Flipper Zero NFC Tools — Reading and Analyzing NFC Tags

The Flipper Zero's NFC reader can analyze tags you encounter in everyday life — hotel keys, transit cards, access fobs, and product tags.

Reading Any NFC Tag

1. NFC → Read
2. Hold tag to back of Flipper
3. Flipper identifies tag type and reads data
4. Save with a meaningful name

What Flipper Shows You

For any NFC tag:

• Tag type (MIFARE Classic, NTAG, DESFire, etc.)
• UID (unique ID — 4, 7, or 10 bytes)
• Protocol details
• Sector data (for MIFARE Classic, if keys are known)

MIFARE Classic Key Cracking

Many cheap access cards use MIFARE Classic with weak or default keys:

1. NFC → Read — Flipper tries known keys automatically
2. If sectors remain locked: NFC → Detect Reader (point at a legitimate reader)
3. Flipper captures authentication nonces
4. Use MFKEY32 tool to crack the keys from captured data
5. Re-read the card with discovered keys

This is a legitimate security research technique. Only use on cards you own.

Tag Analysis

After reading, select any saved card and choose Info to see:

• Full UID
• SAK/ATQA bytes (identify exact chip model)
• Read sectors and their contents

Writing NFC Tags

For NTAG213/215/216 and other writable tags:

1. Read an existing tag
2. Write → Write to magic card (requires compatible blank card)
3. Creates a clone

What Flipper Cannot Clone

• DESFire (modern access cards) — encrypted, no practical attack
• Apple Pay / Google Pay — hardware-backed keys, impossible to clone
• Transport cards (Oyster, Metro cards) — proprietary encryption

NDEF Reading

Many product NFC tags contain plain NDEF data:

• Business cards, product tags, marketing materials
• NFC → NDEF Reader shows text, URLs, phone numbers from the tag