As of September 2026, “plug and play, programmed to your VIN” is true on a narrow set of platforms and misleading on most of the rest — and the gap is almost always the immobiliser, not the software. A remanufacturer can load the right calibration for your VIN without ever seeing your car. What it cannot do from a warehouse is marry the controller to your immobiliser system, register your keys, or write the configuration that depends on options only your vehicle has.
This post is for the moment before you click buy: what the seller can genuinely deliver, what will still be waiting for you in the driveway, and what to ask so the answer is on the record before the money is.
Three things get bundled into one phrase
“Programmed” is doing an enormous amount of work in those listings, and it hides three separate operations that succeed and fail independently.
Calibration.The manufacturer's software for your engine, transmission, market and model year. A reman house with a subscription can absolutely load this against a VIN before shipping, and when a listing says “programmed to your VIN” this is usually the honest part of the claim.
Configuration. Which options this particular vehicle was built with, where the module sits on the network, and the VIN itself as the module records it. Some of this travels with the calibration; a meaningful amount of it does not, and on some platforms it has to be written with the module in the car.
Immobiliser marriage. The cryptographic relationship between the engine controller, the immobiliser module and your keys. This is the one that cannot be done remotely, by design, because a controller that arrives pre-married to an arbitrary vehicle would defeat the entire point of the system.
| Operation | Can a warehouse do it? | If not, what it needs |
|---|---|---|
| Load calibration for your VIN | Yes, with a subscription | — |
| Write VIN into the module | Usually yes | Session, where the platform writes it in-car |
| Option configuration | Partly | Session against the vehicle's build data |
| Immobiliser marriage | No | Session, or an IMMO-OFF file on supported families |
| Key registration | No | Session with the keys present |
| Adaptations and relearns | No | In-session resets plus a drive cycle |
When plug and play is genuinely true
It is not always marketing. There are real cases where a controller arrives, goes in, and the car starts.
The clearest is a platform whose engine controller is not part of the immobiliser chain at all — where authorisation lives entirely in a separate immobiliser box that is staying in the car. Swap the engine controller and nothing about the security relationship changed.
The second is an exchange unit rebuilt from your own module, or one where the reman house has transferred your immobiliser data onto the replacement board. That is effectively a clone, and our clone versus IMMO-OFF versus virgin post explains why it is the cleanest of the three outcomes when it is available.
The third is a unit supplied genuinely virgin on a platform where the vehicle writes its own immobiliser data into a blank controller on first key-on. Several platforms do exactly this, and on those the claim is accurate.
Outside those three, expect a step in the driveway.
The questions to ask before you pay
Four of them, and they are short enough to send as a message.
Is this unit virgin, VIN-locked to a donor, or cloned from my old one? This single answer determines the entire downstream plan, and a seller who cannot answer it is telling you they do not know what they are shipping.
What exactly did you program, and with what?A specific answer naming the manufacturer application is a good sign. “It is fully programmed” is not an answer.
Will my existing keys work, or will they need registering?If the answer is that keys are unaffected, ask them to say why — on a platform where the engine controller holds immobiliser data, that claim needs an explanation.
What is the return policy if it does not start? The useful version is a policy that survives the module having been installed and attempted. Electrical parts are frequently sold non-returnable once fitted, which means the risk of a wrong answer to the first three questions lands entirely on you.
“Ask whether it is virgin or locked before you ask the price. Half the units I see arrive locked to a car in another state, and the buyer paid a premium for the word programmed.” — Remote programming desk, ECU Flash Cartel
Part numbers: same is not the same
The other half of the problem is matching. Hardware part numbers, software part numbers and the physical connector can all differ between units that look identical and carry near-identical labels, and our guide to reading an ECU label breaks down which field is which. Our used-ECU matching guide is the checklist to run before buying anything, and it applies just as much to a remanufactured unit as to a breaker's shelf: a reman house can only supply what it has, and what it has is sometimes a near-match with a different build-date revision.
Photograph your own module's label before you order and run it through our free identifier. Two minutes there prevents the most expensive version of this mistake, which is a unit that arrives, does not fit the harness, and cannot go back.
Exchange, core charges and what you are actually buying
The word “reman” covers at least three commercial arrangements, and they carry different outcomes for the immobiliser question.
Outright sale.You buy a unit from stock. It was built from somebody else's core, which means whatever immobiliser data it holds is not yours. This is the arrangement most likely to need a session on arrival.
Exchange with a core charge.You buy a unit from stock and return yours for a refund. Functionally the same as an outright sale for our purposes — the unit that arrives was not built from your module — but worth understanding because the core charge is often what makes the headline price look competitive.
Repair and return of your own unit. You send yours, they fix it, you get it back. This is the arrangement that preserves your immobiliser data, and it is the one most likely to genuinely be plug and play. It is also the slowest, which is why it is rarely the default option offered.
If the listing does not say which of the three it is, that is the first question rather than the fourth.
A realistic timeline
People plan for the shipping and not for the rest, then find the car is down longer than expected.
Identification and ordering is a day if the label photograph is taken up front and a week if the wrong unit arrives first. Shipping is whatever shipping is. Fitting is an afternoon.
The step that gets omitted from the plan is the session, and it is the one with a dependency: it needs the module fitted, the vehicle accessible, a battery maintainer on it and a laptop with a J2534 interface. Booking that for the same day the part is due to arrive is optimistic; booking it for the day after the part is fitted is realistic.
One platform-specific note worth planning around: a first Mopar job needs about 24 hours of J2534 registration before the session can run. On every other platform, and on every subsequent Mopar job, that does not apply.
Reading a listing critically
Four phrases recur, and each means something narrower than it sounds.
“Programmed to your VIN.” Usually true, and usually refers to the calibration only. It says nothing about the immobiliser.
“No programming required.” True on the three platform types where it is true, and marketing everywhere else. Ask which of the three applies to your car.
“Tested before shipping.” Tested on a bench rig, which confirms the module powers up and communicates. It cannot confirm anything about how it behaves married to your vehicle, because it was never in your vehicle.
“Lifetime warranty.” Read what voids it. Electrical parts fitted and returned are frequently excluded, which is the exact scenario a wrong unit produces.
None of these are necessarily dishonest. They are compressed, and the compression consistently favours the seller — which is why the four questions above are worth sending before the money moves rather than after the part arrives.
What it looks like when a step was skipped
The symptoms are consistent enough to be diagnostic.
Cranks, fires briefly, dies. Classic immobiliser refusal. The software is fine; the authorisation is not. Our security-light no-start guide works through the branch.
Runs, but the dash is full of unrelated faults. Configuration mismatch. The module is running correct software while believing it is in a differently equipped car, and our VIN mismatch post covers the family of faults that produces.
No communication with the module at all. U0100 and its relatives, which can be power, ground, the bus, or a module that never woke. Our U0100 post separates the wiring causes from the module causes, and our swapped-ECU no-start post is the wider failure tree for a freshly fitted controller.
Starts and runs badly for the first few miles. Often not a fault at all — adaptations are empty and relearning. Which relearns apply, and which need a drive cycle rather than a scan tool, is set out in our relearn index.
Finishing the job
Whatever the warehouse did or did not do, the remaining steps are ordinary and priced. An OE programming session on one of the eight platforms on our flash pageruns $100 for GM, $150 for Ford/Lincoln, Nissan/Infiniti and Mazda, and $250 for Toyota/Lexus, Volvo, VW/Audi and Mopar — and the module type does not change the price. That session performs the configuration, the immobiliser marriage and the key registration through the manufacturer's own application, which is the only route that leaves the security system intact afterwards.
Where the platform is one of the 20 variants on our coverage matrixwith IMMO-OFF listed live, a $100 file is an alternative — but it is a different decision, not a cheaper version of the same one, because it removes the theft deterrent rather than satisfying it.
Standards and the legal line
Independent access to this work exists because SAE J2534 standardises the pass-thru interface and NASTF administers the secure-access registry for credentialed functions. On the buying side, the Federal Trade Commission publishes guidance for sellers on how goods may be described, which is worth knowing exists when a listing's claims and the delivered part disagree.
We do not provide emissions defeat, delete files, or services intended to bypass emissions laws. Our services exist for tuning preparation, diagnostics, repair, motorsport, and off-road use where legally permitted. Customer is responsible for confirming legal use in their location and application.
Five questions worth asking before you buy
Every one of these can be answered by a reputable seller in a sentence, and the answers determine what the finishing session costs.
Is this unit virgin, donor-locked, or cloned to my VIN? Three different downstream jobs. A seller who cannot say is telling you something.
What hardware number is on the label?Not the model year, not the engine size — the number printed on the controller. Photograph yours and compare.
What calibration level is loaded? Useful to know, rarely final. Expect to update it during the session regardless.
Was the immobiliser data cleared?A donor unit that still holds another vehicle's security data is the hardest of the three cases and occasionally the unrecoverable one.
What is the return policy if it will not marry? Ask before, not after. The answer is a reliable signal about how often it happens to them.
The short version
A warehouse can load your calibration. It cannot marry your immobiliser or register your keys, and on most platforms that is the step that decides whether the car starts. Ask whether the unit is virgin, donor-locked or cloned before you ask the price, match the label rather than the model year, and budget one session for the finish. Book it on the flash pageand say what was replaced and where it came from — those two facts route the job correctly before anybody touches the car.