Unlock your Tesla, safely.
TeslaKee is a secure replacement for the official Tesla PhoneKey. It uses Android StrongBox to securely store credentials and prevents BLE relay attacks by requiring motion and location confirmation before passive entry is enabled.
Available for Android devices
Privacy First: None of your privacy-relevant information (personal data or key-material) ever leaves your device!
Security First
Mitigate BLE Relay Attacks
The official app broadcasts your key continuously. TeslaKee intelligently stops broadcasting when you aren't near your car or aren't moving, stopping thieves in their tracks. It is a smart replacement for missing Ultra-Wideband (UWB) hardware in either the phone or the vehicle. If your phone or car lacks UWB, you are advised to use TeslaKee to protect against BLE relay attacks. The stock app also responds to any spoofed vehicle that broadcasts a valid challenge — meaning anyone running a fake Tesla beacon can detect that your phone (and therefore you) is nearby. This is useful for stalking, surveillance, or tracking. TeslaKee's policy engine refuses these spoofed challenges as well, protecting both your car and your privacy.
StrongBox Keystore
Your cryptographic keys are generated and stored inside the secure element of your device, making them impossible to extract even if your device is compromised.
Motion Detection
Passive entry automatically disables if your phone has been sitting still for more than 5 minutes. No more relay attacks while your keys are on the kitchen counter.
Geofencing
Restrict key access to specific zones. Make sure your car cannot be unlocked while parked at home or at work unless you explicitly want to.
NFC Card Emulation
The Android version of TeslaKee fully supports NFC Host Card Emulation. Simply tap your phone on the B-pillar to unlock and drive, just like the official physical key card. Perfect as a reliable backup when BLE is intentionally blocked or unavailable.
Take Charge
Full Control of Your Key
TeslaKee puts you — not Tesla, not a cloud, not an attacker — in charge of when your phone acts as a key. Every gate, every command, every override is decided on your device, by you. The stock Tesla app responds to BLE authentication requests unconditionally; TeslaKee responds only when you say so.
On-Device Decisions
Every policy check runs locally on your phone — no cloud round-trip, no third-party service deciding when you can unlock your car. The decision to respond to the vehicle is made on the device, in milliseconds.
Manual Lock/Unlock
Lock, unlock, open the trunk or frunk, control the charge port — directly from the app, anytime. Free-tier users always keep these basic vehicle commands, regardless of policy state.
Kill Switch
One tap deactivates the entire app. Your phone stops scanning, stops responding to vehicle authentication requests, and drops any open connection. It stays off until you reactivate from the home screen.
Your Rules, Your Keys
The cryptographic key is generated inside your phone's StrongBox secure element and never leaves it. No remote disable, no forced telemetry, no updates that change anti-relay behavior without your consent — you own the key.
Advanced Policy Engine
Define exactly when and where your phone should act as a key.
Time Windows
- Only allow passive entry during specific hours of the day, restricting access overnight.
Trusted WiFi
- Require your phone to be disconnected from your home WiFi network before the key becomes active.
Manual Overrides
- Temporarily bypass all policies with a 15-minute emergency override via a quick tile setting.
Geofencing
- Restrict key access to specific zones. Make sure your car cannot be unlocked while parked at home or at work unless you explicitly want to.
Last Parked Location
- TeslaKee remembers where your car was last locked and only allows passive entry when your phone is within a configurable radius (25–1000 m) of that spot — automatically captured on every lock event.
BLE RSSI Floor
- TeslaKee can require the vehicle's Bluetooth signal to be stronger than a configurable threshold (e.g. −80 dBm) before responding. A relay attacker has to either amplify the signal (suspicious) or work through a weak relayed link — both fail this check.
Step Count Gate
- TeslaKee can require a minimum number of detected walking steps within the last few minutes. An attacker relaying BLE while your phone sits on the kitchen counter has not been walking — and can't fake step events on the phone.
Altitude Lock
- When your vehicle is locked, TeslaKee remembers the barometric altitude. Passive entry is only allowed when the phone's current altitude is within a few metres of that baseline. Useful for catching relays staged on a different floor of a building.
Screen State
- TeslaKee can require the device to have been unlocked recently — or to be unlocked right now. A phone sitting locked in a drawer or pocket can't pass this gate, defeating the classic relay scenario.
Allowed Cell Towers
- Pin passive entry to a user-defined set of cellular cell IDs (e.g. the cells visible at home and work). Cell-tower spoofing from another physical location is much harder than GPS spoofing, and the check is entirely on-device.
Last-Lock Cell IDs
- TeslaKee snapshots all visible cell towers at the moment the vehicle is locked. Passive entry then requires at least one of those cells to still be visible — strong proof that the phone is physically near where it was parked.
Auth Frequency Throttle
- Cap the number of authentication responses TeslaKee sends per minute and per hour. A legitimate user triggers a handful of unlocks per hour; an automated relay loop would blow past this limit and get blocked at the rate limit, not at any policy rule.
Compatible Vehicles
TeslaKee works with any Tesla vehicle that supports the PhoneKey feature via Bluetooth Low Energy (BLE).
Simple, transparent pricing
Start securing your vehicle today. Upgrade anytime to add more cars.
Basic
Free
Everything you need for a single vehicle.
- Manage 1 Vehicle
- Basic Policy (Motion)
- No Geofencing
Premium
€2.99 / mo
For households with multiple Tesla vehicles.
- Unlimited Vehicles
- Advanced Security Policies
- Geofencing
TeslaKee - Secure Passive Entry