← How-Tos
flipper-zero Jul 3, 2026 ◑ 1 views ◯ 2 min read

Cloning Garage/Gate Remotes: What Works, What's Protected

flipper zerosub ghzgarage doorgate remotecloning

Only Do This on Equipment You Own

This guide covers cloning your own garage/gate remote as a legitimate backup — same legal and ethical footing as copying a house key. Don't point this at anything you don't have explicit authorization to access.

Step 1: Identify Your Remote's Frequency

Check the FCC ID printed on the back of your existing remote — searching that ID on the FCC's public database (fcc.gov/oet/ea/fccid) tells you the exact operating frequency, which is faster and more reliable than scanning blind. Common frequencies in North America are 300MHz, 315MHz, and 390MHz; Europe commonly uses 433MHz.

Step 2: Read the Signal

Flipper > Sub-GHz > Read. Set the frequency to match what you found via FCC ID lookup (or use Read RAW / frequency analyzer mode if you don't know it, then narrow down). Press your remote's button close to the Flipper. If it's a recognized fixed-code protocol, Flipper will identify it by name (Princeton, Nice Flor-S, Came, etc.) and the capture is complete.

Step 3: Save and Test

Save the captured signal, then use Saved Signals > [your capture] > Send to test it against your actual garage door/gate. If it's fixed-code, this works immediately.

If It Doesn't Work: You're Likely Dealing With Rolling Code

Modern garage door openers (most systems installed in the last ~15-20 years) use rolling code specifically to prevent this kind of simple clone-and-replay. See the companion guide on fixed vs rolling code for the technical explanation of why a straight replay fails here — it's not a Flipper limitation, it's the security system doing its job.

Legitimate Options for Rolling-Code Systems

A Note on Flipper's Built-In Database

Flipper ships with signal definitions for many common fixed-code remotes under Sub-GHz > Saved > Add Manually — if you know your gate system's exact make/model and it's an older fixed-code system, you may be able to generate a working signal without even having the original remote present, directly from the protocol database.