1. Connect via BLE
The watch scans for your Tesla over BLE, lets you select a vehicle, and can remember the MAC for faster reconnects.
Amazla connects to your Tesla over Bluetooth (BLE), establishes a secure VCSEC session, and sends authenticated, encrypted commands directly from your watch.
What happens from the moment you tap on the watch to the action in your car.
The watch scans for your Tesla over BLE, lets you select a vehicle, and can remember the MAC for faster reconnects.
A secure session is negotiated using ECDH (key exchange) and SHA-1 derived session keys, with epoch/counters tracked for replay protection.
Commands like lock/unlock, frunk/trunk, charge port, and HVAC are packaged as VCSEC actions, authenticated (HMAC) and encrypted (AES-GCM) on the watch.
After sending actions, the watch reads the updated vehicle status (battery, temperatures, doors, etc.) and refreshes what you see instantly.
To keep the watch fast, crypto logic is localized and uses pre-generated/session-key pools for future sessions. If the pool is running low, it may request replenishment via the companion/phone app in the background.
Key point: daily commands run on the watch (BLE + VCSEC) — no server control in the middle.
Install Amazla and pair your Tesla once. After that, most actions are available from your watch while you’re within BLE range.
Note: available actions depend on the Tesla model and on Bluetooth connection state.