Echelon fitness firmware lockout
Echelon pushed firmware update blocking third-party apps, requiring server authentication and breaking QZ compatibility for thousands of users
A July 2025 firmware update pushed by Echelon Fitness retroactively blocked third-party fitness applications from connecting to their devices. The update affected users of QZ (qdomyos-zwift), an open-source bridging application that enabled cross-platform compatibility with fitness platforms like Zwift, Peloton Digital, and others.
Background
QZ and Cross-Platform Compatibility
QZ (qdomyos-zwift) was created in September 2020 by Italian software engineer Roberto Viola.[1] The application functions as a Bluetooth bridge that intercepts proprietary communications from closed fitness devices & translates them into standard protocols compatible with other mainstreamfitness platforms.
For nearly five years, QZ maintained compatibility with Echelon devices, with Viola noting that the app "helped Echelon sell tens of thousands of bikes" by making them compatible with multiple training platforms.[2]
Echelon's Business Model
Echelon Fitness markets connected fitness equipment ranging from $500 entry-level models to $2,495 premium bikes.[3] The company operates a subscription service priced between $29.99-$39.99 monthly or $399.99-$699.99 annually for access to live and on-demand fitness content.
![Subscriptions from echelon's website [1]](/File:Echelon.png)
July 2025 Firmware Update
Server-based auth system
In July 2025, Echelon pushed a firmware update that implemented a server-based authentication system. The new system requires devices to:
- Connect to Echelon's servers during startup
- Receive a temporary, rotating unlock key for device operation
- Maintain internet connectivity for basic functionality
- Block all third-party Bluetooth communications without server validation[2]
According to Viola's technical analysis, the update is "non-reversible" - once installed, users cannot downgrade to previous firmware versions.[2]
Impact on Third-Party Applications
The firmware update completely blocks QZ & similar third-party applications from communicating with Echelon devices. This affects not only advanced features like automatic resistance control, but also prevents basic manual workouts without internet connectivity and server approval.[2]
Consumer Impact
Financial Losses
Users who purchased Echelon devices specifically for third-party compatibility are affected.
- They have hardware investments ranging from $500 to $2,495 for devices
- subscriptions cost $29.99-$39.99 monthly to get back functionality.
- Loss of free or alternative platform access previously enabled by QZ[2]
One affected UK user commented:
"I paid £1,199 for a bike in 2020, and a further £399 for 2 years of classes, so surely what I choose to do with the hardware I purchased outright is none of their business!"[2]
Elimination of Offline Functionality
The update removes all offline workout capabilities, requiring constant internet connectivity for any device operation. Users report being unable to perform basic manual workouts without server validation.[2]
Consumer Recourse
What to do if you own this bike
Roberto Viola recommends affected users:
- Avoid all firmware updates & disable automatic updates
- Delete Echelon app to prevent forced updates
- make sure tablets can't access internet independently
- File complaints with regulatory authorities[2]
References
- ↑ Roberto Viola (22 July 2025). "How I Built QZ—and How Echelon Is Now Breaking It". Retrieved 23 July 2025.
- ↑ 2.0 2.1 2.2 2.3 2.4 2.5 2.6 2.7 Roberto Viola (22 July 2025). "How I Built QZ—and How Echelon Is Now Breaking It". Retrieved 23 July 2025.
- ↑ "APP FAQs". Echelon Fit. Retrieved 23 July 2025.
- ↑ "Choose your Premier Subscription – Echelon Fit US".