Honda Passport Forum banner

Unanswered letter to Honda about security failure

6997 Views 18 Replies 11 Participants Last post by  MarilynJoseMD
Letter to the Senior Customer Service Executive
Honda Automobile Customer Service
Torrance, CA 90501
[edited slightly from my original]

Honda’s advertising and instruction materials boast about its vehicles’ security systems.
But Honda fails to mention that these ‘always on’ systems can be easily hacked. Using inexpensive ‘relay attack’ radio signal devices, thieves can capture the key fob signals to unlock and start the vehicles.
I learned about Honda’s security lapse the hard way.
My 2021 Honda Passport Elite was broken into recently. It was locked, and the dealer-installed alarm was armed. It was parked a few feet in front of my house under a street light.
When I discovered the break-in, all the car’s doors were unlocked. There was no power in the vehicle.
All things of value inside the car had been taken. For some reason, they didn’t take the car. But they left lots of trash and cigarette smell.
After a few minutes on Google, I learned that the people who broke into the car had an easy way. They used an electronic device to unlock it – deactivating the security system. They had complete control of the vehicle.
Honda has known about this system flaw for several years. Yet, Honda has no warning sticker on the key fob. And no mention in the Honda manual of the need for a Faraday cage to prevent the fob signals from being stolen.
This engineering defect is Honda’s responsibility. Yet Honda sent me to my dealer without any warranty coverage. A leaking water pump is covered. But not a signal leaking key fob.
And to add to the insult, my dealer told me that reprograming the fob will not fix the problem. The car can again be broken into by someone using an easily available device. And I will need to pay for the reprogramming again. As often as it happens.
Is this the way Honda wants to be known for how it designs and builds its cars…and how it reacts to problems it has created for customers?
Your response to me could restore some of my admiration for the Honda company.
[As I expected, I never received a response about this from Honda.
I hope the followers of this forum who are unaware of this defect can learn from my experience.]

Author’s name and additional information, including a police report, withheld.
See less See more
1 - 19 of 19 Posts
Interesting. Any idea if this issue is unique to Honda? Seems like most of the automakers would be using the same technology for the proximity keys and passive anti theft systems.
  • Like
Reactions: 2
"My 2021 Honda Passport Elite was broken into recently. It was locked, and the dealer-installed alarm was armed. "
So according to that, the fault is with the "dealer-installed alarm" not the Honda OEM factory installed security system??

"Yet Honda sent me to my dealer without any warranty coverage. "
If the dealer installed some other-than-OEM system, of course 'Honda' would say send the company that installed it should assume responsibility, but I am unaware of any automotive security system that has guarantee that it cannot be defeated.

I'm not saying the Honda Security System is without failure, but your letter/post specifies the failure is in some "dealer installed alarm" not the OEM system.
  • Like
Reactions: 2
I wonder if DA knows that HONDA does not own or participate in this site?

Joined 6 days ago and left their first post today..

It will be interesting to see if DA is here to participate in this forum or simply looking for a place to vent(?)
  • Like
Reactions: 4
Interesting. Any idea if this issue is unique to Honda? Seems like most of the automakers would be using the same technology for the proximity keys and passive anti theft systems.
You are correct is is not a Honda only issue. This is an interesting article on 7 methods that can be used.

It seems to be an industry wide issue that is being worked on but consumers as well as the industry are going to have to make some changes in the technologies they want.
  • Like
Reactions: 1
At the end of the day, if the relay hack didn't exist, they would've just broken the window and taken the valuables. The real lesson is don't leave valuables in your car. Unfortunately it seems someone needs to be blamed, and Honda...who like 90% of all auto manufacturers...have been targeted by this hack. If your car is normally stored outside, I would recommend a signal blocking bag, you can find them on the internet. A faraday cage is a whole 'nother level...but would work... :)
  • Like
Reactions: 3
At the end of the day, if the relay hack didn't exist, they would've just broken the window and taken the valuables. The real lesson is don't leave valuables in your car. Unfortunately it seems someone needs to be blamed, and Honda...who like 90% of all auto manufacturers...have been targeted by this hack. If your car is normally stored outside, I would recommend a signal blocking bag, you can find them on the internet. A faraday cage is a whole 'nother level...but would work... :)
If we’re going to blame others for this, maybe we could blame the thief? But if we blame the thief, he’ll never get paid for the damages. So let’s be clear, this isn’t about finding who’s at fault, it’s about money.
  • Like
Reactions: 2
I had another thought. Since this is a Honda problem, perhaps try to claim the Honda is a lemon and buy a Jeep instead. Should be secure.

  • Like
Reactions: 1
I'd be more worried about some foul play with the tech's that installed the after-market system than the OEM. To duplicate the unlock button being pressed on a keyfob would require synchronizing with the high bit random number generator in the fob and hope you don't use the fob enough to knock it out of sync before they can get to it. To repeat the keyless unlock by grabbing the door requires the device being within a few feet of the key and another a few feet of the car.
  • Like
Reactions: 1
To repeat the keyless unlock by grabbing the door requires the device being within a few feet of the key and another a few feet of the car.
Always-on key fobs present a serious weakness in your car’s security. As long as your keys are in range, anyone can open the car and the system will think it’s you. That’s why newer car models won’t unlock until the key fob is within a foot. However, criminals can get relatively cheap relay boxes that capture key fob signals up to 300 feet away, and then transmit them to your car.

Hat tip to HarveyW, that was from the article.

12228
See less See more
  • Like
Reactions: 2
The real lesson is don't leave valuables in your car.
And if you do leave valuables in it, make sure they're not visible through the windows.
I had another thought. Since this is a Honda problem, perhaps try to claim the Honda is a lemon and buy a Jeep instead. Should be secure.
Jeeps are great vehicles for a number of people including:
1. People who need/want something with rugged off-road capabilities.
2. People who have lots of money and don't mind spending it on their vehicles.
3. People who are too busy to read vehicle reviews.
4. People who have multiple vehicles and don't mind their Jeep spending many days at the dealership.
5. Lonely people looking for new friends, such as the the Service Manager, Service Advisors and Service Technicians from you local Jeep dealership, as you'll be on a first name basis with all of them...
  • Like
Reactions: 3
Jeeps are great vehicles for a number of people including:
1. People who need/want something with rugged off-road capabilities.
2. People who have lots of money and don't mind spending it on their vehicles.
3. People who are too busy to read vehicle reviews.
4. People who have multiple vehicles and don't mind their Jeep spending many days at the dealership.
5. Lonely people looking for new friends, such as the the Service Manager, Service Advisors and Service Technicians from you local Jeep dealership, as you'll be on a first name basis with all of them...
Don't forget, this isn't a Honda problem. Jeeps are just as susceptible to being hacked as any other keyless entry vehicle.
  • Like
Reactions: 2
I sympathize with your loss but as far as I can tell Honda did nothing negligent.

Just out of curiosity, is it possible you inadvertently made yourself a target? Most thieves target before acting to avoid risk or wasted time on a target with no payoff. They break in only when they see something worth getting either directly sitting there in plain sight, or from observing your patterns and learning what might be there. Some capture a bunch of signals on a street from garages and cars and then just try them all in the deep of night to see what they get. Since thieves are out there, some personal responsibility for security is necessary, and an alarm is zero deterrent to almost anyone- no one pays attention to an alarm. Unfortunately sometimes there is nothing any one can reasonably do to stop a determined theft.

As others have said, this fob signal grabbing is a problem for almost all car brands, so it hardly seems fair to blame Honda for some kind of incompetence. Their fob tech is the same as every other major brand.

It is sad but true that affordable equipment can easily rip you off in a lot of places. It isn't just fob signals, but even your credit card at a gas station or grocery store can be captured by cheap equipment that hijacks data. Your whole identity can be stolen with only 3 pieces of data, or less. A garage door signal can be scanned, windows broken, lockpick kits and picking methods used, security sensors defeated, social engineering used, etc. We can all get mad and blame these businesses and companies like Honda, but reality is scum thieves always find a new way to steal. Liability is limited unless a company is proved grossly negligent. No company should be reasonably expected to think of every way a criminal is going to behave. So, I guess I am not surprised Honda is not responding because what can they really say or do?

The best way to avoid theft that I am aware of is be discrete and take precautions where possible. Never leave valuables in your car unless it is in a truly secure place (like in a closed garage with the door opener locked from operation or unpowered). Put credit cards in an RF sleeve. Look for telltales of scanners on the gas pump. Scrutinize emails. Everything we can do is still no guarantee. I worry about my car being broken into just because when parked certain places, or my catalytic converter being cut off, or a lot of other things, but the best we can really do is be vigilant and try to be less of a target, and carry insurance to cover the theft.
See less See more
  • Like
Reactions: 5
If you’re fluent in ‘Faraday Cages’ and ‘relay attacks,’ this post isn’t for you.
If you do not know what these terms have to do with your Passport, I hope you find the following useful.
Here’s a made-up, unofficial draft of the type of message Honda could have had attached to the key fob when you bought your Passport. It might have made you aware of a potential weakness in your vehicle’s security system.
You never saw this kind of information from Honda because Honda never gave it to you. Yet Honda has known about the problem for years.
- - - - - - - - - - - - Fake But Serious Information Card- - - - - - - - -
HOW YOU CAN INCREASE YOUR PASSPORT’S SECURITY
Your Passport key fob is an essential part of its high-tech security system.
The fob contains coded computer chips that produce exact radio frequencies that will unlock your Passport and allow you to drive it away. This technology is similar to what other car manufacturers use.
Unfortunately, thieves can take control of your Passport by using inexpensive electronic devices that record or retransmit fob’s signals. As a result, the lawbreakers can steal your car in a few seconds without breaking a window, prying open a door, or setting off the alarm.
These electronic devices can be purchased on the Internet. The device tricks your vehicle into believing the signals it receives from the device are from you. Then the Passport’s system disarms the alarm, unlocks the doors, and activates the start button – all without using your fob. This is called a ‘relay attack.’
To be clear, thieves can use devices to capture your fob’s signals, then STEAL YOUR PASSPORT and everything in it.
Fortunately, there are simple things you can do to help keep your fob’s signals from being intercepted by lawbreakers.

The other side of this card contains more information.
[The back of the card could provide information about how Faraday cages/sleeves and other techniques can help prevent fob signals leaking to thieves.]
- - - - - - - - - - - -End of Fake But Serious Information Card- - - - - - - - -
I’ve learned that some car manufacturers, unlike Honda, have alerted their customers of the potential problem.
Apparently, rather than remain ‘always on,’ Mercedes’ fobs use a motion sensor to shut off the signals after the fob has not moved in a few minutes (such as sitting on a desk). I’ve read that Kia gives its customers Faraday sleeves to kill the fob signals. Other car manufacturers could also be taking steps to reduce the possibility of ‘relay attacks.’
Yet Honda does nothing – and says nothing. I think that’s too little for a quality car maker.
Everyone who loves their Passport as much as I do should have been informed on the date of delivery that their vehicle can easily be stolen or vandalized.
I wrote to Honda to ask them to help customers like me become aware of the danger of a relay attack. With that knowledge, I could have decided what, if anything, I wanted to do to protect my Passport. Without that knowledge, I was unaware of the problem and possible solutions. (See post ‘Unanswered Letter to Honda about Security Failure’ and read the information and link added by HarveyW.)
From other comments under my post, I got the impression that some other responders don’t fully understand the nature and danger of relay attacks.
Some commenters believe it’s Ok that Honda says nothing and does nothing to educate its customers. But Honda knows the problem could be nearly eliminated if customers took a simple step.
Isn’t Honda negligent by not saying something? As much as I’ve loved all my Hondas, this bothers me.
Other responders said I’m to blame for leaving valuables in my car. The ‘valuables’ the thieves took from my Passport included a phone cord, and from the closed center console, they took some car wash tokens, an old GPS, and the small sliding Honda console tray. They could have taken something of more value – my Passport. They had control of it.
Also, a writer pointed out that if someone wants to steal my stuff or my car, they could simply break the window. But that would have caused the dealer-installed portion of the security system to honk the horn and flash the lights. That may or may not have stopped the thief. But why would thieves deal with the noise and lights when they could quietly drive away with the car and everything in it using a relay attack device?
Someone said my goal was likely to get money. Really? Why would I write a letter to Honda and then post it on a non-Honda site? If I were doing it for money, I would have gone the lawsuit route. That’s not what I’m trying to do.
My singular goal is to provide Passport owners with the type of information I’ve written about here. It’s worth it to me to spend time creating my posts if they help even just one person avoid dealing with a stolen Passport, an insurance claim, and a police report.
If you believe Honda should provide a relay attack information or even a Faraday sleeve, please share your thoughts with Honda Customer Services.
Stay a happy Honda customer,
Goodbye
See less See more
  • Like
Reactions: 2
If you’re fluent in ‘Faraday Cages’ and ‘relay attacks,’ this post isn’t for you.
If you do not know what these terms have to do with your Passport, I hope you find the following useful.
Here’s a made-up, unofficial draft of the type of message Honda could have had attached to the key fob when you bought your Passport. It might have made you aware of a potential weakness in your vehicle’s security system.
You never saw this kind of information from Honda because Honda never gave it to you. Yet Honda has known about the problem for years.
- - - - - - - - - - - - Fake But Serious Information Card- - - - - - - - -
HOW YOU CAN INCREASE YOUR PASSPORT’S SECURITY
Your Passport key fob is an essential part of its high-tech security system.
The fob contains coded computer chips that produce exact radio frequencies that will unlock your Passport and allow you to drive it away. This technology is similar to what other car manufacturers use.
Unfortunately, thieves can take control of your Passport by using inexpensive electronic devices that record or retransmit fob’s signals. As a result, the lawbreakers can steal your car in a few seconds without breaking a window, prying open a door, or setting off the alarm.
These electronic devices can be purchased on the Internet. The device tricks your vehicle into believing the signals it receives from the device are from you. Then the Passport’s system disarms the alarm, unlocks the doors, and activates the start button – all without using your fob. This is called a ‘relay attack.’
To be clear, thieves can use devices to capture your fob’s signals, then STEAL YOUR PASSPORT and everything in it.
Fortunately, there are simple things you can do to help keep your fob’s signals from being intercepted by lawbreakers.

The other side of this card contains more information.
[The back of the card could provide information about how Faraday cages/sleeves and other techniques can help prevent fob signals leaking to thieves.]
- - - - - - - - - - - -End of Fake But Serious Information Card- - - - - - - - -
I’ve learned that some car manufacturers, unlike Honda, have alerted their customers of the potential problem.
Apparently, rather than remain ‘always on,’ Mercedes’ fobs use a motion sensor to shut off the signals after the fob has not moved in a few minutes (such as sitting on a desk). I’ve read that Kia gives its customers Faraday sleeves to kill the fob signals. Other car manufacturers could also be taking steps to reduce the possibility of ‘relay attacks.’
Yet Honda does nothing – and says nothing. I think that’s too little for a quality car maker.
Everyone who loves their Passport as much as I do should have been informed on the date of delivery that their vehicle can easily be stolen or vandalized.
I wrote to Honda to ask them to help customers like me become aware of the danger of a relay attack. With that knowledge, I could have decided what, if anything, I wanted to do to protect my Passport. Without that knowledge, I was unaware of the problem and possible solutions. (See post ‘Unanswered Letter to Honda about Security Failure’ and read the information and link added by HarveyW.)
From other comments under my post, I got the impression that some other responders don’t fully understand the nature and danger of relay attacks.
Some commenters believe it’s Ok that Honda says nothing and does nothing to educate its customers. But Honda knows the problem could be nearly eliminated if customers took a simple step.
Isn’t Honda negligent by not saying something? As much as I’ve loved all my Hondas, this bothers me.
Other responders said I’m to blame for leaving valuables in my car. The ‘valuables’ the thieves took from my Passport included a phone cord, and from the closed center console, they took some car wash tokens, an old GPS, and the small sliding Honda console tray. They could have taken something of more value – my Passport. They had control of it.
Also, a writer pointed out that if someone wants to steal my stuff or my car, they could simply break the window. But that would have caused the dealer-installed portion of the security system to honk the horn and flash the lights. That may or may not have stopped the thief. But why would thieves deal with the noise and lights when they could quietly drive away with the car and everything in it using a relay attack device?
Someone said my goal was likely to get money. Really? Why would I write a letter to Honda and then post it on a non-Honda site? If I were doing it for money, I would have gone the lawsuit route. That’s not what I’m trying to do.
My singular goal is to provide Passport owners with the type of information I’ve written about here. It’s worth it to me to spend time creating my posts if they help even just one person avoid dealing with a stolen Passport, an insurance claim, and a police report.
If you believe Honda should provide a relay attack information or even a Faraday sleeve, please share your thoughts with Honda Customer Services.
Stay a happy Honda customer,
Goodbye
You make some valid points and I think spreading awareness like you are is a good cause. I can even support asking Honda to do more, I just feel the tone should not be accusatory as I don't feel they are negligent currently. The quick analogy I offer is- look how easy hardware locks on doors, padlocks, cheap safes are to break into in seconds or minutes- do the manufacturers of those need to warn you about theft or give you additional tools to stop the crime? If they do, and those fail, have they now put themselves in a position of actual legal liability because they gave you a warning or product and a theft still occurs?

I've had a key sleeve for a couple years that I got at the same time when I was really worried about cards getting scanned in my wallet. I read a few articles about scan (record and playback) and relay (man in the middle) attacks as emerging threats and decided to take steps. To me the burden of knowing what thieves are up to and spreading awareness falls on the individual and to some degree law enforcement, at least until something is common enough for it to be fair to expect manufacturers to invent new technologies.

We can be sure that no matter what prevention is offered, it will eventually be defeated again in the future.

If I chose to be angry about anyone not prviding enough security, it would be companies holding my data! At least I can take steps with my physical items to try to protect them.
See less See more
  • Like
Reactions: 1
If you’re fluent in ‘Faraday Cages’ and ‘relay attacks,’ this post isn’t for you.
If you do not know what these terms have to do with your Passport, I hope you find the following useful.
Here’s a made-up, unofficial draft of the type of message Honda could have had attached to the key fob when you bought your Passport. It might have made you aware of a potential weakness in your vehicle’s security system.
You never saw this kind of information from Honda because Honda never gave it to you. Yet Honda has known about the problem for years.
- - - - - - - - - - - - Fake But Serious Information Card- - - - - - - - -
HOW YOU CAN INCREASE YOUR PASSPORT’S SECURITY
Your Passport key fob is an essential part of its high-tech security system.
The fob contains coded computer chips that produce exact radio frequencies that will unlock your Passport and allow you to drive it away. This technology is similar to what other car manufacturers use.
Unfortunately, thieves can take control of your Passport by using inexpensive electronic devices that record or retransmit fob’s signals. As a result, the lawbreakers can steal your car in a few seconds without breaking a window, prying open a door, or setting off the alarm.
These electronic devices can be purchased on the Internet. The device tricks your vehicle into believing the signals it receives from the device are from you. Then the Passport’s system disarms the alarm, unlocks the doors, and activates the start button – all without using your fob. This is called a ‘relay attack.’
To be clear, thieves can use devices to capture your fob’s signals, then STEAL YOUR PASSPORT and everything in it.
Fortunately, there are simple things you can do to help keep your fob’s signals from being intercepted by lawbreakers.

The other side of this card contains more information.
[The back of the card could provide information about how Faraday cages/sleeves and other techniques can help prevent fob signals leaking to thieves.]
- - - - - - - - - - - -End of Fake But Serious Information Card- - - - - - - - -
I’ve learned that some car manufacturers, unlike Honda, have alerted their customers of the potential problem.
Apparently, rather than remain ‘always on,’ Mercedes’ fobs use a motion sensor to shut off the signals after the fob has not moved in a few minutes (such as sitting on a desk). I’ve read that Kia gives its customers Faraday sleeves to kill the fob signals. Other car manufacturers could also be taking steps to reduce the possibility of ‘relay attacks.’
Yet Honda does nothing – and says nothing. I think that’s too little for a quality car maker.
Everyone who loves their Passport as much as I do should have been informed on the date of delivery that their vehicle can easily be stolen or vandalized.
I wrote to Honda to ask them to help customers like me become aware of the danger of a relay attack. With that knowledge, I could have decided what, if anything, I wanted to do to protect my Passport. Without that knowledge, I was unaware of the problem and possible solutions. (See post ‘Unanswered Letter to Honda about Security Failure’ and read the information and link added by HarveyW.)
From other comments under my post, I got the impression that some other responders don’t fully understand the nature and danger of relay attacks.
Some commenters believe it’s Ok that Honda says nothing and does nothing to educate its customers. But Honda knows the problem could be nearly eliminated if customers took a simple step.
Isn’t Honda negligent by not saying something? As much as I’ve loved all my Hondas, this bothers me.
Other responders said I’m to blame for leaving valuables in my car. The ‘valuables’ the thieves took from my Passport included a phone cord, and from the closed center console, they took some car wash tokens, an old GPS, and the small sliding Honda console tray. They could have taken something of more value – my Passport. They had control of it.
Also, a writer pointed out that if someone wants to steal my stuff or my car, they could simply break the window. But that would have caused the dealer-installed portion of the security system to honk the horn and flash the lights. That may or may not have stopped the thief. But why would thieves deal with the noise and lights when they could quietly drive away with the car and everything in it using a relay attack device?
Someone said my goal was likely to get money. Really? Why would I write a letter to Honda and then post it on a non-Honda site? If I were doing it for money, I would have gone the lawsuit route. That’s not what I’m trying to do.
My singular goal is to provide Passport owners with the type of information I’ve written about here. It’s worth it to me to spend time creating my posts if they help even just one person avoid dealing with a stolen Passport, an insurance claim, and a police report.
If you believe Honda should provide a relay attack information or even a Faraday sleeve, please share your thoughts with Honda Customer Services.
Stay a happy Honda customer,
Goodbye
You seem like the kind of guy who sues McDonalds because you're fat.
  • Like
Reactions: 1
Perhaps you should upgrade to Honda's Terii system??
  • Like
Reactions: 3
Same happened today
We getting car towed to the dealer cause car keys don’t work anymore
.. car was stolen last night and my husband is livid
1 - 19 of 19 Posts
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Top