Flipper Zero SubGHz: Reading, Recording, and Replaying RF Signals
The SubGHz module uses a CC1101 transceiver covering 300–928 MHz. It can receive raw signal data and, when the protocol is recognized, decode and re-transmit it.
Fixed vs Rolling Codes
Fixed-code protocols store the same signal every press — the Flipper can capture and replay these.
Rolling code protocols (modern garage doors, car key fobs) generate a new code each press. The Flipper can record these but cannot replay them.
Common Frequencies
| Frequency | Common Uses |
|---|---|
| 315 MHz | North American garage doors, older car remotes |
| 433.92 MHz | European remotes, doorbells, weather stations |
| 868 MHz | European IoT, smart home sensors |
| 915 MHz | US ISM band devices |
Reading a Signal
- Sub-GHz → Read
- Select frequency (or use Frequency Analyzer first)
- Press the remote button near the Flipper
- If recognized, save with OK
Frequency Analyzer
Sub-GHz → Frequency Analyzer scans the entire band. Point it around to find what frequency a remote uses.
Saving and Managing Files
Captures stored as .sub files on SD at /subghz/. Files are plain text and can be shared or imported.
Legal Note
The 433.92 MHz and 315 MHz ISM bands allow low-power devices without a license. Transmitting at high power or on other frequencies may require licensing.