The car is fooled about where its key is
Many high-end vehicles use passive keyless entry: instead of pressing a button, the driver carries a fob that communicates wirelessly with the car. When someone approaches or touches a door handle, the vehicle checks for the fob. If it recognizes the signal nearby, it unlocks; when the fob is detected inside, the car may allow the engine to start.
A common theft method exploits that convenience with a relay attack. The thieves do not need to copy the key’s secret code or force the lock. They pass the fob’s legitimate wireless exchange between the vehicle and a key that is inside a nearby home. The car receives a response that appears to come from close by, even though the fob itself has not moved. If the vehicle accepts that apparent proximity, its ordinary entry and start functions can be used.
Why strong encryption may not stop it
The key distinction is between authenticity and distance. Encryption can help a car confirm that a response comes from an authorized fob. But if the system does not reliably measure how far away that fob is, relaying its valid response can defeat the location check without breaking the encryption. The vulnerability lies in how the car interprets proximity, not necessarily in the key’s secret being discovered.
The appeal for thieves is that the vehicle may be entered without visible damage or an obvious alarm-triggering break-in. But the method depends on the car’s design and conditions; it is not a universal trick that works on every model.
Convenience creates a security tradeoff
Automakers have added protections, including systems designed to measure distance more precisely, while owners can reduce exposure by keeping fobs away from exterior walls or storing them in signal-blocking cases. Some vehicles also let drivers disable passive entry. These measures address the basic weakness: a car should verify not only that the right key is responding, but that it is genuinely nearby.
