Subaru BIU All-Keys-Lost Key Programming Guide (2026)

Who this is for

Keep reading if any of these are true:

• You lost every key to a 2012-2017 Subaru and the car will crank but not start, or shows a security or key warning.
• You have a blade-key Outback, Legacy, Forester, Impreza, WRX or STI, or Crosstrek and need an all-keys-lost recovery without a dealer tow.
• You drive a Toyota 86, Scion FR-S, or Subaru BRZ from the shared platform and lost your keys.
• A dealer quoted a high all-keys-lost figure plus a tow on a car you would rather not spend that much to re-key.

If any of those match, the Subaru BIU key programming mail-in service handles all-keys-lost recovery for a flat 350 dollars including the key. One firm requirement up front: we need a clear photo of your BIU or BCM label before you ship, because Subaru coverage varies by year and trim and we confirm it in advance rather than after a wasted shipment.

How the Subaru immobilizer works

Subaru built its immobilizer around a module called the Body Integrated Unit, almost always written as the BIU. The BIU is the under-dash body computer, and it also serves as the immobilizer core. What makes Subaru different from many other brands is that the security identity is not stored in one place; it is a matched set across four components:

• The key and its transponder.
• The BIU, the immobilizer core.
• The combination meter, the instrument cluster.
• The ECM, the engine control module.

All four carry a shared ID that must agree. Subaru's own technical literature describes this multi-module immobilizer registration, and the broader onboard-diagnostics framework that the modules communicate over is defined by SAE International's J1979 E/E diagnostic standard. The immobilizer at the center of that handshake exists because of the federal anti-theft framework documented by the National Highway Traffic Safety Administration, which encourages manufacturers to fit passive immobilizers as standard equipment.

On a normal start:

1. You insert the key. The transponder exchanges a challenge with the antenna at the ignition.
2. The BIU checks whether the key belongs to its registered set.
3. The BIU, combination meter, and ECM confirm their shared ID.
4. Only when the key is valid and the four-way match holds does the ECM enable the engine.

Because the BIU holds the immobilizer core and anchors the matched set, the BIU is the module a locksmith reads for all-keys-lost recovery. On these cars that recovery is a bench-level EEPROM job; the BIU often stores the relevant data in a small serial EEPROM such as a 24C02, which is read directly rather than through the OBD port.

Which Subarus this covers

Coverage is tied to the blade-key, G-key generation, which is most reliable on roughly 2012-2017 vehicles. The models we handle most consistently are:

Model	Reliable blade-key years
Outback	~2012-2017
Legacy	~2012-2017
Forester	~2012-2017
Impreza	~2012-2017
WRX and STI	~2012-2017
Crosstrek and XV	~2012-2017
BRZ	2013-2020
Scion FR-S	2013-2016
Toyota 86	2017-2020

The BRZ, FR-S, and 86 share the same platform and immobilizer approach, which is why they sit alongside the core Subaru lineup. Smart-key cars and newer model years use different systems, so anything outside this list has to be verified by VIN and by the BIU or BCM label photo before you ship. This is exactly why the label photo is mandatory: it lets us confirm the exact module and the right approach before a package leaves your hands.

Symptoms and failure modes

The faults that bring Subaru owners to a BIU all-keys-lost job are usually unambiguous.

No working key, car cranks but will not start

The defining all-keys-lost symptom. With no recognized key in the set, the ECM never gets the go-ahead and the engine will not fire even though the starter turns. A security or key indicator may be lit.

Failed dealer or OBD programming attempt

Some cars arrive after a cheap OBD tool failed to add a key or left the immobilizer in a partial state. Reading the BIU on the bench bypasses the OBD security gate and works from the chip-level truth.

Salvage or swapped module mismatch

If a BIU, combination meter, or ECM was swapped without matching the four-way set, the car immobilizes. Because the identity spans four parts, replacing one without aligning the others breaks the start handshake.

The reliability stakes are not theoretical. The Insurance Institute for Highway Safety / Highway Loss Data Institute has shown that electronic immobilizers significantly cut theft losses across the industry, with whole-vehicle theft frequency falling by as much as 64% once immobilizers were added, and the same robustness that deters thieves is what makes a broken four-way match impossible to bluff past without proper bench recovery.

The mail-in process, step by step

The reason to mail the BIU is that all-keys-lost recovery on these cars is an EEPROM-level bench job. Here is the flow:

1. Send the label photo and confirm coverage. Before anything else, send a clear photo of your BIU or BCM label along with the VIN. We confirm the exact module and that your car is covered.
2. Pay and start the order. Once coverage is confirmed, complete the Subaru BIU key programming order at the flat 350 dollar rate, which includes the key.
3. Ship the parts to the bench. Pack the BIU and the items listed below and send them to Auto Module Lab, 1168 W Pioneer Parkway, Arlington TX 76013. The submission checklist lives on the how it works page.
4. 24-hour bench turnaround. On arrival the BIU is read, the immobilizer data is recovered from the EEPROM, and a new key is cut and programmed into the matched set. Most jobs are completed and back in outbound mail within 24 hours.
5. Flat-rate return shipping, chosen at checkout. Your module and programmed key ship back with tracking via the tier you picked (from 14.95 dollars). You reinstall, insert the key, and the car starts.

What to ship

• The BIU. Always required; it holds the immobilizer core.
• A clear photo of the BIU or BCM label, sent before shipping, so coverage is confirmed.
• A door lock cylinder OR the dealer key code if a mechanical blade must be cut and there is no working key to copy. The bitting is encoded in the lock, so we need one of these to cut a blade that turns the ignition.
• Your contact details and VIN written inside the box.

Honest scope: what this does NOT fix

• Smart-key and newer-year Subarus outside the blade-key generation. Those use different systems and must be verified by VIN before any work.
• A no-start that is not immobilizer related. A dead battery, a failed fuel pump, a bad starter, or a crank-sensor fault will not be fixed by key work. Diagnose mechanical no-starts first.
• Combination meter or gauge display faults. A dead cluster display is a repair, not a key job, though the meter is part of the matched set for immobilizer purposes.
• General body-module electrical faults unrelated to the immobilizer.

The label-photo step is your protection against shipping a car we cannot cover. If the photo shows a module outside our supported set, we tell you before you spend a dime on shipping.

Why the four-way match makes Subaru harder than most

It is worth understanding why a Subaru all-keys-lost job carries a higher flat rate than a single-module key job on some other brands. On many cars the immobilizer data sits in one module, so recovery is a single read. Subaru spreads the identity across four parts, the key, the BIU, the combination meter, and the ECM, and the recovery has to respect that whole set. The BIU is the anchor we read, but the new key has to be programmed so that it satisfies the match the other modules already expect.

This is also why naive OBD tools fail so often on these cars. An OBD programmer that simply tries to add a key without correctly reading the BIU at the chip level will either error out against the security gate or leave the car in a half-programmed state where the four-way match is broken. The bench EEPROM approach reads the BIU's stored data directly, recovers the true immobilizer values, and programs the key into the set cleanly. That reliability is the reason the work is mailed in rather than attempted in a parking lot.

A second reason the bench wins is repeatability. Because the BIU often stores its immobilizer data in a small, well-understood serial EEPROM such as a 24C02, an experienced technician knows exactly where the values live and can verify the result before the module ships back. There is no guesswork and no leaving the car in an unknown state. For an owner who has already burned money on a failed dealer or DIY attempt, that certainty is worth a great deal.

Pre-shipment checklist

Before you box anything, run through this short list so the job goes smoothly:

• Photograph the BIU or BCM label clearly and send it with the VIN. Wait for coverage confirmation.
• Confirm the car is in the blade-key generation, not a smart-key model, using the VIN.
• Decide whether a blade must be cut. If there is no working key and the ignition needs a fresh blade, include a door lock cylinder or a dealer key code.
• Note your contact details and VIN inside the box.
• Use tracked shipping to 1168 W Pioneer Parkway, Arlington TX 76013.

Price versus the dealer and competitors

The pricing here is worth being precise about. A Subaru dealer all-keys-lost job commonly runs 400 to 700 dollars once you add the key, the programming labor, and a tow, since the car cannot be driven in without a recognized key. Some competitor mail-in shops advertise a floor near 250 dollars, but that floor frequently excludes the key itself and covers a narrower model range. The Auto Module Lab flat rate of 350 dollars includes the key and the broader model support listed above.

Path	Typical cost	Key included	Tow needed
Subaru dealer all-keys-lost	400 to 700 dollars	Yes	Often
Competitor floor mail-in	~250 dollars	Often not	No
Auto Module Lab mail-in	350 dollars flat	Yes	No

The honest comparison is that a 250 dollar headline can end up costing more than 350 once you add the key the headline did not include, and it may not cover your exact model. The 350 dollar flat rate is the all-in bench number for a covered car: bench recovery, the key, and the programming; return shipping is a flat-rate tier added at checkout (from 14.95 dollars). That all-in price still lands well below the annual cost of vehicle ownership the AAA Your Driving Costs study tracks, and far below replacing a car you have simply lost the keys to.

What a bench tech will tell you

"Subaru is the brand where cheap OBD tools get people in trouble. The identity is matched across four parts, so if you try to add a key without reading the BIU at the chip level, you either hit the security gate or leave the car in a half-programmed state with a broken match. On the bench you read the EEPROM directly, recover the true immobilizer values, and program the key into the set the meter and ECM already expect. That's why all-keys-lost on these goes to the bench, not a parking lot."

— Master automotive locksmith, 14+ years on the module bench

This is consistent with the broader anti-theft design intent: the Insurance Institute for Highway Safety / Highway Loss Data Institute credits electronic immobilizers with large theft-loss reductions precisely because the handshake is hard to fake, which is exactly what forces a legitimate all-keys-lost recovery onto the bench.

Frequently asked questions

Why is the immobilizer split across four parts?

Subaru matches the key, the BIU, the combination meter, and the ECM into a shared ID set. All four must agree for the car to start. This four-way match is robust against theft, which is also why a single swapped module breaks the start handshake and why recovery is done at the BIU.

Why do you require a photo of the BIU or BCM label first?

Because Subaru coverage varies by year and trim. The label confirms the exact module and lets us verify your car is in the supported blade-key generation before you ship. It prevents a wasted shipment on a car we cannot cover.

Can you do this through the OBD port instead of the bench?

For all-keys-lost on these cars the reliable path is a bench EEPROM read of the BIU, often from a 24C02 chip. That bypasses the OBD security gate and works from the chip-level data, which is why the module is mailed in.

Why might you need a door lock cylinder?

Only when a mechanical blade must be cut and there is no working key to copy. The bitting is encoded in the lock, so the cylinder or a dealer key code lets us cut a blade that physically turns the ignition. The transponder is programmed from the BIU data regardless.

Is the BRZ, FR-S, or Toyota 86 really covered here?

Yes. The BRZ from 2013-2020, the Scion FR-S from 2013-2016, and the Toyota 86 from 2017-2020 share the platform and immobilizer approach with the blade-key Subarus, so they are part of this service. Send the label photo and VIN to confirm.

How long will I be without my car?

You are without the BIU, not the car, during shipping and the bench window. Bench turnaround is 24 hours from arrival, plus transit each way. The car waits where it is parked.

Is this standard locksmith work?

Yes. Reading a BIU to recover an all-keys-lost situation for the registered owner is normal automotive locksmith and module work. The immobilizer exists because of federal anti-theft standards under 49 CFR Part 541, and restoring access for the legitimate owner is exactly what this service does.

Ready to ship

If you have a 2012-2017 blade-key Subaru, or a BRZ, FR-S, or Toyota 86, that lost all keys, the bench is the dependable route. Start by sending a clear photo of the BIU or BCM label and the VIN so we can confirm coverage, then complete the Subaru BIU key programming order at the flat 350 dollar rate including the key. Pack the BIU and ship to Auto Module Lab, 1168 W Pioneer Parkway, Arlington TX 76013. We read the BIU, recover the immobilizer data, program your key into the matched set, and ship it back within a 24-hour bench turnaround, via the flat-rate return tier you chose at checkout (from 14.95 dollars). Adrian Torres has been an automotive locksmith since 2012 and has run module and key benches across Texas and Florida; the about page covers that background. Browse the full services list for other Subaru modules, and remember the label photo always comes first.