GM SPS & Secure Gateway Key Programming in Fort Worth (2026)
If you've been told that a newer Chevrolet, GMC, or Cadillac key "can't be programmed by a locksmith anymore," you've run into GM's Secure Gateway — and the truth is more nuanced than that. Since 2018, GM has wrapped a security firewall around the vehicle's data network, and any tool that writes to the car, including a key programmer, has to authenticate through it. That doesn't lock out locksmiths; it locks out shops without the right credentials. This 2026 guide explains GM's SPS and Secure Gateway (SGM) architecture, what it means for your key, honest Fort Worth pricing, and why the credentials your locksmith holds now matter as much as the tools they carry.
We're a mobile locksmith based in Fort Worth serving all of Tarrant County. We come to the vehicle, confirm whether your GM requires gateway authorization from the VIN, and quote the exact price before we start. Call (817) 668-3801 for a real number.
Quick Answer: GM Secure Gateway Key Programming
As of July 2026, programming a key on a 2018-or-newer GM vehicle in Fort Worth requires passing the Secure Gateway, which means the locksmith needs current NASTF Secure Data credentials with active GM authorization. Mobile GM smart key programming runs roughly $275–$500+ with a working key present and higher for all-keys-lost. The gateway step is real, but a properly credentialed mobile locksmith handles it on site — you don't automatically need the dealer.
Fort Worth GM Key Pricing (Mobile vs Dealer)
Ranges only — exact figures depend on model, year, and whether a working key is present. As of July 2026:
| GM key work | Mobile locksmith | GM dealer | Notes |
|---|---|---|---|
| Spare key, pre-gateway (before ~2018) | $150–$300 | $250–$450 | No gateway step |
| Smart key, 2018+ Secure Gateway, working key | $275–$450 | $450–$650 | Gateway authorization required |
| All-keys-lost, 2018+ Secure Gateway | $400–$575+ | $600–$850+ | Longer security workflow |
| Module programming needing SPS | Quote after diagnosis | Varies | Depends on module and access |
Dealer figures climb once a tow is added for a vehicle that won't start, plus bay-rate labor ($165–$215/hr in DFW) billed in 1.5–2 hour blocks.
How GM SPS and the Secure Gateway Work
SPS — Service Programming System
SPS is GM's official online programming platform — the same backbone the dealer uses to flash modules and program keys. It's not a locksmith gimmick; it's the manufacturer's system. On modern GM vehicles, legitimate key and module programming is authorized through SPS, which is why access to it matters.
SGM — the Secure Gateway Module
Starting around 2018, GM installed the Secure Gateway Module as a firewall between the diagnostic (OBD) port and the vehicle's internal data buses. Before the SGM, a tool plugged into the OBD port could talk to security functions relatively freely. After the SGM, any write operation — key programming included — has to complete an authenticated handshake that GM verifies against its online system. A tool that can't authenticate simply can't reach the car's security functions.
What NASTF Access Means
The National Automotive Service Task Force (NASTF) runs the Secure Data Release program that gives credentialed, background-checked locksmiths legitimate access to manufacturer security functions — GM's included. A locksmith with current NASTF Secure Data credentials and active GM gateway authorization can pass the SGM and program your key on site. This is the honest dividing line in modern GM work: it's not "locksmith versus dealer," it's "credentialed versus not." You can verify a locksmith's standing publicly through the NASTF registry.
Which GM Vehicles Are Affected
Broadly, 2018-and-newer Chevrolet (Silverado, Tahoe, Suburban, Equinox, Traverse, Malibu), GMC (Sierra, Yukon, Acadia, Terrain), Cadillac (Escalade, XT4/XT5/XT6, CT4/CT5), and Buick vehicles use the Secure Gateway architecture — though exact coverage varies by model and year. Older GM vehicles on Passlock or the earlier transponder platforms don't hit the gateway at all; those keys are simpler and cheaper. Our guide on GM/Chevy all-keys-lost programming in Fort Worth covers the recovery workflow across generations, and if your issue is an ABS or brake-module fault rather than a key, see our ABS module programming guide.
Common GM Secure Gateway Situations We See
- The 2019+ Silverado all-keys-lost. A work truck loses every key on a jobsite. The recovery routes through the Secure Gateway, and a credentialed mobile locksmith can do it where the truck is parked.
- The Cadillac spare that needs adding. Even adding a second smart key to a 2020 Escalade routes through the gateway — but it's still the cheaper, faster job than waiting until all keys are gone.
- The "my tool won't talk to the car" shop. Owners sometimes call after another shop couldn't program the key. Nine times out of ten that shop lacked gateway authorization — the car is fine, the credentials were missing.
Why a Spare Still Matters on Modern GM
The Secure Gateway raised the floor on all-keys-lost complexity, which makes keeping a spare even more valuable on 2018+ GM vehicles. If your Chevrolet, GMC, or Cadillac currently has one working smart key, adding a spare now — through our smart key programming or car key replacement pages, or the GMC key services or Chevrolet key services pages — is far cheaper than the all-keys-lost recovery you'd face later.
The Diagnostic Step
On modern GM work, the first thing we do isn't touch the key — it's confirm what your vehicle actually requires. From the VIN we determine whether your Chevrolet, GMC, Cadillac, or Buick sits behind the Secure Gateway or on an older, simpler platform, because that one fact changes the tools, the workflow, and the price. It also tells us whether the job needs live gateway authorization against GM's online system or can be handled with more conventional access. This matters because guessing is expensive: a shop that arrives assuming an older workflow on a 2020 truck discovers at the car that it can't authenticate, and you've lost time. We confirm the gateway status and the exact key or module involved up front, verify our GM authorization covers your vehicle, and only then quote a firm price. If the job turns out to involve deeper module programming through SPS rather than a straightforward key, we identify that at diagnosis and tell you before any work begins — no surprises mid-job.
What to Expect When We Come Out
A GM appointment in Fort Worth starts on the phone with your year, model, and VIN so we can confirm gateway status before we dispatch. At the vehicle, we verify you own it against the VIN, then connect to the OBD port and — on a 2018-or-newer vehicle — complete the authenticated Secure Gateway handshake through GM's system using our NASTF credentials. From there we cut the mechanical blade to your VIN if the key has one, program the smart key or fob, and test: the vehicle has to recognize the key, start cleanly, and run its remote functions before we're finished. If your key just needs re-syncing rather than replacing, we'll tell you that too. With a working key present, plan on a straightforward visit; all-keys-lost on a Secure Gateway vehicle takes longer because the security workflow is longer. You stay with the vehicle the entire time, you're never at a service desk, and you drive away on the key we just programmed — the legitimate way, through GM's own security rather than around it.
What Can and Can't Be Done Through the Gateway
The Secure Gateway generates a lot of confusion, so it's worth being precise about what a credentialed mobile locksmith can and cannot do.
What we can do on site
With current NASTF Secure Data credentials and active GM authorization, we can add a spare smart key, replace a lost key, and handle all-keys-lost on most 2018-and-newer Secure Gateway vehicles — right where the vehicle is parked. The gateway is a firewall we authenticate through, not a wall that stops all outside work. On older GM vehicles that predate the gateway, the job is simpler and cheaper still.
Where the honest limits are
We won't claim to bypass GM's security — legitimate work authenticates through it, and any shop promising to "get around" the gateway is a red flag. Some deeper module programming through SPS depends on the specific module and vehicle and is quoted after diagnosis. And a shop without gateway authorization genuinely cannot reach these functions — that's the real dividing line, and it's why "another shop couldn't do it" almost always means missing credentials rather than an impossible job. We work only on vehicles you can prove you own.
Why Modern GM Keys Cost More Than They Used To
If a newer GM key feels more expensive than the one you replaced a decade ago, the Secure Gateway is a big part of the reason. Before 2018, a capable tool plugged into the OBD port could reach security functions relatively directly, so key programming was faster and the barrier to entry was lower. The gateway added an authenticated, online-verified step to every write operation, which means the locksmith now has to maintain credentials, pass background vetting through NASTF, and keep active manufacturer authorization current — real ongoing costs that didn't exist before. It also lengthened the all-keys-lost workflow, adding time at the car. None of that makes the work impossible; it makes it credential-dependent. The upside for you is that the same security raising the cost is also what makes these vehicles harder to steal — and it's exactly why keeping a registered spare, added while a key still works, is the cheapest insurance against the pricier all-keys-lost recovery down the road.
What All-Keys-Lost Looks Like on a Secure Gateway GM
All-keys-lost is the scenario owners worry about most on a modern GM, so it helps to know what actually happens. With no working key to lean on, the locksmith first authenticates through the Secure Gateway using current NASTF credentials, then works through GM's security to establish access and teach the vehicle a fresh key from scratch. It's a longer workflow than adding a spare — more steps, more time at the vehicle — which is why it sits higher on the price sheet. What it is not, on most 2018-and-newer Chevrolet, GMC, Cadillac, and Buick vehicles, is a dealer-only job: a credentialed mobile locksmith can complete it where the vehicle is parked, with no tow. The two things that make the visit smooth are proof of ownership — which we require, because all-keys-lost on a vehicle you can't document is exactly the situation the gateway exists to prevent — and the VIN, so we confirm gateway status and bring the right key. If your GM is down to a single working key today, that's the moment to add a spare and skip this longer, costlier recovery entirely.
The Honest Boundary
On credentialed work, 2018+ GM key programming — including all-keys-lost — is doable in your Fort Worth driveway. The genuine constraints are (1) the locksmith must hold current NASTF/GM authorization, which we do, and (2) some deeper module programming through SPS depends on the specific module and vehicle, which we quote after diagnosis. We won't claim to bypass GM's security — we authenticate through it the legitimate way, and we work only on vehicles you can prove you own.
Serving Fort Worth and Tarrant County
We cover Fort Worth, Arlington, Keller, and the rest of Tarrant County as a fully mobile automotive locksmith and module programming service. As a Texas locksmith we operate under the Texas Department of Public Safety (DPS) Private Security Bureau.
Frequently Asked Questions
What is GM's Secure Gateway Module (SGM)?
The Secure Gateway Module is a firewall GM added to 2018-and-newer vehicles that sits between diagnostic tools and the car's data network. Any tool that writes to the car — including key programming — must pass an authenticated handshake through it, verified against GM's online system.
What is SPS in GM programming?
SPS (Service Programming System) is GM's official online programming platform. For 2018+ vehicles with the Secure Gateway, key and module programming is authorized through SPS, which requires valid credentials to reach the car.
Can a locksmith program a 2018-or-newer GM key in Fort Worth?
Yes, a locksmith with current NASTF Secure Data credentials and active GM gateway authorization can program keys on Secure Gateway vehicles. Shops without that access cannot reach the car's security functions, which is why credentials matter on modern GM work.
How much does GM secure gateway key programming cost?
As of July 2026, mobile GM smart key programming in Fort Worth runs roughly $275–$500+ with a working key present, higher for all-keys-lost on Secure Gateway vehicles. The added gateway authorization step is part of why newer GM keys cost more than older ones.
Does adding a spare GM key still need secure gateway access?
On 2018+ GM vehicles, yes — even adding a key routes through the Secure Gateway. It is still cheaper and faster to add a spare while a key works than to face an all-keys-lost recovery later.
Do you come to me in Fort Worth for GM key programming?
Yes. We are fully mobile and come to wherever the vehicle is parked across Fort Worth and Tarrant County. Call (817) 668-3801 with your year, model, and VIN.
Which GM vehicles use the Secure Gateway?
Broadly, 2018-and-newer Chevrolet, GMC, Cadillac, and Buick vehicles use the Secure Gateway architecture, though exact coverage varies by model and year. Give us the VIN and we confirm whether your vehicle requires gateway authorization.
Get Your Modern GM Key Programmed in Fort Worth
Don't let "a locksmith can't do it anymore" send you straight to a dealer tow. Call (817) 668-3801 with your year, model, and VIN, and we'll confirm whether your GM requires Secure Gateway authorization and quote the exact price before we start. We come to you anywhere in Fort Worth and Tarrant County — the legitimate, credentialed way.
Written by the Fort Worth Locksmith & Computer Programming team — mobile GM key and module programming across Fort Worth and Tarrant County.