Hi! Good question. The app will request pairing at the first connection. But, no password there at the moment. We're tending, for the start, to simplify the connection, installation as much as possible. Someone with the app will be able to connect outside woken car, but there's no way to attack...