NFC
Unlocking cards with passwords

﻿
There are NFC cards that have data organized in pages, such as MIFARE Ultralight® and NTAG® cards. If you can't read all the NFC card's pages with the Read function, the card might be protected with a password. To unlock the protected card, you can enter the password manually, generate the password to unlock the pages, or extract the password from the reader.
<div class="warning flipper-callout">
    <div class="callout-header">Using these functions might block your card</div>
    Some cards have a security feature that blocks the card after several authentications with an incorrect password. 
</div>
<div class="warning flipper-callout">
    <div class="callout-header">Using these functions might block your card</div>
    Some cards have a security feature that blocks the card after several authentications with an incorrect password. 
</div>
﻿
On this page, you will learn how to capture the password sent by the reader, generate passwords for supported types of cards, and unlock cards by entering passwords manually.
﻿
Extracting the password from the reader
If you have access to the reader and the card, try to extract the password from the reader by emulating the captured card's data. The reader might authenticate the card with a password, which can be captured and saved by your Flipper Zero. After that, you can read the data on the card's remaining pages. 
To extract the password and unlock the card, do the following:
1
﻿Read and save the card.
2
Go to Main Menu -> NFC -> Saved -> Card's name.
3
Select Unlock With Reader, then tap the reader with your Flipper Zero.
To capture the password, tap the reader with your Flipper Zero
﻿
4
When the password is captured, press Continue.
The captured password is displayed on the screen
﻿
5
Read the card by holding the card near your Flipper Zero's back.
Hold the card in the center of your Flipper Zero's back
﻿
6
Once pages are unlocked, press Save.
The number of read paged is displayed on the screen
﻿
7
Name the card, then press Save.
If unlocking failed
 The card might be connected to another reader. 
﻿
Generating the password
Using your Flipper Zero, you can generate the password for toys-to-life NFC technology and Xiaomi Air Purifier. When the card is near, Flipper Zero generates the password from the card's UID.
To generate the password and unlock the card, do the following:
1
Go to Main Menu -> NFC -> Extra Actions -> Unlock NTAG/Ultralight.
2
Select the card type, then hold the card near your Flipper Zero's back.
3
Once pages are unlocked, press Save.
4
Name the card, then press Save.
﻿
Entering the password manually
If you know the password, you can enter it manually and unlock the card by doing the following:
1
﻿Read and save the card.
2
Go to Main Menu -> NFC -> Saved.
3
Select the saved card.
4
Then go to Unlock with Password -> Enter Password Manually.
5
Enter the password in hexadecimal, then press Save.
6
To unlock the card with the entered password, hold the card near your Flipper Zero's back.
7
Once pages are unlocked, press Save.
8
Name the card, then press Save.
﻿
MIFARE, MIFARE Ultralight, and NTAG are registered trademarks of NXP B.V.
Updated 11 Sep 2023
Did this page help you?
Recovering keys with MFKey32
Writing data to magic cards
Docs powered by
Archbee
TABLE OF CONTENTS
Extracting the password from the reader
If unlocking failed
Generating the password
Entering the password manually