Subaru Crosstrek and XV Forums banner

Starlink App Security

6.8K views 13 replies 5 participants last post by  Nutjob1  
#1 ·
So where is the security in the Starlink app? If you enter a VIN you can see all the info for that car in the app? How does that work with all the advanced features like remote start etc? To my knowledge my dealer never set anything up & sure didn't while I was there. I believe I added my own VIN later & dont recall any security steps. I never bothered trying to remote start while I had the free trial & now it expired so I never had to do any security verification there either.
 
#2 · (Edited)
The "MySubaru" STARLINK remote services app "security" is the email address you provided your salesperson/dealer who should have activated the service for you. No one can view vehicle details by entering a VIN. The VIN & email address must match before you can do anything. A three (3) year full subscription was included with the purchase of my 2021 Sport. There was no trial period.
 
#3 ·
What happens when you buy a used vehicle used from a non-Subaru dealer? Do you have to go to a Subaru dealer to get it setup? The standard deal now is 3 years safety (basically nothing other than your mileage & tire pressure is beamed up to Subaru every ignition cycle) & 6 months security (remote start), anything more than that is negotiated or a dealer gift.
 
#4 · (Edited)
Starlink is solely owned and operated by Subaru. That's one step in security. Non Subaru dealers selling Subaru's cannot open a Starlink account. A buyer would have to either go online or to Subaru to open a Starlink account. Security. The following info are security steps to ensure you and only you are the Starlink account holder to your Subaru.

Setting up a new Starlink account requires these security steps; vehicle title in your name, your name that's on the vehicle registration, VIN, your home or business address, city, state, zip code, email address, and cellular number. While not obvious, supplied info separates you from anyone else attempting to open a Starlink account without all the info needed. When a used Subaru is bought and the Starlink account to it wasn't closed, registering for a new account may present problems until vehicle title and state registration validates you as the new owner in order to open a Starlink account.

Once a Starlink account is opened, downloading the MySubaru app to phones, pc, tablet, is your business as you become the gate keeper to who uses your MySubaru app to; remote start, preset hvac settings, run time, locate vehicle if a family member uses your Subaru, receive alerts to doors unlocked/ajar, check engine error codes, and a few other things. If your Subaru is stolen, using your MySubaru app will show you where the vehicle is. If you're familiar with LoJack, MySubaru is similar to locating your vehicle whether it's stolen or on the other side of town when your family took it or friend borrowed it and you're curious where your car is.
 
#5 ·
After I picked up my 2021 Sport and tried to access my account on the MySubaru.com website and could not get in, I contacted Subaru directly. It was discovered the salesperson entered an incorrect email address when he created & activated my "MySubaru" account. To correct the email address, I had to provide a copy of my bill of sale & proof of insurance. Subaru provided a link to a password protected site to deposit the documents. Once I provided the requested documentation, they corrected the email address within a few hours and I was able to access my account and utilize the services.
 
#9 ·
What 'app' are you discussing? If a vehicle was ordered, as mine was, a check with the dealer displayed on their computer system listed my car was due earlier than suggested. The MySubaru app is not enabled until final delivery (check/loan arrangements, registration, license plates attached, insurance card issued from ins. co., etc). Once my ins card and check was handed over, my dealer proceeded with more paperwork that included registering MySubaru's app with VIN and paired my phone to my Xtrek Sport. He also dragged me thru familiarization exercises.
 
#8 ·
Here's something scary. Someone bought my totaled subaru and I can still control it with the app. Subaru needs add some security to their app for used cars. If that person parks their car in a garage attached to a house, someone could remote start the car when people are in the house and potentially kill them. I tried reporting this to customer service and they did not care whatsoever.
 
#10 ·
Did you enable your MySubaru app and tried locating your car, among other access features to see if your Suabru is still 'alive'? If I'm not mistaken, MySubaru is directly married to the VIN but if the main vehicle battery is disconnected, the onboard Subaru telematics in the vehicle is disabled, basically dead to cellular communications. In theory, your app is effectively dead if cellular communications cannot be established when the main vehicle battery is disconnected, unless Subaru has a hidden backup battery for emergency cellular service and Starlink was maintained.
 
#14 · (Edited)
Your post, #8 does not mention anything about informing Subaru or Starlink. If customer service is Subaru, then I missed that. Please don't take my replies as antagonism. I'm trying to understand your loophole that hasn't been mentioned previously or isn't brought up in other threads. I think contacting Starlink may help and/or informing the new owner to remove your phone number from the paired phone list. I'm out on a limb with guessing on Starlink operation so discussing it with Starlink should give you better info. And correct me if I'm wrong as I do not want to misinform anyone and will edit my comments with corrections.
 
This post has been deleted