Flipper Zero
The Flipper Zero is a handheld multi-tool built around the STM32WB55 dual-core Cortex-M4/M0+, combining sub-GHz RF (CC1101, 300-928 MHz), 13.56 MHz NFC (ST25R3916), 125 kHz LF RFID, infrared, iButton, BLE 5.0, USB-C, and a 1.4-inch monochrome LCD into a 100x40x25mm housing with a 2000 mAh battery. It is the reference handheld for ham-radio experimentation, access-card research, and IR / RF interoperability testing — not a general-purpose ESP32 dev board.
Best if you need sub-GHz, NFC, 125 kHz RFID, iButton, and IR in one device; skip if you want WiFi tinkering or Meshtastic — a T-Deck or ESP32-S3 dev kit is the right tool.
Where to Buy
Pros
- Multi-radio: sub-GHz (CC1101), 13.56 MHz NFC, 125 kHz LF RFID, infrared, iButton, and BLE 5.0 in one device
- Polished firmware with a structured app / plugin model — usable out of the box, not a breadboard project
- Open firmware (GPL) plus a large third-party firmware ecosystem (Unleashed, RogueMaster, Xtreme)
- Up to 7 days typical use, ~30 days deep standby — genuinely pocketable as an everyday tool
- USB-C works as CDC, mass storage, HID-automation, or a developer-use U2F token (no secure element — not a 2FA replacement)
Cons
- No onboard WiFi — requires the WiFi Devboard (ESP32-S2) add-on for WiFi-side work
- No camera, no MicroPython-class development story — not a learning platform for embedded programming
- Sub-GHz transmit is firmware-restricted in the stock firmware; many jurisdictions limit TX legally
- Monochrome 128x64 LCD — readable but basic versus a T-Deck's 320x240 colour IPS
What the Flipper actually is
The Flipper Zero is a purpose-built multi-radio handheld. The STM32WB55 host runs a structured app framework; the CC1101 transceiver handles sub-GHz (300-348, 387-464, 779-928 MHz); the ST25R3916 handles 13.56 MHz NFC; a dedicated LF frontend handles 125 kHz RFID; and the onboard radio co-processor handles BLE 5.0. Add IR (38/56 kHz), 1-Wire iButton, and a USB-C port that can act as CDC, HID, or mass storage, and you have the tool most access-card researchers and hobbyist RF experimenters reach for first.
The Tamagotchi housing and the dolphin mascot are marketing, but they matter: the device is small, sturdy, has physical buttons, and runs up to 7 days of typical use or roughly 30 days in deep standby. You can carry it every day. That changes what projects you actually get around to.
Why it's not a T-Deck replacement (and vice versa)
The overlap people expect doesn't exist. Flipper has no WiFi, no LoRa, no Meshtastic-class radio, no colour display, no keyboard. T-Deck has no sub-GHz, no NFC, no LF RFID, no IR. They cover complementary radio spectrums.
Pick Flipper when your work is access cards, remotes, and IR. Pick T-Deck (Plus / Pro) when your work is Meshtastic, WiFi-side tinkering, or ESP32-S3 prototyping with a keyboard. The two devices are bought together often enough that you should plan for that case if your radio needs span both spectrums.
Firmware ecosystem
Stock firmware is stable, signed, and restricts sub-GHz transmit to compliant frequencies and protocols. Third-party firmware forks (Unleashed, RogueMaster, Xtreme) unlock more protocols, wider frequency ranges, and community-contributed apps. Flashing a third-party firmware is officially supported via qFlipper; reverting to stock is a one-click operation.
For development, the ufbt tool runs on macOS / Linux / Windows and builds apps against the official SDK. The learning curve is closer to embedded C than to Arduino. ESPHome, PlatformIO, and MicroPython do not apply here.
The firmware fork ecosystem deserves special attention. Unleashed firmware (21K+ GitHub stars) is the most popular alternative, adding extended sub-GHz frequency ranges, rolling code protocols, and community apps while maintaining a stable, well-documented codebase. Momentum firmware is a newer fork focused on UI customization and performance. The official Flipper Lab app store hosts 500+ community-contributed apps that work across firmware variants, covering everything from Bluetooth gamepad emulation to signal analysis tools to retro games that run on the monochrome LCD.
Legal Considerations and Responsible Use
The Flipper Zero's multi-radio capabilities sit in a legal grey area that varies by jurisdiction, and understanding the boundaries matters for keeping the device legal to sell and own.
What is generally legal: reading and emulating NFC and RFID cards you own (your building access badge, your transit card for backup), learning IR codes from your own TV and AC remotes, receiving and analyzing sub-GHz signals on ISM bands (433 MHz, 868 MHz, 915 MHz depending on region), using BLE for legitimate device pairing, and USB HID automation on your own computers. These are the core use cases the Flipper was designed for, and they fall within standard hobbyist and security-research exemptions in most countries.
What is illegal in most jurisdictions: cloning access cards you do not own or are not authorized to test, jamming or interfering with radio signals on any frequency, replaying garage door or car key fob signals to access property you do not own, intercepting communications you are not a party to, and transmitting on frequencies outside your region's permitted ISM bands. Many of these activities carry criminal penalties — unauthorized access to computer systems, signal interference, and theft of services are prosecuted under laws like the US Computer Fraud and Abuse Act, the UK Computer Misuse Act, and equivalent statutes worldwide.
The Flipper community self-polices aggressively. The official Flipper Discord and Reddit moderate posts about unauthorized use. Stock firmware restricts sub-GHz transmit to regionally compliant frequencies and protocols. Third-party firmware forks that unlock wider frequency ranges carry explicit disclaimers about legal responsibility. Flipper Devices, the manufacturer, has fought import bans (notably in Canada and Brazil) by demonstrating that the device's capabilities are comparable to any software-defined radio or NFC reader available off the shelf — the novelty is the integrated form factor, not unique offensive capability. The device remains legal to purchase and own in the US, EU, UK, and most other markets as of early 2026.
Modules, Accessories, and Expanding Capabilities
The Flipper Zero's GPIO header enables hardware expansion modules that address its biggest gaps. The official WiFi Devboard (ESP32-S2) adds WiFi scanning, deauthentication analysis, and Marauder firmware support — transforming the Flipper from a no-WiFi device into a competent WiFi analysis tool, though a bare ESP32-S3 or T-Deck remains simpler for WiFi-only work. The Video Game Module (RP2040-based) adds a second microcontroller for game development, GPIO breakout, and sensor integration projects.
Third-party accessories extend the Flipper further. External CC1101 antennas with SMA connectors improve sub-GHz range significantly over the internal PCB antenna — useful for analyzing weather stations, remote sensors, and ISM-band devices at greater distances. Protective silicone cases with button cutouts are near-essential for everyday carry. A 32GB microSD card stores IR remote databases, sub-GHz signal captures, NFC card dumps, and the growing library of community-contributed apps.
The accessory ecosystem is mature for a device this niche. Amazon alone stocks 30+ Flipper-specific modules and accessories. The official Flipper Lab app store hosts 500+ community apps covering everything from Bluetooth gamepad emulation to custom sub-GHz protocol decoders to retro games. This ecosystem depth is a moat: the Flipper's hardware is reproducible (all components are commodity), but the firmware ecosystem, app store, and community knowledge base took years to build and cannot be easily replicated by a competitor.
Common Gotchas
Sub-GHz range with the built-in antenna is mediocre — 10-30 meters for most signals. For practical garage door or gate recording, you need to be much closer than you would expect. An external antenna via the GPIO header improves range significantly.
Rolling code key fobs (most cars made after 2000) cannot be cloned. The Flipper can capture the signal but cannot replay it because each code is used only once. This is the number one misconception — the Flipper is NOT a car theft device.
Battery life is 7-10 days in standby but drops to 2-4 hours with continuous Sub-GHz scanning or IR brute-forcing. The 2000mAh battery drains fast during active radio use. Carry a USB-C cable for full-day RF exploration.
The stock firmware intentionally limits some Sub-GHz frequencies to comply with regulations. Third-party firmware (Unleashed, Momentum) unlocks these frequencies but may violate local radio laws. Know your country's ISM band regulations before installing custom firmware.
Full Specifications
Processor
| Specification | Value |
|---|---|
| Architecture | ARM Cortex-M4 + Cortex-M0+ (radio) [1] |
| CPU Cores | 2 [1] |
| Clock Speed | 64 MHz [1] |
Memory
| Specification | Value |
|---|---|
| Flash | 1 MB [1] |
| SRAM | 256 KB [1] |
| flash_external | ~8 MB QSPI flash (firmware assets and protocol database) [2] |
Connectivity
| Specification | Value |
|---|---|
| bluetooth | BLE 5.0 (via Cortex-M0+ radio co-processor) [1] |
| sub_ghz | CC1101 transceiver (300-348, 387-464, 779-928 MHz) [1] |
| nfc | 13.56 MHz NFC (ST25R3916) — read, write, emulate [1] |
| rfid_125khz | 125 kHz LF RFID (EM4100, HID Prox, Indala, etc.) [1] |
| infrared | IR transceiver (38/56 kHz) [1] |
| ibutton | 1-Wire iButton read/emulate [1] |
I/O & Interfaces
| Specification | Value |
|---|---|
| Display | 1.4" monochrome 128x64 LCD [3] |
| GPIO Pins | 18 (GPIO header) [3] |
| USB | USB-C (CDC / mass storage / HID) [3] |
| SD Card | MicroSD slot [3] |
| buttons | 5-way D-pad + back button [3] |
| vibration | Haptic motor [3] |
| speaker | Piezo speaker [3] |
Power
| Specification | Value |
|---|---|
| battery | 2000 mAh Li-Po, USB-C charging [1] |
| runtime_days | 7-30 days typical standby days [1] |
Physical
| Specification | Value |
|---|---|
| Dimensions | 100 x 40 x 25 mm [3] |
| weight_g | 102 g [3] |
| Form Factor | Handheld multi-tool (Tamagotchi-style housing) [3] |
Who Should Buy This
The Flipper's NFC (ST25R3916) and LF RFID reader cover the common card formats — MIFARE Classic / Ultralight / DESFire, EM4100, HID Prox, Indala — and emulation works where firmware and hardware allow. No other sub-$250 handheld comes close for this workload.
The CC1101 covers 300-348 / 387-464 / 779-928 MHz, which captures the bulk of ISM-band remotes. Firmware exposes raw capture and protocol decode for analysis of devices you own. Transmit is region-gated in stock firmware and subject to local regulation.
The CC1101 is short-range ISM, not long-range LoRa, and firmware support for Meshtastic is not a first-class feature. The LilyGo T-Deck Plus or a T-Beam is the right tool.
Better alternative: LilyGo T-Deck
Stock Flipper has no WiFi. The official WiFi Devboard (ESP32-S2) adds it via GPIO and runs Marauder / ESP32Marauder firmware. A T-Deck or bare ESP32-S3 costs less and has WiFi on the main board.
Better alternative: LilyGo T-Deck
Flipper firmware is a C / ufbt application framework, not Arduino / MicroPython. For learning, start on an ESP32-S3-DevKitC-1 or Arduino Uno R4 where tutorials and toolchains are mature.
Better alternative: ESP32-S3-DevKitC-1
Ecosystem & Community
The Flipper Zero has one of the most active open-source firmware ecosystems in consumer electronics, with Unleashed (21K stars), Momentum, and 400K+ Reddit members sharing apps, configs, and radio databases.
Compatible Software
What to Build First
Use the Flipper's NFC reader to analyze access cards you own (MIFARE Classic, Ultralight) and the IR blaster to capture and replay TV, AC, and projector remotes. Within 10 minutes of unboxing you can consolidate your home remotes into one device and start learning about RFID protocols.
View tutorial →Must-Have Accessories
Tutorials & Resources
- Video Game Module for Flipper Zero ReviewReview of the RP2040-based Video Game Module covering game development capabilities and GPIO expansionreview
- Best Flipper Zero AccessoriesCurated guide to the most useful Flipper Zero add-ons including WiFi board, cases, and antenna upgradesreview
Frequently Asked Questions
Is the Flipper Zero a Wi-Fi hacking tool?
Not on its own. The stock Flipper Zero has no WiFi radio — it uses BLE 5.0 only. The official Flipper WiFi Devboard (ESP32-S2) adds WiFi via the GPIO header and runs Marauder firmware for WiFi analysis. A bare ESP32-S3 dev kit costs less and is simpler for WiFi-only projects.
Can the Flipper Zero clone all RFID / NFC cards?
Only clone cards you own or are explicitly authorized to test. For cards you own, the Flipper can read and emulate common 125 kHz LF formats (EM4100, HID Prox, Indala) and common 13.56 MHz formats (MIFARE Classic, MIFARE Ultralight, some DESFire). It cannot clone cards that rely on dynamic authentication (modern DESFire EV2/EV3, secure MIFARE Plus). Unauthorized cloning of access cards, payment cards, or transit cards is illegal in most jurisdictions and can carry criminal penalties — verify your local laws and the authorization scope before testing.
Flipper Zero vs LilyGo T-Deck: which should I buy?
They cover different radios. Flipper Zero for sub-GHz, NFC, 125 kHz RFID, IR, and iButton. T-Deck (Plus/Pro) for LoRa / Meshtastic, WiFi tinkering, ESP32-S3 prototyping, and projects that need a keyboard and colour display. If you only buy one, pick Flipper for access-card / RF work and T-Deck for off-grid messaging / WiFi.
Does the Flipper Zero run Meshtastic?
No. The CC1101 is not a LoRa chip and Meshtastic is not a first-class Flipper firmware target. For Meshtastic use a T-Deck Plus, T-Beam, RAK WisBlock, or Heltec V3.
Is the Flipper Zero legal to own?
Ownership is legal in most jurisdictions. Use is regulated: transmitting on sub-GHz bands you are not licensed for, cloning cards you do not own, or intercepting communications are all restricted activities in most countries. A 2023 ANATEL ruling in Brazil blocked imports, and the status has been subject to revisions — we do not track current import status. Verify with your local regulator before travelling with one or importing, since the regulatory landscape for devices with sub-GHz TX and multi-radio capability has been fluid since 2023.
Can I develop my own apps for the Flipper Zero?
Yes. The ufbt build tool targets the official SDK and runs on macOS, Linux, and Windows. Apps are written in C and use a defined view-model API. Python and Arduino IDE are not supported — the platform is closer to bare-metal embedded than to maker-friendly toolchains like PlatformIO.