Main changes

• Current API: 88.26
• SubGHz: KeeLoq remotes that send at half the usual rate (Te 200us) are now decoded, and sent back at the rate they were received at
• SubGHz: A KeeLoq remote sending at half rate is shown as Crypt Key, instead of an unknown manufacturer
• SubGHz: Hormann HSM remotes whose frame starts with seven preamble ones instead of eight are now decoded
• SubGHz: Nice O-Code remotes that send the longer 72bit frame now work, as Nice O-Code One 433MHz in Add Manually
• SubGHz: Nice O-Code 112bit frames carrying the receiver certificate are decoded and sent, as Nice O-Code+Crt 433MHz
• SubGHz: Nice O-Code shows the certificate as the receiver's own value, masked with each remote's serial only on air
• SubGHz: Nice O-Code sends the k byte an O-Code remote really uses, not the Nice One one
• SubGHz: Nice O-Code changes the certificate frame index from press to press, as a real remote does
• SubGHz: Nice O-Code sets the end-of-press marker on the last two parcels, as a real remote does
• SubGHz: Nice O-Code counts like a real remote, and Cnt is the plain press count everywhere
• SubGHz: Fix a received Nice O-Code frame being saved as if its installer code were FFFF
• SubGHz: Fix a Nice FLO remote that runs out of spec also being read as an Ansonic remote
• Apps: Nice O-Code can decode a saved RAW .sub file and shows the certificate beside the installer code
• Apps: Nice O-Code - New remote mints a serial the gate is certain to enrol
• Apps: Seed Capturer can decode a saved RAW .sub file and uses an external CC1101 module
• Apps: Seed Capturer supports BFT Mitto remotes on 433.92 MHz, the same way as Erreka
• Apps: New Remote Analyzer app - garage and gate remotes SubGHz does not support yet are still detected, with their type and details shown
• Apps: Remote Analyzer - Mod. sweep walks the modulations a second at a time while a remote is transmitting but nothing decodes it, and stays on the one that worked
• Apps: Remote Analyzer - Life Fido remotes are detected
• Apps: Remote Analyzer - Crypt and Crypt Lite encrypted remotes are detected
• SubGHz: Nero Radio rolling remotes are now decoded and can be replayed as is
• SubGHz: Freezer remotes are decoded, saved and sent back
• SubGHz: Proteco MOVER remotes are decoded, saved and sent back, with custom buttons (by @dkorunic | PR #1210)
• SubGHz: Frequency Analyzer - hold OK to use the frequency on screen, without waiting for it to reach the history
• SubGHz: Dooya remotes support custom buttons (by @Lechnio | Momentum PR 597)
• SubGHz Remote: The sending button is highlighted and the last pressed button's details are shown
• SubGHz Remote: Hold a button for endless TX, one click sends the full signal
• SubGHz Remote: RAW is sent in full with one click, and repeats while the button is held
• SubGHz Remote: Fix rolling code and custom button resets after TX, and the counter moving twice per press
• Apps: SubGHz WarDriving - RX restarts after TX, and sending a received dynamic signal no longer overwrites a saved file
• SubGHz: KeeLoq CounterMode: 8 now opens a Doorhan on the first press
• SubGHz: KeeLoq CounterMode 7, 8 and 9 each reproduce a DoorHan Smart clone resync pack, one per board family (what CounterMode: 7 used to send is now mode 8)
• SubGHz: New KeeLoq CounterMode: 10 - the Phantom / Hiland resync pair, 0xFFFE then 0xFFFF in one press, as a clone remote for that system sends it
• SubGHz: The read list is no longer capped at 55 signals, and Hold Right deletes one
• SubGHz: Delete old signals makes room by memory now, for a send as well as a read
• SubGHz: Send no longer crashes on a full list
• SubGHz: Fix a duplicated entry in the read list after deleting a signal
• SubGHz: 10 KB of RAM freed while BinRAW is off
• Apps: SubGHz WarDriving no longer crashes on receive with BinRAW on
• Apps: SubGHz WarDriving autosaves off the decoder thread, so signals arriving during a save are not missed
• Apps: SubGHz WarDriving - Remove duplicates left duplicates behind and could delete the wrong signal
• RFID: Better FDX-B (animal chips / implants) reading, also in Extra Actions -> Read FDX-B (Animals)
• RFID: New T5577 app - read a T5577, save it, write it back (by @mishamyte | PR #1179)
• RFID: New Test Tag in the T5577 app (by @mishamyte | PR #1179)
• RFID: The firmware can read a single T5577 block (by @mishamyte | PR #1179)
• RFID: Wipe Tag and Clear Password check the tag instead of assuming, and the password list lives on the card (by @mishamyte | PR #1179)
• RFID: Fix Write and set password zeroing a tag's config instead of protecting it (by @mishamyte | PR #1179 | Fixes #1180)
• RFID: Write and set password no longer hangs with the tag left locked (by @mishamyte | PR #1179)
• RFID: T5577 dumps save to /ext/lfrfid and open from the Saved list (by @mishamyte | PR #1188 | Closes #1187)
• RFID: T5577 app - leaving a dump returns to the list it was picked from (by @mishamyte | PR #1188)
• RFID: Fix the T5577 app moving a dump when renaming it (by @mishamyte | PR #1188)
• RFID: New Sniff Password in the T5577 app - recover a password by listening to a reader or cloner write a tag (by @mishamyte | PR #1192)
• RFID: T5577 passwords you find are kept in a dictionary of your own (by @mishamyte | PR #1192)
• RFID: Fix the T5577 app sending a password to a tag that never asked for one (by @mishamyte | PR #1192)
• RFID: Fix the T5577 app ignoring Back while it looks for a tag (by @mishamyte | PR #1192)
• RFID: T5577 Sniff Password says Too much noise instead of reporting silence when the coil itself chatters (by @mishamyte | PR #1202)
• RFID: T5577 Clear Password shows the password that opened the tag, and offers to keep one you typed (by @mishamyte | PR #1208)
• RFID: Fix the T5577 app saying Not cleared about a tag it had opened, on one flaked read (by @mishamyte | PR #1208)
• RFID: T5577 app - a Test Tag backup is deleted once the tag is proven restored, and warns before overwriting one that survives (by @mishamyte | PR #1179)
• RFID: Fix the T5577 Sniff Password reporting a password the cloner never sent, on a sender fast enough for the measured symbol split to land inside its own zero class (by @mishamyte | PR #1213)
• RFID: Fix the T5577 sniffer's symbol-class histogram writing past its last bin (by @mishamyte | PR #1213)
• SubGHz: Fix Marantec24 and Linear Delta 3 not decoding a signal the Flipper itself sends (by @mishamyte | PR #1207 | Closes #1205)
• SubGHz: Fix Holtek HT12X reporting a key off one frame when the receiver had just been reset (by @mishamyte | PR #1207)
• SubGHz: New KeeLoq manufacturer Phantom / Hiland - these remotes read and send properly, and KL: Phantom/Hiland 433M is in Add Manually
• SubGHz: New protocol FAAC TM - the 12 dip switch TM 433/868 DS remotes, which CAME 12bit used to read as its own, with FAAC TM 433MHz and FAAC TM 868MHz in Add Manually
• SubGHz: 868.00 MHz is in the default frequency list
• iButton: Cyfral and Metakom keys can be written to TM01x blanks (by @Leptopt1los | PR #1209 | In OFW PR 4508)
• Infrared: ir universal <remote> <signal> over the CLI sends the signals it was asked for, instead of rebooting the device (by @mishamyte | PR #1211 | Fixes #1201)
• Infrared: A universal remote database holding a button name the screen does not use no longer crashes on opening that remote (by @mishamyte | PR #1211)
• Infrared: A raw signal saved with no timings is rejected when read, instead of being sent as whatever was read before it (by @mishamyte | PR #1211)
• Apps: Build tag (11nov2026) - Check out more Apps updates and fixes by following this link

Other changes

• SubGHz: CAME TWEE no longer reads past the end of its decode table on a parcel counter of F
• SubGHz: Fix encoder buffers too small for the keys Came Atomo, Somfy Keytis, Somfy Telis, Power Smart and Dooya accept
• SubGHz: Nero Radio signals show the right static or rolling icon in the read list
• Apps: SubGHz WarDriving - Delete old signals can no longer empty the whole list, and Send refuses instead of crashing
• Apps: Nice O-Code and Seed Capturer say so instead of trying when a .sub file holds a key rather than a capture
• Apps: Fix the loading spinner flashing when you close an app opened from Apps (by @mishamyte | PR #1195 | Fixes #1178)
• OFW: Typos fixed in on-screen text
• OFW: FatFs: apply upstream R0.12c patches, fix 0-byte files in fragmented exFAT directories
• OFW: NFC: reject Ultralight READ/WRITE starting at the page count
• OFW: Renaming a file so only its letter case changes now works, instead of being refused as a name that is already taken
• OFW: iButton makes the error sound and holds the LED red when a blank refuses the key, instead of blinking yellow (refactor of PR #1209)
• API: Export faac_slh_reset_prog_mode for apps
• API: Export subghz_protocol_decoder_base_get_type for apps
• API: Export ibutton_protocols_is_writable and bit_lib_reverse_32_fast for apps (In OFW PR 4511)
• API: Export the T5577 block read/write API for apps (t5577.h, t5577_file.h) (by @mishamyte | PR #1179)
• iButton: Fix write success text going off screen
• RFID: Move the Writing screen text up so long file names fit
• GUI: A folder the file browser cannot read says so, instead of showing <Empty> with Up, Down and OK dead (by @mishamyte | PR #1212 | Closes #1197)
• GUI: A screen that is covered no longer repaints the one on top of it (by @mishamyte | PR #1198 | Closes #1196)
• GUI: Delete screens (SubGHz, NFC, RFID, iButton, Archive) fit a long file name
• Archive: Stability pass over the file menu, deleting during a load, favourites and Show
• RFID: T5577 app - Saved opens straight away, and a dump that will not open says why (by @mishamyte | PR #1189)
• RFID: Fix the missing-T5577-app message pointing at the apps catalogue (by @mishamyte | PR #1189)
• Archive: Fix the rename check missing an existing file whose extension is six characters long (by @mishamyte | PR #1188)
• RFID: ~1 KB of flash freed by sharing the duplicated LF write_data bodies (by @mishamyte | PR #1183)
• Dev: Fix the infrared unit test checking a universal remote database that does not exist (by @mishamyte | PR #1199)
• Dev: Fix the unit test firmware not building (by @mishamyte | PR #1199 | Closes #1185)
• Dev: A unit test run that tested nothing no longer reports Status: PASSED (by @mishamyte | PR #1206)
• Dev: CI builds the unit test firmware (by @mishamyte | PR #1206)
• Dev: The NFC supported-card parsers have unit tests (by @mishamyte | PR #1204)
• Dev: Unit test encoder round-trips feed the decoder what the radio would send (by @mishamyte | PR #1207)
• Core: ~7 KB of flash freed by parsing numbers without newlib's big-number machinery (by @mishamyte | PR #1186 | Closes #1184)
  
  
  

-> How to install firmware

-> Unleashed FW Web Installer

Please support development of the project

Service	Remark	QR Code	Link/Wallet
Patreon			patreon.com/mmxdev
Boosty	patreon alternative		boosty.to/mmxdev
CloudTips	only RU payments accepted		pay.cloudtips.ru/p/7b3e9d65
YooMoney	only RU payments accepted		yoomoney.ru/fundraise/XA49mgQLPA0.221209
USDT	TRC20		TSXcitMSnWXUFqiUfEXrTVpVewXy2cYhrs
ETH	BSC/ERC20-Tokens		0xFebF1bBc8229418FF2408C07AF6Afa49152fEc6a
BTC			bc1q0np836jk9jwr4dd7p6qv66d04vamtqkxrecck9
SOL	Solana/Tokens		DSgwouAEgu8iP5yr7EHHDqMNYWZxAqXWsTEeqCAXGLj8
DOGE			D6R6gYgBn5LwTNmPyvAQR6bZ9EtGgFCpvv
LTC			ltc1q3ex4ejkl0xpx3znwrmth4lyuadr5qgv8tmq8z9
BCH			qquxfyzntuqufy2dx0hrfr4sndp0tucvky4sw8qyu3
XMR	Monero		41xUz92suUu1u5Mu4qkrcs52gtfpu9rnZRdBpCJ244KRHf6xXSvVFevdf2cnjS7RAeYr5hn9MsEfxKoFDRSctFjG5fv1Mhn
TON			UQCOqcnYkvzOZUV_9bPE_8oTbOrOF03MnF-VcJyjisTZmsxa

Thanks to our sponsors who supported project in the past and special thanks to sponsors who supports us on regular basis

@mishamyte, ClaraCrazy, Pathfinder [Count Zero cDc], callmezimbra, Quen0n, MERRON, grvpvl (lvpvrg), art_col, ThurstonWaffles, Moneron, UterGrooll, LUCFER, Northpirate, zloepuzo, T.Rat, Alexey B., ionelife, ...
and all other great people who supported our project and me (xMasterX), thanks to you all!

Recommended update option - Web Updater

What e, , c means? What I need to download if I don't want to use Web updater?

What build I should download and what this name means - flipper-z-f7-update-unlshd-095(e / c).tgz ?

flipper-z = for Flipper Zero device

f7 = Hardware version - same for all flipper zero devices

update = Update package, contains updater, all assets (plugins, IR libs, etc.), and firmware itself

unlshd-095 = Firmware version

To enable RGB Backlight support go into LCD & Notifications settings

⚠️RGB backlight hardware mod, works only on modded flippers! do not enable on non modded device!

Firmware Self-update package (update from microSD) - flipper-z-f7-update-unlshd-095.tgz for mobile app / qFlipper / web

Archive of scripts folder (contains scripts for FW/plugins development) - flipper-z-any-scripts-unlshd-095.tgz

SDK files for plugins development and uFBT - flipper-z-f7-sdk-unlshd-095.zip

Install FW via Web Updater:

Default >

Extra apps > e

No apps > c