Cybersecurity

Customer safety and privacy continue to be a priority for GM. We strive to protect the safety and privacy of our customers, their vehicles, and their data through a robust cybersecurity strategy. We continue to invest in our cyber team, tools, and industry partnerships to help to make our vehicles smarter, safer, and more secure for our customers. 

On this page, you will find security tips and best practices to help you protect your personal information and actions you can take to report security concerns to GM.

Protect Your Credentials

Attackers are constantly looking for ways to steal user IDs and passwords, allowing them to gain unauthorized access to sensitive information and services.

  • Keep your password safe, and do not share it with others. Sharing this information can put both your personal information and your vehicle at risk. These credentials are used to remotely control your vehicle, add services, and change account information. Consider these risks before sharing information with anyone.
  • Use different passwords for different accounts.
  • Instead of a password, try a passphrase. Find a hard to guess, but easy to remember passphrase that contains numbers, letters, and symbols. The longer the passphrase, the more secure it is.
  • Change your passwords and PINs frequently.
  • Immediately change your password if you think it is compromised.
  • Don’t be predictable. When you change your password, don’t follow a predictable pattern. For example, if your password is ZebraIce01, don’t replace it with ZebraIce02.

Use Multi-Factor Authentication (MFA) if Possible

Multi-factor authentication (MFA) can be used to help protect your account from unauthorized access by requiring you to enter a security code when you sign in. To add an extra layer of protection to your GM.com account, you can set up MFA today. See our FAQ section for details on how to configure MFA on your account.

Mobile Device Security

  • Unsolicited Calls or Text Messages: Be suspicious if someone is asking about information you do not know.
  • Bluetooth®: Disable Bluetooth® when you are not using it. Airplane mode does not always disable Bluetooth®.
  • Wi-Fi: DO NOT connect to public, untrusted Wi-Fi networks. Disable Wi-Fi when not needed.
  • Physical Control: Maintain physical control of the device. Avoid connecting to unknown removable media.
  • Device PIN: Use a strong lock-screen pin, password, or biometrics (e.g., fingerprint, face) authentication to protect your information in case your device is lost or stolen.
  • Malicious Applications: Use official application stores and only install trusted applications.
  • Software Updates: Update device software and applications as soon as possible or turn on auto updates if available.
  • Location: Disable location services when not needed.

Email Security

Be on the lookout for Phishing emails aiming to obtain sensitive information. 

  • Don’t click on links or open attachments in unexpected emails.
  • Always be suspicious of emails requesting your ID, password, or other personal information.
  • Report suspicious emails.

Vehicle Security

  • Security incidents could impact your safety or compromise your private data. To minimize security risks, do not connect your vehicle electronic systems to unauthorized devices or connect your vehicle to any unknown or untrusted networks, such as Bluetooth®, Wi-Fi, or similar technologies.
  • If you have concerns about the safe operation of your vehicle, find a safe place to pull over and contact OnStar by pressing the blue OnStar button.

Resetting or Deleting Personal Information When Selling a Vehicle

  1. Visit GM Support Center: Vehicle How-to, Information & Help 
  2. Scroll toward the bottom of the page and select “Manuals and Guides.”
  3. Select your appropriate vehicle from the pull-down menus.

Refer to the Infotainment Manual for your vehicles’ exact instructions related to resetting or deleting your personal information.

  Back to Top

If you have information related to security vulnerabilities of General Motors products or services, we want to hear from you. Please submit a report in accordance with the guidelines listed here. We value the positive impact of your work and thank you in advance for your contribution.

Submit a report.

  Back to Top

To report a vulnerability concern, submit it here. To report a security concern, send an email to cyber@gm.com.

Visit here to activate your MFA (logon required).

  1. Visit GM Support Center: Vehicle How-to, Information & Help 
  2. Scroll toward the bottom of the page and select “Manuals and Guides.”
  3. Select your appropriate vehicle from the pull-down menus.

Refer to the Infotainment Manual for your vehicles exact instructions related to resetting or deleting your personal information.

Report phishing emails to your email provider or internet service provider.

You may send phishing emails to cyber@gm.com for GM awareness.

  Back to Top

For any general security questions, send an email to cyber@gm.com.

  Back to Top