Cloning Garage/Gate Remotes: What Works, What's Protected
Only Do This on Equipment You Own
This guide covers cloning your own garage/gate remote as a legitimate backup — same legal and ethical footing as copying a house key. Don't point this at anything you don't have explicit authorization to access.
Step 1: Identify Your Remote's Frequency
Check the FCC ID printed on the back of your existing remote — searching that ID on the FCC's public database (fcc.gov/oet/ea/fccid) tells you the exact operating frequency, which is faster and more reliable than scanning blind. Common frequencies in North America are 300MHz, 315MHz, and 390MHz; Europe commonly uses 433MHz.
Step 2: Read the Signal
Flipper > Sub-GHz > Read. Set the frequency to match what you found via FCC ID lookup (or use Read RAW / frequency analyzer mode if you don't know it, then narrow down). Press your remote's button close to the Flipper. If it's a recognized fixed-code protocol, Flipper will identify it by name (Princeton, Nice Flor-S, Came, etc.) and the capture is complete.
Step 3: Save and Test
Save the captured signal, then use Saved Signals > [your capture] > Send to test it against your actual garage door/gate. If it's fixed-code, this works immediately.
If It Doesn't Work: You're Likely Dealing With Rolling Code
Modern garage door openers (most systems installed in the last ~15-20 years) use rolling code specifically to prevent this kind of simple clone-and-replay. See the companion guide on fixed vs rolling code for the technical explanation of why a straight replay fails here — it's not a Flipper limitation, it's the security system doing its job.
Legitimate Options for Rolling-Code Systems
- Buy a second official remote from the manufacturer or a compatible universal remote (Chamberlain, LiftMaster, Genie all sell compatible clickers) and program it to your opener following the manufacturer's pairing procedure — this is the actual supported way to add a "backup" remote to a rolling-code system.
- Smart garage door controllers (MyQ, Meross, similar) that integrate with the opener's existing wiring and give you app-based control as a genuine alternative to carrying a physical remote at all.
A Note on Flipper's Built-In Database
Flipper ships with signal definitions for many common fixed-code remotes under Sub-GHz > Saved > Add Manually — if you know your gate system's exact make/model and it's an older fixed-code system, you may be able to generate a working signal without even having the original remote present, directly from the protocol database.
Related Guides
- Using Flipper Zero to Analyze and Clone Gate Remote Signals
- How to Hack Sub-GHz Radios with the Flipper Zero: Protocols, Analysis, and Signal Crafting
- Flipper Zero: Getting Started with BadUSB, Sub-GHz, and NFC
- Creating Your Own Sub-GHz Remote Profiles for Custom Devices
- Cloning and Emulating RFID/NFC Cards with Flipper Zero
- Sub-GHz Signal Capture and Replay on Flipper Zero
- Flipper Zero SubGHz: Reading, Recording, and Replaying RF Signals
- Sub-GHz Replay: Fixed Code vs Rolling Code Explained