Immobilizer Bypass for Starter/Alarm, 2007 Subaru STI

A couple of questions...     I gather its a Subaru STI, but what year?   Did the shop that installed the remote starter take and use a working key from you or did they have an extra key made and programmed to your car? 

A Subaru needs a working key for the R/S bypass.  The goal is to temporarily bypass the immobilizer system during remote start and only remote start.  The extra key is hidden under the dash and sometimes the blade part of the key is removed ( or never cut ) to prevent theft.  The fact that your car can be started with a plain metal key means you have lost the anti-theft capability of the immobilizer system!!  

subarus require a dealer scan too to program the bypass. i highly doubt the shop would bring it to a suby dealer and have them do it.

a few questions:

did you give them 2 keys, and when you picked up the car, only one key was returned?

if so, they used a key in box style bypass, where one key is buried under the dash. if done correctly, you can only start the car with a chipped key. if you can with a regular key cut from a local hardware store, most likely they bypassed the system completely OR the transponder bypass is constantly on. as kregs mentioned, the bypass itself should only be activated during remote start.

i know the canadian models have the transponder, but maybe yours doesnt.

I think Subaru started using transponders in them in 2005. 

Not sure on Subaru's but on a Dodge with a key-in-box transponder by-pass, if you put a working transponder key in the cylinder, but don't turn it,  and then start the car with the R/S it won't start and it will give you a security light.  It doesn't like seeing two valid keys at the same time...