[Tutorial] Get Refreshtoken on Windows + Powershell + Python + Selenium (maybe add to Wiki)

[Puma7]

Kia Europe — Get a Refresh Token on Windows (Python + Selenium)

Kia’s EU login flow now requires solving a Google reCAPTCHA. Because CAPTCHAs can’t be automated safely, most API clients (e.g., Home Assistant integrations) no longer accept your Kia password. Instead, you must log in once in a real browser and then use the resulting refresh token. This guide shows the simplest, working method on Windows using Python + Selenium.

Security: Treat your refresh token like a password. Anyone with it can access your Kia account and car.

---

Requirements

• Windows 10/11
• Google Chrome installed
• Python 3.10+ (invoked as py on Windows)
• Ability to open a normal Chrome window (you will solve reCAPTCHA manually)

No additional browser extensions are needed.

---

Quick Start (copy & paste)

Open PowerShell and run the following commands in order:

mkdir $env:TEMP\kia 2>$null; cd $env:TEMP\kia
py -m venv .venv
.\.venv\Scripts\Activate.ps1
pip install --upgrade pip
pip install selenium requests webdriver-manager

# Script holen
iwr -UseBasicParsing -OutFile KiaFetchApiTokensSelenium.py `
  https://gist.github.com/fuatakgun/fa4ef1e1d48b8dca2d22133d4d028dc9/raw/fe95ed7c02913f6277878a100458be78b794603d/gistfile1.txt

# Starten
py .\KiaFetchApiTokensSelenium.py

What happens next

1. A Chrome window opens with the correct mobile user agent required by Kia.

2. Log in to your Kia account and solve reCAPTCHA.

3. Once login succeeds, the script completes the OAuth flow and prints:

   • Refresh Token ← use this as your “password” in clients (e.g., Home Assistant)
   • Access Token (usually not needed for clients)

Store the refresh token securely (password manager). Do not post or share it.

---

Use the refresh token in Home Assistant

• Integration: Kia UVO / Kia Connect (EU)
• Region: EU
• Brand: Kia
• Username: your Kia account email
• Password: the refresh token from the script output
• PIN: only if your integration asks for a vehicle PIN

---

Why we recommend this method

• It’s user-friendly: you log in once in a real Chrome window, and the script handles the rest.
• It’s reliable: avoids manual “code copy/paste” races (those short-lived codes expire quickly and often cause Invalid parameters errors).
• No browser add-ons or UA tweaking required — the script sets everything.

---

Troubleshooting (focused on this method)

The Chrome window doesn’t open / driver error

• Ensure Chrome is installed and up to date.

• Some corporate environments block ChromeDriver downloads. Try on a home network or allow the download temporarily.

• You can re-run:

  .\.venv\Scripts\Activate.ps1
  pip install --upgrade selenium webdriver-manager
  py .\KiaFetchApiTokensSelenium.py

I log in, but the script never prints tokens

• Keep the Chrome window visible and complete the login fully (reCAPTCHA + credentials) until you land on Kia’s site.
• If the script still doesn’t detect the redirect, close everything and run the commands again (a fresh session is quick).

Access denied / network errors

• Ensure your network allows outbound connections to prd.eu-ccapi.kia.com:8080.
• VPNs/proxies/firewalls may interfere; try a different network (e.g., mobile hotspot) if needed.

Lost the refresh token or suspect compromise

• Treat it like a password: revoke sessions/log out from the Kia app and repeat the steps here to generate a new token.

---

Notes for maintainers

• The script is fetched from the referenced Gist and encapsulates the full “login → capture redirect → exchange code → print tokens” flow for Kia Europe.
• This page intentionally avoids alternate flows (manual code exchange, curl/PowerShell POSTs) to keep end-user friction minimal and reduce failure modes.

[timezone3000]

Thank you for this guide on Windows.
it has worked for me.

Thanks to all involved in getting this working again!

[cdnninja]

I have added this to https://github.com/Hyundai-Kia-Connect/hyundai_kia_connect_api/wiki/Kia-Europe-Login-Flow Thank you for providing this!

[timtheGoat]

Does this method work for Hyundai U.K?

[Puma7]

It should work, you can simply try

[timtheGoat]

Hi, I have, it won't accept my user name and password. *Best Regards* *Tim Smith * - Technical Director *Unit 46 Queens Court Trading Estate* *Greets Green Road* *West Bromwich* *West Midlands* *B70 9EQ* *T*: 0121 557 3837 *F*: 0121 520 6226 *M*: 07747025415 *W*: www.gotronic.co.uk For all accounts inquiries, please contact the accounts team at ***@***.*** Gotronic Ltd is a company registered in England & Wales with company number 3776064 Registered Office: As Above Vat No. 729 9424 92 IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email by mistake, please notify the sender immediately and do not disclose the contents to anyone or make copies thereof.

…

On Fri, 26 Sept 2025, 17:54 Puma7, ***@***.***> wrote: It should work, you can simply try — Reply to this email directly, view it on GitHub <#1320 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AZMAVSGZMXZYIMA5476K5433UVVTDAVCNFSM6AAAAACHCP4LFGVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINJSGQ2DSMA> . You are receiving this because you commented.Message ID: <Hyundai-Kia-Connect/kia_uvo/repo-discussions/1320/comments/14524490@ github.com>

[Puma7]

you mean username and token, not the password?
Have you used your mail as user and: "Refresh Token ← use this as your “password” in clients (e.g., Home Assistant)"

[timtheGoat]

Hi, When I run the script, I enter the same user name and password as my Bluelink app, and it will not accept them. *Best Regards* *Tim Smith * - Technical Director *Unit 46 Queens Court Trading Estate* *Greets Green Road* *West Bromwich* *West Midlands* *B70 9EQ* *T*: 0121 557 3837 *F*: 0121 520 6226 *M*: 07747025415 *W*: www.gotronic.co.uk For all accounts inquiries, please contact the accounts team at ***@***.*** Gotronic Ltd is a company registered in England & Wales with company number 3776064 Registered Office: As Above Vat No. 729 9424 92 IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email by mistake, please notify the sender immediately and do not disclose the contents to anyone or make copies thereof.

…

On Sun, 28 Sept 2025, 09:22 Puma7, ***@***.***> wrote: you mean username and token, not the password? Have you used your mail as user and: "Refresh Token ← use this as your “password” in clients (e.g., Home Assistant)" — Reply to this email directly, view it on GitHub <#1320 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AZMAVSAIV7S5DHRL6JZAEZL3U6LETAVCNFSM6AAAAACHCP4LFGVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINJTGI4TAMI> . You are receiving this because you commented.Message ID: <Hyundai-Kia-Connect/kia_uvo/repo-discussions/1320/comments/14532901@ github.com>

[Puma7]

ok, possibly the UK is using something else than "https://idpconnect-eu.kia.com", but in the past it used the same url then the rest of europe. Can you simply log in on this url or does it solso tell you that your login is incorrect: https://idpconnect-eu.kia.com/auth/api/v2/user/oauth2/authorize?ui_locales=de&scope=openid+profile+email+phone&response_type=code&client_id=peukiaidm-online-sales&redirect_uri=https%3A%2F%2Fwww.kia.com%2Fapi%2Fbin%2Foneid%2Flogin&state=aHR0cHM6Ly93d3cua2lhLmNvbS9kZS8

[timtheGoat]

Hi, I can login there but that is probba ly because I created another login id with the same details as my bluelink. *Best Regards* *Tim Smith * - Technical Director *Unit 46 Queens Court Trading Estate* *Greets Green Road* *West Bromwich* *West Midlands* *B70 9EQ* *T*: 0121 557 3837 *F*: 0121 520 6226 *M*: 07747025415 *W*: www.gotronic.co.uk For all accounts inquiries, please contact the accounts team at ***@***.*** Gotronic Ltd is a company registered in England & Wales with company number 3776064 Registered Office: As Above Vat No. 729 9424 92 IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email by mistake, please notify the sender immediately and do not disclose the contents to anyone or make copies thereof.

…

On Mon, 29 Sept 2025, 10:02 Puma7, ***@***.***> wrote: ok, possibly the UK is using something else than " https://idpconnect-eu.kia.com", but in the past it used the same url then the rest of europe. Can you simply log in on this url or does it solso tell you that your login is incorrect: https://idpconnect-eu.kia.com/auth/api/v2/user/oauth2/authorize?ui_locales=de&scope=openid+profile+email+phone&response_type=code&client_id=peukiaidm-online-sales&redirect_uri=https%3A%2F%2Fwww.kia.com%2Fapi%2Fbin%2Foneid%2Flogin&state=aHR0cHM6Ly93d3cua2lhLmNvbS9kZS8 — Reply to this email directly, view it on GitHub <#1320 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AZMAVSGVVUOMQAPMWNH6UDT3VDYSRAVCNFSM6AAAAACHCP4LFGVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINJTHE4TQMA> . You are receiving this because you commented.Message ID: <Hyundai-Kia-Connect/kia_uvo/repo-discussions/1320/comments/14539980@ github.com>