Hacking Explorer (the car)

by Bob

Since I only have my own vehicle I can't be sure if this will work on earlier/later Ford Explorers or any of Ford's other vehicles with keyless entry systems.

Entry

Given that the Explorer in question has a keypad entry system let's begin.

The numbers on the keypad will range from 1 to 0 grouped in pairs of two.  For instance:

[1-2] 
[3-4] 
[5-6] 
[7-8] 
[9-0]

These keypads come preset with a 5-digit permanent code, which you can change if you so please.  Unfortunately the permanent code still stays in memory.  I've learned that you can hit any amount of numbers beforehand as long as you get the code in the right order.

So you can pretty much punch random numbers without stopping for any length of time and not set off alarms, and still be allowed entry if you get the code in the right order.  Also, hitting the [3-4] button after the code has been entered and the driver's side door unlocked (it does this automatically when the code is punched in) will unlock all the doors.

Turning the key twice within four seconds in any of the car's locks also has this effect.

Getting the Code

Ford is very stupid if the following is true.

The nature of the last three digits of my entry code, 911, made me think that Ford may actually preset their numbers to have this as the last three digits so that it will be easy to remember.

If this is so then XX911, where XX is any two number combination, would be the format to use in hacking the code.  This will greatly reduce the hacking time.  If this is not the case then the fact that you can just keep pressing buttons randomly until it unlocks, instead of having to wait five seconds before trying again, makes Ford seem rather stupid as well.

Now What

Now that you have the code you get to decide what to do with it.

You could change the code on the door, but that's useless because you can still use the permanent code.  Nevertheless, here is how to go about adding your own personal code (useful for flaunting your power over a friend).

Enter the permanent code.  Within five seconds press the [1-2] button.  Within five seconds of that, enter the new code.

To erase a personal code, repeat Steps 1 and 2 but skip Step 3 (wait six seconds).

The car's alarm system (if equipped) can be armed from the keypad by pressing [7-8] [9-0] and disarmed by simply entering the code.

The Autolock feature (if you or your friend is cheap) can also be disabled and re-enabled using the keypad.  Just enter the permanent code (not the user set code) and within five seconds hold the [7-8] button and then within five more seconds press and release the [3-4] button.  (No, you can't let go of the [7-8] button - you just have to stand there and look stupid.)

Just for Fun

Even without the entry code you can still lock all the doors on the car by holding in the [7-8] and [9-0] buttons at the same time.

You can also set your friend's seat (if equipped) to all the way forward (if they are tall) or all the way back (if they are short).

First, turn the car on.  Then move the seat to the desired position.  Press the Set button, the light will come on.  While the light is on, press Control 1.

And while you're phucking with your friend's car, make sure you slap a "FREE KEVIN" bumper sticker on the back too.  Have fun!

Return to $2600 Index