car.
Engineers can create guards against mistakes, but if I wanted to find a way to lock my keys in my car that could be believably done by accident, I don’t think it would be hard. My dad recently locked his keys in his new truck. It’s possible to do.
Edit: also, 30 years? 1996 vehicles didn’t commonly protect you very much against this…
Because they unsolved the problem for some reason. Probably cut a deal with major locksmiths.
Every car in the last 30 years will lock keys in the car intentionally. It’s done this way because otherwise the car will be stolen with the keys inside of it.
Apparently not Fords. I leave the keys in my 2026 Ford Ranger fairly regularly (I live in the middle of nowhere, nobody is going to steal it here) and it has never locked the doors on me. In fact, if I leave the key in the ignition (with the car off) and hit the door lock button and close the door, it beeps twice and unlocks itself. I just tested it. If I leave the key in the cup holder I can lock it in the car, but not if it’s in the ignition.
My 2018 Excape has a keyless ignition. If I leave the key fob in the car, lock the doors with the button, and close it, the car immediately unlocks itself (without a beep). The only way to lock the key in the Escape is with a 2nd fob or with the phone app.
Nah they often just have settings to automatically lock so many minutes after exiting or lock if you’ve unlocked the vehicle but haven’t opened the door within a certain time frame. I can’t see any manufacturer trying to figure out and program the logic to intentionally lock you out of your car to prevent it from getting stolen.
It’s happened to me in like a dozen cars I don’t know what to tell you
You locking your keys in your car a dozen times doesn’t equate to proof of manufacturers programming cars to intentionally lock keys inside of them.
These systems are typically time-based around entry/exit not the location of the keys. You’re telling me every one of these dozen cars would automatically lock the vehicle if the keys were left inside but never lock if you took the keys with you? That’s supposed to be “more secure” than just locking the car 3-5 minutes after you get out and shut the door? With many vehicles being keyless now allowing you to unlock the door by just grabbing the door handle with they key fob in close proximity, how would that even work?
Furthermore, the only security present with keys 30 years ago was a tiny RFID embedded in the key that could only be “read” by the vehicle when it was in the ignition barrel, so how were these vehicles determining that your keys were still in the car? Always-on proximity sensors for key fobs only became a thing with push-button start in the 2010s.
Your old school key fobs were nothing more than ‘dumb’ garage door openers or TV remotes that only transmit when a button is pressed and only receive if the transmission is close enough to the receiving antenna, meaning neither one knows the position of the other. My TV remote will work the same whether I’m using it in my living room or standing in my front yard pointing it through my living room window. Neither the TV nor remote ‘know’ whether I’m standing inside or outside my house while pressing a button and they certainly don’t know where either is located when I’m not pressing button, so how were cars doing this way back in 1996?
Modern cars suck
30 years?
You heard me
Three decades
My car literally won’t lock if I’m outside trying to lock it and the keys are inside. It’s saved me a few times.
My less-than-30-year-old car has a normal metal key and doesn’t lock automatically.
I don’t recall the specific circumstances, it was something along the lines of having my hands full and trying to take things in from the car.
Has this really never happened to you or anyone you know? It’s not exactly common, but it’s happened to most people at one time or another. I suppose this is probably a generational thing, and harder to do with modern cars.
Most modern cars won’t lock with the key fob inside unless you fit e them to by locking them many time with a different fob
My new Ford has a 5g antenna installed. I regret my purchase tbh but I needed a small truck with good MPG and there wasn’t anything else I could get.
It probably also has an rf connector that you can disconnect.
I believe there are guides to remove the sim card in the car
A new car in 2026 probably has an eSIM, not a removable one
Fuuuck. Just smash it fr
Your vehicle might be too new for this, but you might be able to disable it by just pulling a fuse.
Passkeys are the way to go… Best of both worlds imo
I superficially thought so. Then read this article and ended up reconsidering my initial perspective. There’s a reason they’re being pushed currently and for sure it’s not to improve the user experience.
Great article, thanks for sharing it
Thanks for the article! Read through it and now I have more questions.
Isnt it a normal thing for the actual standard to shake out once adoption starts spreading? (Similar to what’s happening here with FIDO alliance?)
I’m hoping a legit “real” passkey standard comes out and that it’s open and good for consumers.
instructions unclear. Here’s Passcode
B b b but for access to my car?? Disclaimer: I must admit, I don’t get, why I would want to have remote access.
So you can lay in bed on a winter day and trigger the remote start. That’s about it. I have used the “feature” exactly once.
Remote start doesn’t need that though - I’ve installed several since the 90’s and none of them needed internet or an account.
The latest ones take about 15 minutes to install - that includes unboxing, reading the instructions, and finding the connectors.
Exactly. They deliberately design these things in such a way to force an account so they have an excuse to data-mine your phone.
Why I have used it exactly once. The key fob is much faster and easier.
The only other reason is to manage the trucks wifi. It was the cheapest way to get a mobile connection for my both my laptop and tablet for the business. $200/year for unlimited data was a hell of a lot better than $60-80/month any other route.
I have my KIA connected to home assistant which knows my calendar. Its nice to just have the car warm/cool without thinking about it. But its not necessary, just nice.
There is exactly 0% chance I would ever accept that sort of thing unless the car was talking directly to my Home Assistant server without Kia’s servers in between.
My wife does love that feature I must say. Although you can also use your keyfob and point it out the window if your car is nearby.
Not needing to do that shit in the first place is the way to go. Two of those functions are only dubiously useful for the vehicle owner, and the third is just blatant fucking consumerism!
