Remote start via the key fob is not a common sight on European vehicles despite there being no governance or law prohibiting its use. However, in recent years manufacturers such as Ford have brought the capability to the European market through the creation of Ford Pass - a multi-platform mobile application that provides the ability to lock, unlock and start compatible vehicles. Ford Pass also provides a mechanism to access vehicle telemetry such as mileage, oil life, fuel level and tyre pressures; and with a view to go paperless, the owner's manual for the vehicle.

Remote start via the key fob has been a staple feature on modern vehicles in both US and Australian markets for a much longer period, with Ford offering the feature across most of the model fleet as standard. Whilst the Ford Pass app has an excellent feature set, it’s reliability is dependent on the mobile device, signal strength (it requires internet access) and the stability of server infrastructure managed by Ford. For these reasons, an alternative option of remote start via OEM hardware is an appealing option.

The next generation Ranger utilises the same radio frequency (434MHz) for communication between the vehicle and the key fob for both transmission of user input (button press) and intelligent access (keyless entry). Note: At the time of writing, all variants of the next generation Ranger are being delivered to consumers with keyless entry disabled. This is due to weaknesses in implementation that make keyless relay attacks trivial.

Whilst there are multiple variants of Ford OEM key fobs that operate at the same frequency, this blog post will focus on a specific variant, part number “164-R8172 5930660”. This specific key fob was distributed most commonly with the 2018/2019 Ford Mustang and features the 4 buttons that we can make use of: Lock, Unlock, Remote Start & Trunk Release (compatible with the factory electric roller shutter). Once programmed, this key fob functions in the same way as the original key fobs that were paired with the vehicle upon delivery.

Once you have a compatible key fob in your possession, the standard key programming instructions provided by Ford must be followed <link>.

Place the first programmed remote (factory original) in the backup slot inside the centre console. With your foot off the brake pedal, press and release the push button ignition switch.
Wait five seconds and then press and release the push button ignition switch again.
Remove the remote control.
Within 10 seconds, place a second programmed remote control (factory spare) in the backup slot. Press and release the push button ignition switch.
Wait five seconds and then press and release the push button ignition switch again. Keep the ignition on for at least 3 seconds, but no more than 10 seconds.
Remove the remote control.
Place the unprogrammed remote control in the backup slot and press and release the push button ignition switch. At which point, hazard lights should flash alongside a lock/unlock sequence.
Start the vehicle by pushing the brake pedal and pressing the ignition start button.

At this point, the key fob will be paired with the vehicle. The impatient children among us will have already tried to lock, unlock, remote start, complete the whole cycle again 3 or 4 times to no avail. Some finer configuration via Forscan is required to finalise this setup.

Forscan

With the right equipment, we are able to change the configuration of our vehicles beyond that of the on-screen settings menus. Usually this requires a dealership visit, or in-depth knowledge of electronics and vehicle modules. However, an application called Forscan and some cheap off-the-shelf hardware means we can connect to the vehicle and enable settings that may not be on by default.

If you are a seasoned tinkerer you may want to skip this next part, where we will outline the required equipment and applications required to use Forscan. However, if you are new to this or simply need a refresher then read on.

Requirements:

A Microsoft Windows device (Laptop or Tablet, Desktop PC if you can get one close enough).
A compatible OBDII cable (purchase on Amazon)
An installation of Forscan & Extended License

Further information on the setup and use of Forscan can be found in our Knowledge Base.

Steps

1. Connect to your vehicle with Forscan. Once all modules have been detected, select the RTM Module (highlighted in yellow)

2. Press the blue play button, this button runs the selected service function and will provide us with configuration items. Forscan will warn you that mistakes made within this configuration context may cause unintended outcomes. Please not not change anything other than the items in this guide.

3. Once the service function for RTM (Radio Transmission Module) has run, you will be prompted with the following.

4. As per the screenshot, change RTM 751-01-01 from x1xx xxxx to x2xx xxxx. Flipping this bit instructs the vehicle to allow remote start from the key fob.

5. Select “Write” on the line we have modified.

6. Upon successful write, Forscan may prompt you to cycle the ignition once the changes have taken effect.

7. Exit Forscan.

If the previous steps have been completed successfully, your new 4 button key fob should be fully functional. Test the functions of lock, unlock, roller shutter (if equipped).

To remote start press the lock button once, followed by pressing the remote start button twice in fast succession.

To revert this configuration, remove remote start and use the factory supplied key fobs, set the changed value from 2 back to 1 with Forscan.

Common Questions

This method utilises Ford OEM parts (the key) and configuration of modules that are built into the vehicle. The key fob works in exactly the same way as the key fob that would have been delivered with the vehicle. During this process, we are introducing a key fob with more buttons and enabling dormant configuration in the vehicle that is meant for other markets. This modification is completed at your own risk.
Ford Pass requires an internet connection to relay a command from your mobile device to servers hosted by Ford, which are then relayed to your vehicle via the built-in modem. This communications chain is why you may experience delays in issuing commands to your vehicle via the mobile application. Remote start via the key fob is a direct communication to the radio transmission module in the vehicle, leading to an immediate response.
Unfortunately the Forscan configuration required to allow the new 4 button key fob to work with the vehicle will result in the factory supplied key fobs no longer being able to communicate with the vehicle. However, these key fobs will continue to function whilst they are placed in the backup location in the arm rest, allowing you to start the vehicle or reprogram a new key fob should the new one be lost or damaged.
You are liable for any damage caused by using this program. For unrelated service items, your warranty should remain intact.