How to Unlock SFD2? VAG SFD, SFD1 and SFD2: What Scan Tools Can Do
“How do I unlock SFD2?” is one of the most common questions about newer VW, Audi, Škoda, SEAT and CUPRA models. The honest answer: with an aftermarket scan tool and the right licence, SFD (SFD1) can be unlocked with a token – SFD2 currently only works through VW's own online access. We explain step by step how unlocking works, which jobs need which level and what it costs (prices as of 28 Oct 2026).
SFD unlocking: how it works
- ⌘A token instead of a fixed codePer VW's procedure description, the control unit requests a token when it is unlocked. The scan tool sends the request online to VW's systems and receives a signed token that is valid only for this vehicle and this control unit. Every unlock is logged, including user ID, VIN and control unit.
- ⇄What works without an unlockPer OBDeleven, reading fault codes and live data still works on SFD-protected control units. Coding, adaptations and parametrisation are blocked – and with them service functions that change values in the control unit.
- ✦What the licence isThe VAG SFD licence is a digital 12-month licence for one compatible tool. It is activated using the tool model, serial number and registered email address, usually within 1–7 working days, and is generally non-transferable (shop info). The tool needs an internet connection to unlock a vehicle.
Start with the basics
SFD is the VAG version of the security gateway. How gateways work on other makes is covered in Security Gateway (SGW) explained; which tools suit VW and Audi overall in Best scan tool for VW and Audi. This article focuses on SFD and SFD2.
The four protection levels in the right order
In everyday use, everything is often just called a “token” or “VAG unlock”. In fact, the Volkswagen Group introduced its diagnostic protection in several stages – in this order:
- Security gateway with a codeIt started with access protection via a login code: anyone who wanted to code or adapt control units entered a code. Per VW documents, this method no longer reflects the state of the art.
- Online security loginNext came the login via the manufacturer's online access: in the OEM software ODIS, you sign in with a personal account.
- SFD1 with newly generated tokensOn newer vehicles (per TOPDON typically from 2019, e.g. Golf 8 and ID. models), each protected control unit is unlocked with a token. A new token is generated for every unlock, is valid only for that vehicle and expires.
- SFD2 in parallel for special tasksMainly on models from 2024 there is also SFD2. It does not open the whole control unit: protected values are written in directly via online access, signed by the manufacturer – for example for component protection or when adapting control units to the vehicle.
What SFD2 does differently
With SFD1, the token opens the control unit for a limited time, during which the scan tool can code and adapt. With SFD2, the changed value itself comes signed from the manufacturer. Per OBDeleven, “SFD2” is not an official VW term but the community name; per OBDeleven's list it affects e.g. the Golf 8 from 1 Apr 2024, the ID.4 from 15 Jan 2024 and the Audi A3 8Y from 2025. Both methods run in parallel: many jobs on a new vehicle still only need SFD1.
What does MUCAR support?
MUCAR supports SFD (= SFD1) with tokens – with the separately available licence. MUCAR cannot do SFD2 at present; SFD2 is currently only possible through VW's own online access. For the THINKSCAN 689BT and 689BT Pro, the manufacturer information we checked does not confirm SFD2 either.
Typical jobs: SFD1 or SFD2?
Depending on vehicle, control unit and function, roughly:
- SFD1: resetting the service or inspection interval
- SFD1: putting the electric parking brake into maintenance mode, e.g. when changing brake pads
- SFD1: basic settings, adaptations and coding after repairs
- SFD2 / VW online access: component protection and adapting control units to the vehicle
Fault codes and live data work without an unlock. Whether a specific job on your vehicle needs SFD1 or SFD2 is something we check in advance using the VIN.
Sources (accessed 28 Oct 2026): VW procedure description for SFD unlocking in ODIS, VW erWin (information for independent operators), Audi information on GeKo/component protection, OBDeleven (SFD2 guide, February 2026), TOPDON (gateway page), MUCAR, THINKCAR UK. As of October 2026.
VAG SFD and SFD2: tools and routes compared
| Tool / route | VAG SFD (SFD1) | SFD2 | Licence / access | Updates | Price | ml24shop.deAt ml24shop |
|---|---|---|---|---|---|---|
| MUCAR 892BT Pro | ✓with a separate licence (shop info) | not at present – only via VW's online access | MUCAR VAG SFD, 1 year (€289.90) | free for life (per MUCAR) | €699.00 | View product |
| MUCAR 892BT | ✓with a separate licence (shop info) | not at present – only via VW's online access | MUCAR VAG SFD, 1 year (€289.90) | free for life (per MUCAR) | €599.90 | View product |
| THINKCAR THINKSCAN 689BT Pro | ✓with a separate licence (shop info) | not confirmed in the manufacturer info we checked | THINKCAR VAG SGW, 1 year (€349.00) | free for life (per THINKCAR UK) | €699.90 | View product |
| THINKCAR THINKSCAN 689BT | ✓with a separate licence (shop info) | not confirmed in the manufacturer info we checked | THINKCAR VAG SGW, 1 year (€349.00) | free for life (per THINKCAR UK) | €679.90 | View product |
| VW online access (erWin + ODIS) | ✓with a personal account (per VW) | ✓e.g. component protection – with additional authorisation (per VW/Audi) | registration, paid access, PC + VAS 6154 or J2534 device | via VW | per VW price list | external |
Prices as of 28 Oct 2026. “With a separate licence” per ml24shop/MittmannLive; vehicle coverage varies by model and year. MUCAR does not support SFD2 at present; for THINKSCAN, the THINKCAR UK information we checked does not mention SFD2. Updates per MUCAR (mucarus.com) and THINKCAR UK (mythinkcar.uk). VW access per VW's erWin and ODIS information; ODIS and manufacturer accounts are not included in our products. Each licence runs for 1 year for one tool of the respective brand. Functions depend on tool, software version, vehicle, model year, control unit and region.
How an SFD1 unlock works with your tool
1. Buy the licence that matches your tool brand (MUCAR licence for MUCAR tools, THINKCAR licence for THINKCAR tools) and send the tool's model, serial number and registered email address.
2. After activation (usually 1–7 working days), update the software and connect the tool to the internet.
3. At the vehicle, switch on the ignition, keep the battery voltage stable and select the locked control unit.
4. Request the unlock: the tool fetches a new token online for this vehicle and control unit.
5. Do the job – per VW's procedure description, the control unit locks again at the end of the session or after 90 minutes at the latest. A new token is fetched for the next job.
Our recommendation
For SFD1 jobs such as service resets, parking brake, adaptations and coding, an aftermarket scan tool with the right licence is enough – for example the MUCAR 892BT (€599.90) or the MUCAR 892BT Pro (€699.00) with the MUCAR VAG SFD licence (€289.90). Per MUCAR, the 892BT Pro has also been tested with ODIS (J2534, see J2534 pass-thru explained) – ODIS, the account and the licence are not included. For THINKCAR tools such as the THINKSCAN 689BT Pro (€699.90) there is the THINKCAR VAG SGW unlock (€349.00). If you need to handle component protection or adapt control units (SFD2), you currently need VW's online access or a workshop that has it.
Read more: Best Scan Tool for VW and Audi: Coding, SFD Unlock and Prices 2026 · Security Gateway (SGW) explained: which brands lock OBD access and how to unlock · J2534 Pass-Thru Explained: Using OEM Software with an Aftermarket Scan Tool
FAQ
What is SFD2?
Per OBDeleven, “SFD2” is not an official VW term but the community name for the newer protection level, mainly on VAG models from 2024. It runs in parallel to SFD1: protected values are written in directly online, signed by the manufacturer.
Can I unlock SFD2 with a scan tool?
Not with MUCAR tools at present – MUCAR supports SFD1. For THINKSCAN, the manufacturer information we checked does not confirm SFD2 either. SFD2 currently only works through VW's online access.
What is the difference between SFD1 and SFD2?
With SFD1, a newly generated token opens the control unit for one session; the tool can then code and adapt. With SFD2, the whole control unit is not opened – the manufacturer writes in verified, signed values, for example for component protection.
How long does an SFD unlock last?
Two things are different: the licence runs for 1 year from activation. Per VW's procedure description, an individual token is valid for one session only – the control unit locks again at the end of the guided session or 90 minutes after unlocking at the latest.
How much does a VAG SFD unlock cost?
We offer one-year licences: MUCAR VAG SFD for €289.90 and the THINKCAR VAG SGW unlock for €349.00 – each digital, for one compatible tool, non-transferable. For TOPDON tools there is a separate licence for €214.90.
Will the unlock work on my vehicle?
That depends on tool, software version, model, year, control unit and region. Send us your VIN, model, year and the job you need – we check before you buy whether SFD1 is enough and which licence fits.