X
Tech
Why you can trust ZDNET : ZDNET independently tests and researches products to bring you our best recommendations and advice. When you buy through our links, we may earn a commission. Our process

'ZDNET Recommends': What exactly does it mean?

ZDNET's recommendations are based on many hours of testing, research, and comparison shopping. We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. And we pore over customer reviews to find out what matters to real people who already own and use the products and services we’re assessing.

When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. Neither ZDNET nor the author are compensated for these independent reviews. Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers.

ZDNET's editorial team writes on behalf of you, our reader. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. If we have made an error or published misleading information, we will correct or clarify the article. If you see inaccuracies in our content, please report the mistake via this form.

Close

7 cool and useful things to do with your Flipper Zero

Forget all the fake Flipper Zero nonsense you see on TikTok. Here are a bunch of very real and impressive things I've used it for.
Written by Adrian Kingsley-Hughes, Senior Contributing Editor
Flipper Zero reading an NFC security key

Flipper Zero reading an NFC security key.

Adrian Kingsley-Hughes/ZDNET

I love my Flipper Zero, but what I hate is all the fake stuff that people looking for attention are uploading to TikTok. No, the Flipper Zero can't change gas station signs, can't clone credit and debit cards, and can't (normally, anyway) turn off the displays at your favorite burger joint.

But that doesn't mean that the Flipper Zero can't do some very cool, and also very useful things.

Also: Flipper Zero can be used to crash iPhones running iOS 17, but there's a way to foil the attack

Over the past few months, I've been making use of the suite of hardware tools that are built into the Flipper Zero. What's built into this tiny toy-like tool

There's a sub-GHz wireless antenna that can capture and transmit wireless codes to operate wireless devices and access control systems, such as garage door remotes, boom barriers, IoT sensors, and even remote keyless systems. 

RFID support allows it to read, store, and emulate a number of different RFID cards.

Also: Do RFID blocking cards actually work? My Flipper Zero revealed the truth

It can also read, write, store, and emulate NFC tags.

On the front, there's a 1-Wire connector that can read and emulate iButton (aka DS1990A, CYFRAL, Touch Memory, or Dallas key) contact keys.

There's also a built-in infrared transceiver that can both capture and transmit IR codes to control things like TVs.

Finally, on the top there are GPIO connectors that allow the Flipper Zero to connect to other gadgets in the real world.

Also: How to unlock the Flipper Zero's true power

That's a lot of features crammed into a tiny, $169 device.

But every week, I hear from buyers who are frustrated and disappointed because their Flipper Zero won't do the things that it can seemingly do based on fake social media videos.

Here are some of the things I've been doing with my Flipper Zero over the past few weeks.

View at Flipper Zero store

Note: I'm running third-party software on my Flipper Zero, which gives me access to a bunch of additional features. But worry not, loading third-party software doesn't invalidate your warranty and you can go back to the stock software easily at any time using the Flipper Zero app on a desktop, laptop, or mobile device.. 

1. Testing car key fobs

Testing a car key fobs
Adrian Kingsley-Hughes/ZDNET

The sub-GHz wireless antenna can pick up the signals from car key fobs (and can record them, although playing them back to modern cars won't unlock them because of a feature called "rolling codes" that changes the code with each use).

Also: The best security keys you can buy (and how they work) 

This is a handy way to test if the key is working and the battery is good.

2. Reading/saving/emulating NFC

Flipper Zero reading an NFC output from a smartphone
Adrian Kingsley-Hughes/ZDNET

NFC is everywhere nowadays, and the Flipper Zero allows you to work with this wireless protocol. It's built into plastic cards and fobs, and used for all sorts of things, from unlocking hotel room doors to controlling barriers.

NFC can be read by the Flipper Zero. Many NFC cards can also be copied and cloned (this depends on the security used for the card, and I can't give you any hard and fast rules as to which NFC devices can be cloned).

Also: The best VPN services (and how to choose the right one for you)

Note that while the Flipper Zero can read NFC cards and fobs, it cannot decode the card's encrypted security code, also known as CSC, CVV, CVC, CAV, and a bunch of other three-letter abbreviations.

Flipper Zero cannot decode the card's encrypted security code so it cannot clone bank cards

Flipper Zero cannot decode the card's encrypted security code, so it cannot clone bank cards.

Adrian Kingsley-Hughes/ZDNET

3. Reading and unlocking RFID tags and cards

Reading an RFID card
Adrian Kingsley-Hughes/ZDNET

Along with NFC, the Flipper Zero can read and clone RFID, including hotel cards (as in the picture, above).

Also: How RFID tags can make in-person clothes shopping less frustrating

RFID cards and tags can be locked to prevent them from being overwritten, but the Flipper Zero can bypass many of these mechanisms. Here, it is offering to unlock the card if I present it to a valid reader, allowing me to clone the card and unlock the door using both the card and the Flipper Zero. 

I've used this to clone access cards and fobs for all sorts of buildings, and many times the staff -- and sometimes owners of the buildings -- were unaware of the fact that this trick was possible.

Th e Flipper Zero can unlock some RFID cards and tags

The Flipper Zero can unlock some RFID cards and tags.

Adrian Kingsley-Hughes/ZDNET

4. Bypassing Sentry Safe security

Yes, the Flipper Zero can unlock some electronic safes
Adrian Kingsley-Hughes/ZDNET

Yes, the Flipper Zero can bypass the security on some Sentry Safe electronic safes using an output from the GPIO. 

This is definitely not something you want to be doing if it isn't your safe or you don't have permission, but it goes to show just how insecure the "complimentary" safes found in hotels, spas, and Airbnbs actually are.

5. Universal infrared remote control

The Flipper Zero has infrared capability
Adrian Kingsley-Hughes/ZDNET

The Flipper Zero has a built-in infrared module, and this in turn can be programmed to operate a wide range of devices, from TVs to AC units. Pretty much any consumer device that has an IR remote control interface can be controlled using the Flipper Zero.

Another cool use of this functionality is to test if infrared remote controls are working. Point the remote control at the Flipper Zero in the "read IR" mode and it will detect the signals.

Testing a dismantled infrared remote control

Testing a dismantled infrared remote control.

Adrian Kingsley-Hughes/ZDNET

6. Automating scripts in a variety of platforms

Flipper Zero can act as a BadUSB device, which means that when connected to a port it is seen as a Human Interface Device (HID), such as a keyboard. 

Also: The best VPN services for iPhone and iPad (yes, you need to use one)

A BadUSB device can change system settings, open backdoors, retrieve data, initiate reverse shells, or do anything that can be achieved with physical access. These tasks are completed by using a set of commands written in the Rubber Ducky Scripting Language, also known as DuckyScript

Flipper Zero opens a browser and navigates to a webpage with no user input.

Adrian Kingsley-Hughes/ZDNET

7. Signal generator

Configuring the signal generator settings
Adrian Kingsley-Hughes/ZDNET

The Flipper Zero can use the GPIO to output electrical signals and act as a signal generator. I last used this to simulate an antilock braking system module on a vehicle to confirm that all the wiring and computers in the car were working.

GPIO pinout

GPIO pinout.

Adrian Kingsley-Hughes/ZDNET

BONUS! Crashing iPhones and spamming Android handsets

Using Apple BLE Spam to spam an iPhone with popups
Adrian Kingsley-Hughes/ZDNET

Now, I don't recommend you do this unless your "victims" give you permission, because it can annoy people and is very likely to be illegal in most places, but the ease with which a Flipper Zero can crash an iPhone or carry out a denial of service (DoS) attack on Android devices is scary. 

With a few taps, the Flipper Zero can flood devices within a 30-foot radius with popups, making them near impossible to use. And so far, the only defense against this technique is to turn off Bluetooth.

Editorial standards