Passive entry is a vehicle access system that unlocks your car automatically when you approach it with the correct key fob or smartphone in your pocket or bag. Unlike older remote systems that require pressing a button, passive entry detects your presence wirelessly and unlocks the doors when you touch or pull the handle. The entire process happens without you ever reaching for your keys.
How the Signal Handshake Works
Your car and key fob are in constant, quiet conversation. The vehicle periodically sends out a short-range scanning signal at around 134.2 kHz, a low frequency (LF) that only travels about 1 to 2 meters. This limited range is intentional: it ensures the system only responds when you’re standing right next to the car, not when you’re across a parking lot.
When you touch the door handle, the system kicks into a rapid verification sequence. The car sends a challenge signal, and the key fob responds with a coded answer using a secret key that was paired to the vehicle at the factory. If the codes match, the doors unlock. The fob transmits its response on a higher-frequency band (UHF) that can reach up to about 100 meters, which is why the car has no trouble receiving the reply even if the fob is deep in a bag or back pocket. This entire exchange takes a fraction of a second.
Passive Entry vs. Remote Keyless Entry
These two terms sound similar but describe different experiences. Remote keyless entry (RKE) is the system most drivers have used for decades: you press a button on your key fob, and the car locks or unlocks from a distance. Some newer RKE systems skip the button press and instead unlock when you touch the handle, but only while the fob is within range.
Passive entry goes a step further. You don’t press any buttons at all. The system detects your approach, verifies your identity, and handles locking and unlocking entirely based on proximity. Walk up to the car, grab the handle, and you’re in. Walk away, and the car locks itself behind you. The difference is subtle in description but noticeable in daily life, especially when your hands are full of groceries or you’re wrangling kids.
Smartphones as Digital Keys
Newer vehicles are moving beyond physical key fobs entirely. The Car Connectivity Consortium published its Digital Key Release 3.0 specification, which lets a compatible smartphone serve as a fully passive entry device using a combination of Bluetooth Low Energy (BLE) and ultra-wideband (UWB) wireless technologies.
BLE handles the initial detection. It picks up your phone’s approach from beyond 10 meters and begins preparing for authentication. UWB then takes over for precise distance measurement, using a process called two-way ranging: the car and phone exchange encrypted signals with precise timestamps to calculate exactly how far apart they are, down to centimeter-level accuracy. This layered approach means your phone can unlock the car hands-free, start the engine, and even adjust seat and mirror settings based on which authorized user is approaching.
NFC (the same tap-to-pay technology in your phone) serves as a backup. If your phone’s battery is critically low, you can hold it against a specific spot on the door handle or pillar to unlock the car. It’s less convenient since it requires physical contact with the vehicle, but it works with minimal battery power.
The Relay Attack Problem
Passive entry systems have a well-known vulnerability. In a relay attack, two thieves work together: one stands near your front door with a device that captures the low-frequency signal your car is broadcasting, then relays it to a second device held near your key fob (which might be sitting on your kitchen counter). Your fob thinks it’s next to the car, sends its unlock response, and the thieves open the door and drive away.
This works because older passive entry systems verify only that the signals match, not how far the signal actually traveled. The attacker simply amplifies and retransmits the LF signal to a higher frequency, carries it to the fob, then converts it back. The fob’s UHF response reaches the car directly since it already has a range of up to 100 meters.
UWB technology addresses this directly. Because it measures the actual time-of-flight of signals between the car and the device with extreme precision, the system can tell whether the device is genuinely 1 meter away or whether a signal has been bounced across a longer distance. Two-way ranging with timestamp verification makes relay attacks far more difficult to execute. Automakers adopting UWB, combined with certified security protocols from organizations like the FiRa Consortium, are closing this gap in newer models.
If your car uses an older system, storing your key fob in a signal-blocking pouch (often called a Faraday pouch) at home prevents the fob from responding to relayed signals.
What Happens When the Battery Dies
A dead key fob battery doesn’t leave you stranded. Most fobs contain a small mechanical key hidden inside the housing. Press the release button on the side or back of the fob, and a traditional metal key slides out. On the driver’s door handle, there’s usually a small slot or removable cover hiding a physical lock cylinder. Insert the key, turn it, and you can open the door manually.
Starting the car is a separate step. Most vehicles with passive entry have a designated key pocket or backup spot inside the cabin, often near the steering column or center console. Place the dead fob in that pocket, press the brake, and push the start button. The car uses a short-range reader in the pocket to pull just enough signal from the fob’s passive chip to verify its identity, even without battery power. Your owner’s manual will show the exact pocket location for your specific model.
Hardware Inside the Vehicle
A passive entry system relies on multiple antennas placed throughout the car. Low-frequency antennas are typically embedded in the door handles, trunk lid, and around the cabin interior. These create overlapping detection zones so the car can determine not just whether the fob is nearby, but roughly where it is: outside the driver’s door, near the trunk, or sitting on the back seat.
Door handles also contain capacitive touch sensors that register when a hand grips or touches them. This touch is what triggers the final authentication challenge. Some vehicles extend this concept to the rear bumper area, where a capacitive or ultrasonic sensor detects a foot-kick gesture to open the trunk hands-free. Ultrasonic sensors for this feature are typically mounted through the bumper cover since they need direct exposure to air to send and receive sound waves.
On the receiving end, UHF antennas pick up the fob’s response signal. In vehicles equipped with UWB, additional transceivers are placed at multiple points around the car to enable triangulation and precise distance calculation from several angles simultaneously.