Flipper Zero vs HackRF One: When Sub-GHz Capture and Replay Needs Real SDR

The Flipper Zero's Sub-GHz tool is many people's first hands-on introduction to RF capture and replay, and for a large share of real-world use — garage doors, gate remotes, weather station sensors, simple fixed-code and rolling-code remotes — it's genuinely all you need. But the Flipper's Sub-GHz hardware is a fixed-purpose radio chip, not a general-purpose software-defined radio, and there's a real ceiling to what it can do. Knowing where that ceiling is — and what a proper SDR like a HackRF One actually adds — saves you from either buying gear you don't need or hitting a wall on a project the Flipper was never built to handle.

What's Actually Inside Each

Flipper ZeroHackRF One Sub-GHz radioCC1101 transceiver — a fixed-function ISM-band chip covering roughly 300-928MHz depending on region/firmware, with a defined set of modulation schemes it understands nativelyFull wideband SDR transceiver, 1MHz-6GHz, half-duplex What it capturesRaw RF signal within the CC1101's supported bands/modulations, decoded into known protocols where firmware recognizes them (fixed code, common rolling code schemes)Raw IQ samples across essentially any frequency in range, any modulation — decoding is entirely up to the software you run against the capture AnalysisOn-device signal viewer, frequency analyzer, and RSSI; protocol identification limited to what firmware supportsNone on the device itself — HackRF is a radio front-end; all analysis happens in software (GNU Radio, SDR#, Universal Radio Hacker, etc.) on a connected computer Standalone useFully standalone — screen, buttons, storage, battery, usable without a computerRequires a host computer for full SDR use, unless paired with a PortaPack add-on (see below) Transmit power / rangeLow power by design and by regulatory limitation on the CC1101; adequate for close-range remote replay, not for serious range workHigher effective range achievable, tunable gain stages, and — critically — the ability to craft genuinely custom waveforms rather than replaying only what a fixed chipset natively understands

Where the Flipper Genuinely Wins

For its actual design purpose — quick capture and replay of common consumer RF remotes, testing your own gate or garage door, checking whether your own devices are vulnerable to simple replay attacks — the Flipper is faster to use than a full SDR workflow. There's no laptop to bring, no software chain to configure, and the built-in protocol library already recognizes a wide range of common fixed-code and rolling-code formats out of the box. If your entire use case fits inside "capture a signal from a device I own, replay it, understand roughly what protocol it's using," the Flipper does that job well and the CC1101's band/modulation limitations rarely come up in practice.

Where You Actually Need a Real SDR

• Frequencies or modulations outside the CC1101's coverage: The Flipper's Sub-GHz hardware is genuinely limited to specific bands and a defined modulation set. Anything outside that — including much of the spectrum above 928MHz or below 300MHz, and non-standard or unusual modulation schemes — is invisible to it entirely, not just poorly decoded.
• Wideband spectrum survey work: Scanning a broad chunk of spectrum to find an unknown signal's exact frequency and characterize its bandwidth and modulation from scratch is a wideband-SDR job. The Flipper's built-in frequency analyzer helps narrow down activity within its supported range, but it isn't a substitute for a real spectrum analyzer view across a wide, arbitrary band.
• Custom protocol reverse-engineering from raw IQ: Tools like Universal Radio Hacker or GNU Radio Companion let you inspect raw IQ samples, build custom demodulators, and reconstruct a completely unfamiliar protocol byte-by-byte. This kind of deep RE work needs the full sample stream a real SDR provides — a fixed-function chip that's already decided how to interpret the signal has thrown away information you might need.
• Frequencies above roughly 1GHz: WiFi, Bluetooth, cellular bands, and a wide range of other modern wireless protocols are simply out of the CC1101's range. A HackRF (or a cheaper RTL-SDR for receive-only work) covers this territory the Flipper's Sub-GHz radio structurally cannot.

Standalone HackRF: The PortaPack Option

A bare HackRF One needs a laptop for real work, which erases some of the Flipper's field-usability advantage. The PortaPack add-on (Havoc or Mayhem firmware are the common choices) bolts a touchscreen, controls, and battery onto the HackRF, turning it into a genuinely standalone handheld SDR — closer in spirit to the Flipper's "point it and go" usability, but with the HackRF's full frequency range and raw-sample access underneath. See our guide on building a portable HackRF One + PortaPack standalone radio if field-portable wideband SDR work, not just a lab bench setup, is the actual goal.

Using Both Together

In practice these tools complement rather than replace each other. A reasonable workflow: use the Flipper for fast day-to-day capture/replay and quick checks on your own devices, and reach for the HackRF when a signal doesn't fit the Flipper's supported bands, when you need to actually characterize an unknown signal's modulation before you can do anything else with it, or when a project genuinely needs custom waveform generation the CC1101 can't produce. Owning both isn't redundant — they cover genuinely different parts of the RF work maker projects run into.

Legal and Ethical Notes

Everything above applies only to devices, networks, and signals you own or have explicit authorization to test — capturing and replaying RF signals from equipment you don't own or haven't been given permission to test is illegal in most jurisdictions regardless of which tool you use to do it, and a HackRF's greater capability doesn't change that line, it just makes it easier to cross by accident. See our guide on Flipper Zero and the law for a fuller rundown of what's actually permitted and where responsible disclosure fits in — the same legal boundaries apply whether you're holding a Flipper or a HackRF.