u/traznifor

So you figured out SFD1. Got the token, did your coding, moved on.

Meet SFD2.

Rolled out on VAG cars from early 2024 onwards - Golf 8 facelift, Audi A3 8Y, Octavia IV and newer MEB models. And it works completely differently.

With SFD1 you got a 90-minute open window. Do whatever you need, one token covers it all.

SFD2 doesn't work like that.

Every single change requires its own signed token from VW servers. Change one parameter - get a token. Change another - new token. Different value - new token again.

There is no session. There is no window. Just permission requests, one by one.

And it's not replacing SFD1 either - it's stacked on top of it. So now you're dealing with both at the same time.

Most retrofits and hidden feature activations? Blocked completely without manufacturer approval.

The era of just plugging in VCDS and doing what you want is officially over.

Have you hit SFD2 yet? What were you trying to code?

Tried coding something on a newer VAG car and got "Access denied"?

Congrats, you've just met SFD (Schutz Fahrzeug Diagnose).

It's an additional security layer that requires authorization between the car and VW's servers. No token, no access. Simple as that.

I first ran into it on a Skoda Octavia IV when I just wanted to enable a couple of basic adaptations via OBD. Connected, entered the control module - denied. Took me a while to figure out it wasn't my tools or software. The module was just locked behind SFD.

SFD is used on cars from 2020 onwards - mainly MQB Evo (Golf 8, Octavia IV, Leon IV, Audi A3 8Y) and MEB platforms (ID.3, ID.4, Enyaq). It blocks adaptations, coding and parameterization.

Tokens are only issued through official accounts to registered users. So a regular enthusiast without dealer-level access simply can't get one.

Have you run into SFD yet? Which module blocked you?