Secure Encryption Key: This is what Vanmoof owners must do now!

The close integration of hardware and software brings dangers with it: If a manufacturer goes bankrupt, the servers may be shut down, and in the worst case, purchased products are useless for the end user. This happened, for example, with Peloton competitor Flywheel, whose exercise bikes were useless in one fell swoop after a patent dispute.

At Vanmoof, of course, the case is somewhat different. Here, each bike has an individual key, the so-called Encryption Key. This is stored both in the user's account and in the bike. If both match, the bike can be unlocked via the app—and you can ride off with your Vanmoof bike.

If Vanmoof closes down and shuts down all servers, you will no longer be able to access your key. That means you won't be able to use your bike with third-party apps in the future. Competitor Cowboy had released an app last week that addresses this very issue and lets Vanmoof users secure the key. However, the app does not work on Fabi's Vanmoof bike.

How to secure the encryption key of your Vanmoof bike

How you can secure the encryption key of your Vanmoof bike with the help of an open-source project, you can read in this tutorial—and you should definitely do it as soon as possible!

Step 1: Install Docker Desktop

First, you need a runtime environment in which you can run the open-source tool. We use Docker Desktop for this purpose, which you have to download and install from the Docker website in the first step. Once the program is ready to run, we'll continue with the second step.

Step 2: Install the Vanmoof Encryption Key Exporter

1. Now you need to install the Vanmoof Encryption Key Exporter. First, you have to download the project from GitHub. Click on the green "Code" button on the page and select "Download ZIP". Then extract the archive into a directory.
2. Now you just need to install the project in Docker Desktop. We have done this under Mac OS X. To do this, open Terminal and change to the directory where you extracted the project. With the command 'ls' the terminal shows you the content of the current folder, with 'cd' and <directory name> you change to the desired folder.
3. Once you have reached the desired folder, you only have to copy the following command into the terminal and confirm it with Enter: 'docker-compose up -d'.
4. In our version of Mac OS X, the installation of an additional tool was requested, but failed. The Vamoof Encryption Key Exporter worked anyway. You can see if it worked in Docker Desktop—here the Vamoof Encryption Key Exporter should show up after a successful installation—and be displayed as "Running".

Step 3: Read the Vanmoof key from your account

The third step is to go to the following address in your browser: "http://localhost:3000". The tool should now display a web page.

If you log in here with your Vanmoof account, the tool will extract your individual key. If you save this data, you can later unlock your Vanmoof bike with a third-party app—even if the bike manufacturer goes bankrupt and shuts down its servers.

Step 4: Wait and see and continue to enjoy the summer with your Vanmoof

Apart from the Cowboy app for iOS, which was launched last week (and doesn't work for us), we don't know of any app that can unlock your Vanmoof bike or even extract the encryption key. However, it won't be long until corresponding solutions are available—and in any case, you are on the safe side if you have saved your key.

What do you think about the development that hardware only works as long as the manufacturer's services are running? And have you already secured the key on your Vanmoof bike?