About FoxFW
FoxFW is a fully custom Flipper Zero firmware that extends the official firmware with a large set of exclusive features. It is designed around three goals: security, usability, and deeper RF tooling.
Key things that make FoxFW different from stock firmware:
- A multi-screen first-boot setup wizard that guides you through naming and securing your device.
- A full PIN lock system with configurable attempt limits, automatic lock timers, and an On Exceed security action.
- Granular Disconnect on Lock — choose whether BLE, GPIO, and USB are disabled when the screen locks.
- A custom Fox File Browser (FFB) that replaces the stock Archive, with a Favorites system and firmware-install support.
- System-wide bounce-scroll text — any label too long to fit bounces left and right automatically rather than wrapping or truncating.
- A Modulation Analyzer exclusive to FoxFW — find what modulation an unknown device uses, then open the Receiver pre-configured for it.
- An in-app RAW Waveform Editor for trimming Sub-GHz captures without leaving the device.
- A live Waterfall Signal Display for spotting intermittent transmissions.
- Per-protocol enable / disable toggles in the Protocol List.
- An extended Custom Wallpaper system with a factory-seeded template that generates automatically if missing.
- A built-in Garage Door Remote app accessible directly from the Sub-GHz main screen — no App Menu navigation needed.
- A Sub-GHz Bruteforcer app in the App Menu for brute-forcing fixed-code remotes across common protocols.
Web Installer New
FoxFW can be installed directly from your browser — no software required. Connect your Flipper via USB and the web installer handles everything, including downloading the firmware and triggering the update.
Opens at foxfw.github.io/2.0/flasher.html
How it works
- Open the link above in Chrome or Edge on desktop.
- Choose Standard Update (Flipper on) or DFU Recovery (Flipper unresponsive).
- Click Connect Flipper and select your device from the browser dialog.
- Click Install Now — the installer downloads the firmware and transfers it automatically.
- Your Flipper reboots and applies the update. The Fox Setup Wizard runs on first boot.
.tgz package to
your SD card via the Flipper's USB connection, then triggers the install on reboot.
Your files and settings are preserved.DFU Recovery writes the firmware directly to the Flipper's internal flash via WebUSB — use this if your Flipper will not boot normally. SD card contents are not affected.
First Boot — Fox Setup Wizard
After installing FoxFW (or after a firmware update that includes a wizard reset), the device automatically launches the Fox Setup Wizard on the first boot. You cannot skip the wizard entirely — you must at least reach the final page and press Finish.
The wizard walks through four pages:
- Welcome — Introduces FoxFW. Press Right or OK to continue.
- Rename your Flipper — Optionally set a custom device name.
- Set a PIN — Optionally secure the device with a lock-screen PIN.
- Done — Summary. If you made changes the device restarts automatically to apply them.
Renaming your Flipper
Enter a name using the on-screen keyboard. Allowed characters are letters (A–Z, a–z) and numbers (0–9). Maximum length is 7 characters. Leave the field empty and confirm to use the hardware default name.
The device name appears on the lock screen greeting and is used as the Bluetooth advertised device name.
Setting a PIN in the wizard
The PIN grid shows digits 0–9 arranged in a 3-column layout. Navigate with the directional buttons, press OK to select a digit, and press Back to delete the last digit. Once you have entered at least one digit you will be asked to confirm by entering the same PIN again.
The PIN is applied immediately — you do not need to reboot for the lock-screen PIN to become active. The PIN is also stored persistently so it survives power cycles.
If you changed your Flipper name → "Flipper will restart to apply your changes." The restart happens automatically when you press Finish.
If you only set a PIN (no name change) or made no changes → "Please join our Discord!" and the device does not restart.
Desktop Overview
The FoxFW desktop is the idle screen you see after booting. FoxFW uses a fully custom Fox Theme with an all-orange UI — the stock Dolphin idle animation is intentionally absent and is replaced by a clean static screen. The status bar at the top shows the battery, clock (if enabled), and connection indicators.
Button Shortcuts
Pressing directional buttons on the idle desktop triggers shortcuts. Some shortcuts are fixed by the firmware; others are configurable in Fox Settings → Favorite Apps.
| Button | Action | Configurable? |
|---|---|---|
| ↑ Up (short) | Lock Menu — shows lock / power options | No — always fixed |
| ↑ Up (hold) | Lock Screen immediately | No — always fixed |
| ↓ Down (short) | Fox File Browser (FFB) | No — always FFB |
| ↓ Down (hold) | Toggle Clock Lock (freeze/unfreeze the clock display) | No — always fixed |
| ← Left (short) | Favorite App — default: Fox File Browser | Yes — Fox Settings → Favorite Left Short |
| ← Left (hold) | Favorite App — default: Fox File Browser | Yes — Fox Settings → Favorite Left Long |
| → Right (short) | Favorite App — default: Fox File Browser | Yes — Fox Settings → Favorite Right Short |
| → Right (hold) | Favorite App — default: Fox File Browser | Yes — Fox Settings → Favorite Right Long |
| OK (hold) | Favorite App — default: Fox File Browser | Yes — Fox Settings → Favorite OK Long |
| OK (short) | Open main App Menu | No |
Lock Menu (Up short)
The Lock Menu appears when you short-press Up on the desktop. It offers:
- Lock — Lock the screen immediately.
- Power Off — Shut down the device.
- Reboot — Restart the device.
- Reboot to DFU — Restart into USB firmware-flash mode (for qFlipper updates).
Lock Screen
When locked, the screen shows a greeting with your Flipper's name and the PIN entry grid (if a PIN is set). Enter your PIN to unlock. If no PIN is set, any button press unlocks the device.
Auto-lock and PIN: If your PIN is removed — or after a firmware update clears it — the auto-lock timer is automatically reset to Off on the next boot. Auto-locking without a PIN has no security value (the Back×3 bypass is trivially easy), so FoxFW enforces this reset silently and saves the corrected settings.
Fox File Browser FoxFW Exclusive
The Fox File Browser (FFB) replaces the stock Archive app as FoxFW's primary file management and launch tool. It is accessible from the desktop (Down short press, or any configured Favorite shortcut) and from within the firmware updater flow.
The home screen offers two options:
- Browse SD Card — Navigate the full SD card file system.
- Favorites — Jump directly to pinned files. (Only shown if you have at least one Favorite saved.)
Browse SD Card
The file browser lists all files and folders on your SD card. Navigate with Up / Down, open a folder with OK or Right, and go back with Left or Back.
The Left button on the home screen also directly opens the Favorites list if one exists.
Favorites
The Favorites list shows pinned files as two-line rows:
- Line 1 (bold): The filename (e.g. update.fuf)
- Line 2: The directory path, formatted as / folder / subfolder /
If the path hint is too long to fit, it scrolls when selected
— bouncing left and right so you can read the full path. Unselected rows
show a …suffix — the most specific (rightmost) part of the path
that fits, preceded by ....
Favorites are stored in /ext/apps_data/ffb/favorites.txt. The
file is created automatically if it does not exist.
File Actions
Press OK on any file in Browse or Favorites to open the action menu:
| Action | File type | What it does |
|---|---|---|
| Run in app | NFC, Sub-GHz, Infrared, iButton, and other supported types | Opens the matching app pre-loaded with the selected file. |
| Install | .fuf firmware update files |
Launches the firmware updater to install the selected firmware. The device will restart automatically to begin the update process. |
| Launch | .fap external apps |
Runs the selected FAP application directly. |
| Add to Favorites | Any file | Adds the file to your Favorites list so it appears on the FFB home screen. |
| Remove Favorite | Files in your Favorites list | Removes the file from Favorites. If this was the last Favorite, the home screen is hidden until you add another. |
| Rename | Any file | Renames the file in place using the on-screen keyboard. |
| Delete | Any file | Permanently deletes the file. There is no undo. |
Fox Settings
Fox Settings is found in the main App Menu under Settings. It contains all FoxFW-specific configuration. The menu remembers your scroll position while you navigate into sub-menus and back — it only resets to the top when you exit the app entirely.
Security & Privacy
The Security & Privacy screen is the heart of FoxFW's protection system. It covers PIN management, attempt limiting, the On Exceed action, automatic communication disconnect on lock, and auto-lock timers.
PIN Setup
The label changes based on current state: Set PIN (no PIN exists), Change PIN, and Remove PIN (once one is set).
PIN entry uses the digit grid — Up/Down moves between rows, Left/Right moves between columns, OK selects a digit, Back deletes the last digit. Confirm by pressing OK in the bottom-right cell once your minimum digit count is reached.
The PIN is applied immediately without requiring a reboot.
Device is Locked: The device immediately reboots and on the next startup displays a "Locked!" screen, advising you to reinstall the firmware. The locked screen itself does not delete anything — any actual data loss depends on the On Exceed settings you configured beforehand.
Disconnect Services
Controls which interfaces are disconnected when the device locks. All sub-options are disabled and shown as N/A while On Lock is OFF.
CLI + RPC — Physical USB connection stays alive but the active CLI/RPC session is closed. Reopen qFlipper after unlocking.
Full Disconnect — The CDC interface is torn down. Windows removes the COM port, qFlipper shows "Connect your Flipper." Maximum isolation. Best for unattended or high-security storage.
At desk, actively working → Minimal
Stepping away but staying plugged in → CLI + RPC
Storing, transporting, or handing over → Full Disconnect
Custom Wallpaper
Replaces the desktop background with a custom 128 × 64 pixel
monochrome image stored at /ext/wallpaper.xbm on the SD card.
If the file is missing, FoxFW automatically generates a default
wallpaper from the firmware and writes it to that path. This means
a valid wallpaper.xbm is always present after the first boot.
Creating your own wallpaper:
- Your image must be exactly 128 × 64 px, monochrome (1-bit black and white), in XBM format.
- The status bar occupies roughly the top 13 pixels — keep important artwork below that.
-
GIMP: Image → Scale Image → 128×64 → Image → Mode → Indexed (1-bit) → File → Export As →
wallpaper.xbm -
ImageMagick:
convert input.png -resize 128x64! -monochrome wallpaper.xbm - Copy the file to the root of your SD card so it lives at
/ext/wallpaper.xbm. - Toggle Custom Wallpaper ON in Fox Settings to activate it.
Change Flipper Name
Changes the device's display name. The name appears on the lock screen greeting and is broadcast as the Bluetooth device name.
- Allowed characters: letters and numbers only (A–Z, a–z, 0–9).
- Maximum length: 7 characters.
- Leave the field empty and confirm to restore the hardware default name.
- A device restart is required to apply the new name. The restart happens automatically.
Battery View
Controls the battery level indicator in the status bar. Changes take effect immediately — no restart is required.
Show Clock
Menu Style
Flipper — The standard Flipper grid menu.
Fox — FoxFW's custom menu theme with the orange FoxFW aesthetic.
Favorite Apps
Assigns apps to the five configurable desktop button shortcuts. Each slot is triggered from the idle desktop screen.
Sub-GHz
The Sub-GHz app lets your Flipper interact with radio-frequency devices between ~300 MHz and 928 MHz — garage doors, gate openers, weather stations, tyre-pressure sensors, key fobs, alarm remotes, and many more. FoxFW adds a Waterfall display, an in-app RAW editor, a Modulation Analyzer, and per-protocol enable/disable toggles.
Read
Listens on the configured frequency and tries to decode every received signal against all enabled protocols. When a known signal is identified it is displayed and can be saved.
Read RAW Enhanced
Records everything the radio receives as a timed sequence of high/low edges without attempting to decode. Use this when the protocol is unknown, not yet supported, or uses rolling codes.
FoxFW enhancements to Read RAW:
- Recording timer — A timer in the top-right corner of the waveform display shows how long the current recording has been running. The timer stays visible after recording stops so you always know the length of the last capture.
- Animated playback cursor — When you send a raw recording without saving it (Left button), a vertical line in the waveform display resets to the left edge and animates rightward in real time as the signal plays back, giving you a live visual of playback progress.
Saved Files & RAW Editor NEW
The Saved menu lists all .sub files under /ext/subghz/.
Tap a file and press OK or More for available actions.
| Action | File type | Description |
|---|---|---|
| Emulate | All decoded | Continuously retransmit the saved signal. |
| Rename | All | Rename the file on SD card. |
| Edit RAW | RAW only | Open the built-in waveform editor to trim the capture. |
| Delete | All | Permanently delete the file. |
| Counter BruteForce | Counter-based | Try incrementing counter attacks. |
RAW Editor controls:
.sub file in the same folder.Signal Display — Classic & Waterfall NEW
Change between display styles in Radio Settings → Visualizer. The setting persists across reboots.
Intensity levels: Empty = noise floor · Sparse = weak · Checkerboard = medium · Solid = strong
Frequency Analyzer
Sweeps a wide frequency range looking for any signal above the noise floor. When a carrier is detected its frequency is highlighted.
Modulation Analyzer FoxFW Exclusive
The Modulation Analyzer solves the complementary problem to the Frequency Analyzer: you know the frequency but you don't know the modulation. It rapidly cycles through all enabled modulation presets at a fixed frequency, recording any preset whose RSSI rises above a detection threshold as a "hit." After scanning, select a hit and press OK to open the Receiver pre-configured for that exact frequency and modulation.
Controls:
Screen layout:
| Area | Content |
|---|---|
| Header bar | Target frequency (left) · Current preset being tested or STOPPED (right) |
| Hit list | Detected modulations with RSSI in dBm and signal-strength bars (●●●○○) |
| Footer | Config · Stop/Start · OK=Tune (when hits exist) |
Config page: Press Left to open. Scanning pauses automatically.
Modulation reference:
Recommended workflow — unknown device:
Find frequency
Saves to Radio Settings & returns to Sub-GHz
Find modulation at saved freq
Opens Receiver pre-configured
Capture & save
Protocol List & Filters NEW
Every protocol the Sub-GHz app knows about is listed here. In FoxFW each protocol has an ON / OFF toggle. Protocols set to OFF are completely ignored during Read and Read RAW.
The top of the list shows the active protocol count:
| Situation | Display |
|---|---|
| All enabled | Active Protocols: 62 |
| Some disabled | Active Protocols: 58/62 |
/ext/subghz/protocol_filter.save) and restored on every app launch.
Garage Door Remote FoxFW Exclusive
The Sub-GHz main menu includes a dedicated Garage Door Remote button that launches a purpose-built FAP for rolling-code and fixed-code garage door systems. It is accessible directly from the Sub-GHz start screen without needing to navigate to the Apps menu.
The GDR app is a standalone external FAP (garage_door_remote.fap)
that communicates with the Sub-GHz radio using the same hardware path as the
main Sub-GHz app. When you exit GDR, you are returned cleanly to the Sub-GHz
app — the radio state is fully reset between the two apps to prevent conflicts.
Supported Systems Reference
FoxFW includes protocol decoders and encoders across three categories: automotive key fobs, gate & access control systems, and general RF protocols. All operate within the 315 MHz, 433 MHz, and 868 MHz Sub-GHz bands.
Automotive Key Fob Protocols
| Manufacturer | Protocol | Frequency | Mod | Encode | Decode | CRC |
|---|---|---|---|---|---|---|
| VAG (VW / Audi / Skoda / Seat) | VAG GROUP | 433 MHz | AM | ✓ | ✓ | — |
| Porsche | Porsche AG | 433 / 868 MHz | AM | ✓ | ✓ | — |
| PSA (Peugeot / Citroën / DS) | PSA GROUP | 433 MHz | AM/FM | ✓ | ✓ | ✓ |
| Ford | Ford V0 | 315 / 433 MHz | AM | ✓ | ✓ | ✓ |
| Ford | Ford V1 | 315 / 433 MHz | FM | ✓ | ✓ | ✓ |
| Fiat | Fiat SpA | 433 MHz | AM | ✓ | ✓ | ✓ |
| Fiat | Marelli / Delphi | 433 MHz | AM | — | ✓ | ✓ |
| Renault (older models) | Marelli | 433 MHz | AM | — | ✓ | — |
| Mazda | Siemens 5WK49365D | 315 / 433 MHz | AM/FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V0 | 433 MHz | FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V1 | 315 / 433 MHz | AM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V2 | 315 / 433 MHz | AM/FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V3 / V4 | 315 / 433 MHz | AM/FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V5 | 433 MHz | FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA/HYU V6 | 433 MHz | FM | ✓ | ✓ | ✓ |
| Kia / Hyundai | KIA V7 | 433 MHz | FM | ✓ | ✓ | ✓ |
| Subaru | Subaru | 433 MHz | AM | ✓ | ✓ | — |
| Suzuki | Suzuki | 433 MHz | FM | ✓ | ✓ | ✓ |
| Mitsubishi | Mitsubishi V0 | 868 MHz | FM | ✓ | ✓ | — |
| Honda | Honda Type A / B | 433 MHz | FM (custom) | ✓ | ✓ | — |
| Honda | Honda Static | 433 MHz | AM | ✓ | ✓ | — |
| Chrysler / Dodge / Jeep | FOBIK GQ43VT | 315 / 433 MHz | AM | ✓ | ✓ | — |
| Starline | Star Line | 433 MHz | AM | ✓ | ✓ | — |
| Scher-Khan | Scher-Khan | 433 MHz | FM | ✓ | ✓ | — |
| Scher-Khan | Magic Code PRO1 / PRO2 | 433 MHz | FM | ✓ | ✓ | ✓ |
| Sheriff | Sheriff CFM ZX750 / ZX930 | 433 MHz | AM | ✓ | ✓ | — |
Gate & Access Control Protocols
| Protocol | Frequency | Mod | Encode | Decode | CRC |
|---|---|---|---|---|---|
| Keeloq | 315 / 433 / 868 MHz | AM | ✓ | ✓ | — |
| Nice FLO | 433 MHz | AM | ✓ | ✓ | — |
| Nice FloR-S | 433 MHz | AM | ✓ | ✓ | ✓ |
| CAME | 315 / 433 MHz | AM | ✓ | ✓ | — |
| CAME TWEE | 433 MHz | AM | ✓ | ✓ | — |
| CAME Atomo | 433 MHz | AM | ✓ | ✓ | — |
| Faac SLH | 433 / 868 MHz | AM | ✓ | ✓ | — |
| Holtek | 433 MHz | AM | ✓ | ✓ | — |
| Holtek HT12x | 433 MHz | AM | ✓ | ✓ | — |
| Somfy Telis | 433 MHz | AM | ✓ | ✓ | ✓ |
| Somfy Keytis | 433 MHz | AM | ✓ | ✓ | ✓ |
| Alutech AT-4N | 433 MHz | AM | ✓ | ✓ | ✓ |
| Keyfinder | 433 MHz | AM | ✓ | ✓ | — |
| KingGates Stylo4k | 433 MHz | AM | ✓ | ✓ | — |
| Beninca ARC | 433 MHz | AM | ✓ | ✓ | — |
| Hormann HSM | 433 / 868 MHz | AM | ✓ | ✓ | — |
| Marantec | 433 MHz | AM | ✓ | ✓ | ✓ |
| Marantec24 | 433 MHz | AM | ✓ | ✓ | ✓ |
General RF Protocols
| Protocol | Frequency | Mod | Encode | Decode | CRC |
|---|---|---|---|---|---|
| Princeton | 315 / 433 MHz | AM | ✓ | ✓ | — |
| Linear | 315 MHz | AM | ✓ | ✓ | — |
| LinearDelta3 | 315 MHz | AM | ✓ | ✓ | — |
| GateTX | 433 MHz | AM | ✓ | ✓ | — |
| Security+ 1.0 | 315 MHz | AM | ✓ | ✓ | — |
| Security+ 2.0 | 315 MHz | AM | ✓ | ✓ | — |
| Chamberlain Code | 315 MHz | AM | ✓ | ✓ | — |
| MegaCode | 315 MHz | AM | ✓ | ✓ | — |
| Mastercode | 433 MHz | AM | ✓ | ✓ | — |
| Dickert MAHS | 433 MHz | AM | ✓ | ✓ | — |
| SMC5326 | 433 MHz | AM | ✓ | ✓ | — |
| Phoenix V2 | 433 MHz | AM | ✓ | ✓ | — |
| Doitrand | 433 MHz | AM | ✓ | ✓ | — |
| Hay21 | 433 MHz | AM | ✓ | ✓ | — |
| Revers RB2 | 433 MHz | AM | ✓ | ✓ | — |
| Roger | 433 MHz | AM | ✓ | ✓ | — |
Mod — Modulation: AM = OOK/ASK · FM = FSK
Encode — FoxFW can transmit / replay signals in this protocol
Decode — FoxFW can receive and identify signals in this protocol
CRC — Protocol includes a checksum; decoded frames are validated (✓) or not (—)
Radio Settings
System UX — Bounce Scroll & Text Rendering FoxFW Exclusive
FoxFW replaces the stock single-direction text scroll with a bounce-scroll system applied throughout the entire firmware. Any label that is too long to fit in its display area will:
- Pause briefly showing the start of the text.
- Smoothly slide left to reveal the end of the text.
- Pause at the right end.
- Slide back to the left — and repeat.
This affects the App Menu, all Settings menus, the Sub-GHz Protocol List, the Fox File Browser Favorites list path hints, and every other scrollable text element in the firmware.
In the Fox File Browser Favorites list specifically:
- Selected row: The path hint (line 2) bounce-scrolls so you can read the full path of both files even if they share the same filename.
- Unselected rows: Show …suffix — the most specific end of the path that fits, preceded by
..., so you can always see which folder the file is in.
Installing Firmware Updates
There are two ways to install a FoxFW update:
Method 1 — via qFlipper (recommended)
- Connect your Flipper to your computer via USB.
- Open qFlipper (v1.3.3 or later).
- Click Install from file and select the FoxFW
.tgzupdate package. - qFlipper will flash the firmware and copy resources automatically.
- The Flipper will reboot. On first boot after the update the Fox Setup Wizard runs.
Method 2 — via Fox File Browser (wireless / SD-card update)
- Copy the
.fuffirmware update file to your SD card (any folder — Favorites or a dedicated folder is recommended). - Open Fox File Browser from the desktop.
- Navigate to the
.fuffile and press OK. - Select Install from the action menu.
- The firmware updater launches and the device restarts to apply the update.
.fuf file to FFB Favorites for one-tap
access — ideal if you regularly test new builds.
resources.ths. This is normal — FoxFW
includes a larger resource bundle than stock firmware. qFlipper will
eventually continue. If qFlipper times out and reports an error, the most
reliable alternative is to copy the update .tgz directly to
your SD card using a card reader, then use the Fox File Browser to install
it from the device itself — this bypasses the USB verification step entirely.
Lockout & Recovery
I forgot my PIN
If you remember your PIN but keep entering it wrong, stop — every failed attempt counts toward the MAX Attempts limit. Once the limit is reached, the On Exceed action fires and the device reboots to a "Locked!" screen. At that point normal access via the device or qFlipper is blocked. See below for recovery options.
I am completely locked out
If you cannot get back into the device on your own, you have two options:
-
Reinstall the firmware via qFlipper DFU Mode. Boot your
Flipper into DFU mode (there are several methods for this that should be
common knowledge to you by now). In DFU Mode, connect your Flipper via
USB, open qFlipper, and use Install from file to flash
flipper-z-f7-full-local.dfu. This will restore normal access. Your SD card files (saved signals, NFC cards, etc.) are not affected by a firmware reinstall. - Contact support. Email us and we will provide recovery instructions specific to your situation.
📧 foxcustomfirmware@gmail.com
Please include a description of what happened and how you became locked out — this helps us give you the fastest and most accurate recovery path.