ECU PIN, Password and ISN Explained: The Immobiliser Security Code

The ECU PIN (also called the password, SKC, CS or ISN depending on the brand) is the immobiliser security code that lets the ECU and the car’s anti theft system trust each other. People search for how to “reset an ECU password” after an ECU swap or a security fault, but the ECU does not really have a password you reset. It has a security code that is either read, matched, or bypassed. This guide explains what that code is, the names each brand uses, when you need it, how it is obtained, and how an immo off or virgin file changes the picture.

ECU PIN in one sentence

The ECU PIN or ISN is the secret number shared between the engine ECU and the immobiliser, and most “ECU password” jobs are really about reading that number to code a unit, or avoiding it with an immo off file.

Why the code exists

A factory immobiliser stops the engine unless an authorised key is present. To do that, the engine ECU and the immobiliser store a shared secret and check it every time the ignition is switched on. That shared secret is the code people call the PIN, password or ISN. The full handshake is explained in the guide on what immo off is.

What each brand calls it

• VAG (VW, Audi, Seat, Skoda): SKC or login code. Newer cars add component protection that is handled online.
• BMW: ISN (Individual Serial Number). The DDE or DME ISN has to match the CAS or FEM, which is why an ECU swap needs ISN alignment. See the BMW N47/N57 DDE and MSD80 and MSV80 guides.
• PSA (Peugeot, Citroen) and Renault: a 4 digit PIN or precode stored in the BSI or UCH, used to program keys and ECUs.
• Hyundai and Kia: a PIN used with the SMARTRA module to learn keys and ECUs.
• Ford: PATS with incode and outcode timed access for key and module programming.
• Mercedes: the EIS or EZS and the ECU are personalised to each other rather than using a simple PIN.

When you actually need the code

• Key programming: adding or replacing keys usually needs the PIN or security code so the immobiliser accepts the new key. See immo off or key programming.
• Fitting a used ECU and keeping the security: a virgin file plus coding needs the car’s security data so the unit can be learned to the car.
• BMW ISN alignment: the replacement DDE or DME ISN must be aligned with the CAS or FEM before the engine starts.

How the code is obtained

Depending on the brand and the year, the code is read in one of several ways:

• From the immobiliser module, cluster or BSI with a key programming or diagnostic tool.
• From the ECU or immobiliser dump itself, where the data is stored in the binary. You can see where VIN and immo data sit in a dump in the guide on reading ECU numbers, and inspect a dump directly in the free ECU file analyzer.
• By calculation from the VIN or security data on some systems, using the correct tool.

On newer cars the security is stronger, stored online or protected, so reading the code is not always possible through the ECU alone.

“Reset ECU password”: what people really mean

You do not reset the ECU password in the way you reset an email password. When the engine will not start because of an immobiliser fault, or an ECU has been swapped, there are three real paths:

• Read the code and code the unit, so the original security stays in place.
• Virginise the ECU with a virgin file, then code it to the car and program the keys.
• Switch the immobiliser off with an immo off file, so no code is needed at all. This is the usual answer when the immobiliser box has failed or the PIN cannot be read.

There is a separate meaning of “ECU password” on some modern units: a read protection password needed just to read the ECU over the bench or boot. That is about access for flashing, not the immobiliser, and it is a different topic from the security code covered here.

How immo off avoids the code completely

If the goal is simply to make the engine run and the immobiliser cannot be repaired or coded, an immo off file removes the need for the PIN or ISN entirely, because the ECU no longer checks the immobiliser. The trade off is that the car loses that anti theft layer, so for a road car with a healthy immobiliser a virgin file plus coding is usually the better route. The full comparison is in the immo off and virgin file guides.

Frequently asked questions

What is the ECU PIN or ISN?

It is the immobiliser security code shared between the engine ECU and the car’s anti theft system. The brand decides the name: SKC on VAG, ISN on BMW, a 4 digit PIN on PSA and Renault, and so on.

Can you reset an ECU password?

Not as a simple reset. You either read the security code and code the unit, virginise the ECU and recode it, or use an immo off file so no code is needed. Which one fits depends on whether the immobiliser is healthy.

Do I need the PIN for an immo off file?

No. An immo off file switches the immobiliser check off, so the engine runs without the PIN or ISN. You only need the code if you want to keep the immobiliser active and code the ECU to the car.

How is the ISN read on a BMW?

The ISN is read from the DDE or DME and the CAS or FEM with a suitable tool, then aligned so the two match. On a used ECU the ISN usually has to be written to match the car, which is covered in the BMW guides linked above.

What is the difference between the immobiliser PIN and a read password?

The immobiliser PIN or ISN is the anti theft code. A read password is a separate protection on some modern ECUs that is needed to read the unit for flashing. They are different things with different purposes.

Sort out your immobiliser solution

Identify your ECU with the free ECU number lookup or ECU file analyzer, then choose the right path: a virgin file to keep the security and code the unit, or an immo off file when the code cannot be read or the immobiliser has failed.