Skip to content
Now offering both SFD (instant) and SFD2 (manual) unlock tokens
sfdcode
Volkswagen Group

VAG SFD and VAG SFD2 — what changes between generations?

Both guard sensitive coding behind challenge-response workflows, but “VAG SFD” usually means generation 1 with instant fulfilment, while VAG SFD2 routes through a manual supplier pipeline — mixing them wastes credits.

What “VAG” covers here

We mean Volkswagen Group passenger and light-commercial ECUs that expose Schutz Fahrzeug Diagnose locks — VW, Audi, Škoda, SEAT/CUPRA and related MAN-linked platforms when the same security dialogs appear.

Brand badges matter less than ECU software generation: identical routines often span multiple marques.

sfdcode only supports authorised workshop scenarios — misuse requests are declined.

VAG SFD — generation 1 in practice

Technicians usually label this simply “SFD” or generation 1.

Your scan tool exports an offline challenge (hex string or QR); our backend derives the unlock token automatically once payment clears.

Delivery is measured in seconds to about a minute — ideal for bays that cannot afford hour-long waits.

Pricing stays lowest because cryptography scales without per-job human labour.

VAG SFD2 — generation 2 in practice

SFD2 reflects newer protections on MQB Evo, PPE and evolving MEB stacks — supplier contracts mean tokens cannot be minted purely inside our datacenter.

We broker challenges through audited partners; fulfilment aligns with our published manual SLA (typically hours, not seconds).

Expect higher price points — you are paying for operator coordination and scarce supplier capacity, not just TLS uptime.

How to identify which generation an ECU wants

Trust the diagnostic session first: OEM-grade tools increasingly print explicit generation labels alongside SFD dialogs.

Never infer solely from model year forums — identical chassis codes shipped mixed ECU revisions.

If wording is ambiguous, capture screenshots (blur sensitive IDs) and email support before purchasing.

Stale offline challenges also mimic wrong-generation failures — always regenerate immediately before checkout.

Checkout discipline for workshops

Guest checkout forces an explicit generation toggle — mirror exactly what the ECU reports.

Panel customers should segregate prepaid credits per generation so technicians cannot accidentally debit the wrong bucket mid-shift.

Document module hex ID plus generation pairs for fleet vehicles — repeat visits become painless.

Pack purchases of ten or more credits route through the signed-in credits shop — keep procurement aligned with accounting policies.

Where to go next

Need tool-specific screenshots? Continue with OBDeleven, VCDS, VCPC or Autel guides.

Buying once? Guest checkout stays fastest.

Running volume? Load prepaid packs after signing into the panel.

Still researching?

Pair this guide with our shorter blog definitions or proceed once your tool reports the generation explicitly.