Adding a spare key to a VW or Audi: what is actually involved

Adding a spare key to a VW, Audi, Skoda or SEAT is really two separate jobs that happen to live in the same lump of plastic. Cutting the blade and pairing the remote buttons is the easy, cheap part. Getting the car to accept the key's immobiliser chip is the part that takes equipment, and on newer cars the manufacturer's procedure runs online through their own systems. On older VAG models, if you have the car's security code, adapting a key is a quick workshop job; on newer ones it is a dealer or an online-capable auto locksmith, and there is no honest way around that. Below is what each part actually does, so you know what you are paying for and what you can sensibly do yourself.

A VAG key is three things in one body

It helps enormously to stop thinking of it as "a key" and start thinking of it as three independent systems that happen to share a housing. Each can work or fail without the others.

The mechanical blade is just metal. It turns the door lock and, on cars that still have one, the ignition barrel. It can be cut from your existing key or from the car's key code, and on models with a laser-cut ("sidewinder") blade it needs a proper milling machine rather than a high-street copier.

The remote is a small battery-powered radio transmitter for locking, unlocking and the boot. It talks to the car's central convenience or comfort module. When the buttons stop working, it is very often just the battery or a damaged aerial, and on many models the remote has to be learned into the convenience module separately from anything the immobiliser does.

The immobiliser transponder is a passive chip in the head of the key. It has no battery of its own. When you put the key in the barrel, a coil ring around the barrel energises the chip by induction and a short challenge-and-response exchange takes place. Keyless cars usually have no barrel at all, but there is still a transponder in the fob and a designated spot where you hold the key to start the car if the fob battery is flat. Where that spot is varies by model - commonly the steering column, the start button itself, or a marked area in the console - and the handbook names the exact place for your car.

• Blade: mechanical, cut to match your locks
• Remote: radio, battery-powered, learned into the comfort/convenience module
• Transponder: passive chip, adapted into the immobiliser - this is the expensive bit

Why the immobiliser side has to be adapted

The immobiliser is not a lock the key opens. It is a conversation between several control units that all have to agree before the engine is allowed to run.

On many VW and Audi models the immobiliser data lives in the instrument cluster; on others it sits in a dedicated immobiliser box, in the steering column electronics, or - on the newer platforms - in the body control module. Whichever it is, that unit holds a list of the transponder identities it is willing to accept, and it is separately paired with the engine ECU. Adapting a key means writing the new transponder's identity into that authorised list, in a way both the immobiliser and the engine ECU accept.

That is why a brand-new key bought online will not start the car. On most models the starter still spins and the engine either refuses to fire or fires and dies within a second or so while the immobiliser symbol flashes on the dash; on some, the immobiliser inhibits the starter and you get no crank at all. Either way nothing is broken - the car simply does not recognise the chip.

One detail catches people out repeatedly: on a lot of VAG models, adapting keys rewrites the whole authorised list in one go. If you adapt a spare without your other keys present, the ones sitting in a drawer at home can stop working. Take every key you own to the appointment, including the one you never use.

What the SKC or PIN is for

The SKC - variously called the secret key code, the login, or the PIN - is a numeric code unique to your car that authorises changes to its immobiliser. Its length and format vary with the generation of immobiliser fitted, and on newer systems it is paired with additional component security data rather than standing alone.

It exists so that possessing a diagnostic tool is not enough to add a key to somebody else's car. Without it, the immobiliser will let you read information but will not accept a write. That is the whole point of it, and it is a good thing.

Legitimate routes to your own car's code are through a franchised dealer with proof of ownership, through the manufacturer's own online technical portal (which requires a registered account and, for security-relevant functions, an authorised operator), or through a reputable auto locksmith who can derive it from the vehicle's own stored data. Before assuming it is lost, it is worth checking the service pack of an older car - but be aware that a code tag or card found in there is usually the key-cutting code or the radio code, which are not the immobiliser code and will not help with adaptation.

Every one of those routes involves proving the car is yours: in the UK the V5C, elsewhere the equivalent registration document, plus photo ID, and sometimes both. A locksmith who asks for paperwork is doing the job properly. One who does not is a reason to walk away, not a bargain.

Which generation your car is decides everything

This is the single biggest factor in what a spare key costs and who can do it, and it is genuinely a spectrum rather than two camps.

Older VAG immobiliser systems can be adapted offline. Given the security code, a workshop tool talks to the immobiliser, writes the new key in, and the job is over in minutes. On some of the older transponder types, an auto locksmith can instead clone your existing key's chip, so the car never knows a new key exists and no adaptation is needed at all. Cloning is fast and cheap, but it has a real drawback: the car cannot tell the clone from the original, so if one goes missing you cannot delete just that one.

Newer models use component protection, where control units are cryptographically tied to the specific vehicle and key adaptation is performed online against the manufacturer's servers. As a rough guide that means cars built from the early 2010s onwards, but the changeover differs by model and some Audis had component protection considerably earlier, so treat the date as a prompt to check rather than an answer. The manufacturer's own procedure for these cars has no offline equivalent. A dealer can do it, and so can an independent with a paid online subscription and an approved operator credential. If you are quoted an offline price on a recent car, ask carefully what is actually being proposed.

Keyless-entry and keyless-start keys sit at the more expensive end regardless of platform, because the fob itself costs more and it usually has to be introduced to the keyless module as well as the immobiliser.

What you can genuinely do yourself

More than you might think, though not usually the adaptation itself. Changing the fob battery is a five-minute job on most VAG keys and is worth doing before you panic about anything else. Remember that a flat fob battery does not stop the car starting on a conventional key - the transponder is passive and needs no battery. It only stops the buttons working, and on a keyless car it means using the emergency start position instead.

Several models have a remote resynchronisation procedure that involves locking or unlocking with the blade in the driver's door while pressing a remote button. The exact sequence varies by model and year, so look up yours specifically rather than following a generic one.

Diagnostics are the other genuinely useful DIY step, because they tell you what the car thinks before you spend money. A full-system scan will show immobiliser-related fault codes, and on many models it will also show how many keys are currently adapted. The logged fault is what earns its keep here: a fault saying no transponder signal was seen at all points at the coil, the wiring or the chip, while a key that is read and then rejected points at adaptation. Any capable VAG-specific scan tool will do this - ours, VAGPULSE, is Windows software plus a cable for a single payment - but be clear about the limit. Reading the immobiliser's status is not the same as being authorised to write to it; whether adaptation is possible at all still depends on your car's generation and on legitimately having the security code.

One thing worth saying plainly: clearing an immobiliser fault code does not add a key or fix a coil. And clearing stored faults to make a car look healthy before you sell it, or to get it through a test, is deception - the fault comes back, the buyer inherits it, and in the case of an emissions test clearing codes also resets the readiness monitors, which fails the test on its own.

Where it goes wrong

Immobiliser writes are one of the few areas where a botched attempt can leave a working car undriveable, so a little caution is well placed.

Buying a used key online is the most common expensive mistake. Many second-hand keys are still adapted to their donor vehicle and cannot simply be re-used; some cannot be returned to a blank state at all; and the blade will not match your locks. If you do buy used, buy from someone who explicitly sells them as re-usable, and expect the locksmith to charge for the extra work.

Interrupting an adaptation is the other one. Any procedure that writes to the immobiliser wants stable voltage and no interruptions. That means a proper mains-powered battery support unit rather than a jump pack, doors closed, nothing else drawing power, and no unplugging halfway through because it seems to be taking a while.

Two further traps. Immobiliser data usually lives inside a module you might otherwise think of as replaceable - swapping in a second-hand instrument cluster on a car that stores immo data there is not a like-for-like part swap, because it brings someone else's immobiliser identity with it and creates a much larger problem than the one it solved. And if anyone offers to disable the immobiliser altogether as a shortcut, understand what that is: it deletes a theft deterrent the car was sold with, it is very likely a problem with your insurer, and it is not a repair.

Dealer, locksmith, or DIY - choosing sensibly

A franchised dealer has manufacturer online access as a matter of course and will handle proof of ownership as routine. It is the straightforward option and usually the dearest, and you may have to leave the car. The one place a dealer can be weaker than a specialist is at the very old end, where the equipment and data for long-obsolete systems have been retired.

A good auto locksmith is often the better answer in practice. They come to you, they cut blades on site, and the competent ones hold the online subscription needed for component-protected cars. Ask directly whether they can do your specific model and year online, and ask what happens if it does not work - a professional will give you a clear answer.

Doing it yourself makes sense on an older car where you already have or can legitimately obtain the security code, where you have all existing keys to hand, and where you can support the battery properly. It makes no sense at all on a component-protected car, and no amount of software changes that.

Whatever you decide, the strongest advice is about timing: get the spare made while you still have a working key. Adding a key to a car that already has one is a routine job. Recovering a car whose last key has been lost is a different and considerably more expensive exercise, often involving reading data out of the immobiliser directly. And if you have just bought a used VAG and do not know how many keys exist for it, checking the adapted key count - and having the list rewritten so that any keys you were not given stop working - is a reasonable, entirely legitimate piece of housekeeping.

Common questions