How the decoder works
We first check the VIN: it must have 17 characters, use no letters I, O or Q, and pass the check digit in position nine. A VIN that fails is refused with the reason, before any request is made.
A valid VIN is then decoded with the vPIC service of the US National Highway Traffic Safety Administration, which publishes vehicle data for the public.
Reading the result
Fields with no data are shown as not available. That means NHTSA has no value for the field, not that the vehicle lacks the feature.
A partial decode means the manufacturer filed only some details. The notes from the decoder explain what is missing.
The airbag and safety rows describe equipment the manufacturer reported for that model, not the condition of the vehicle you are looking at.
Limits worth knowing
The data is strongest for vehicles sold in North America. Vehicles built elsewhere may not have a valid check digit and may decode only in part. The API can skip the check digit when you ask it to.
A VIN decode is not a vehicle history report. It does not show accidents, owners, mileage or recalls.
Frequently asked questions
Why was my VIN refused?
It has the wrong length, uses a letter that VINs never contain, or fails the check digit. The message tells you which. A single mistyped character is the usual cause.
Where does the data come from?
From the public vPIC database of the US National Highway Traffic Safety Administration.
Does it show accident or ownership history?
No. It decodes what the VIN says about how the vehicle was built.
Can I decode a VIN from a car built outside North America?
Often, in part. Use the API with the check digit option for vehicles whose VIN does not follow the North American rule.