🦊 FoxFW v2.0 πŸ’¬ Join our Discord

Complete User Guide

FoxFW is a custom Flipper Zero firmware built from the ground up for power users who want enhanced security, a smarter file browser, deeper Sub-GHz tooling, and a polished system-wide experience.

Chapter 1

About FoxFW

FoxFW is a fully custom Flipper Zero firmware that extends the official firmware with a large set of exclusive features. It is designed around three goals: security, usability, and deeper RF tooling.

πŸ“Έ See it in action: Check out our collection of screenshots to get a feel for FoxFW before you dive in. Got some great shots of your own? FoxFW has a built-in Screenshot Tool (hold Back+Up on any screen) β€” send us what you capture and we may feature it here with a link to your own GitHub page!

Key things that make FoxFW different from stock firmware:

Chapter 2

Web Installer New

FoxFW can be installed directly from your browser β€” no software required. Connect your Flipper via USB and the web installer handles everything, including downloading the firmware and triggering the update.

Recommended for most users. Works in Chrome and Edge on desktop. Your Flipper must be connected via USB before you begin.
⚑ Open Web Installer β†’

Opens at foxfw.github.io/fox-web/flasher.html

How it works

  1. Open the link above in Chrome or Edge on desktop.
  2. Choose Standard Update (Flipper on) or DFU Recovery (Flipper unresponsive).
  3. Click Connect Flipper and select your device from the browser dialog.
  4. Click Install Now β€” the installer downloads the firmware and transfers it automatically.
  5. Your Flipper reboots and applies the update. The Fox Setup Wizard runs on first boot.
Standard Update uploads the firmware as a .tgz package to your SD card via the Flipper's USB connection, then triggers the install on reboot. Your files and settings are preserved.

DFU Recovery writes the firmware only directly to the Flipper's internal flash via WebUSB β€” use this if your Flipper will not boot normally. SD card contents are not affected. After a DFU Recovery, it is HIGHLY RECOMMENDED to complete a Standard Install - this will ensure that the core FoxFW apps are all returned to the device.
Chapter 3

FoxFW Lab New

An all-in-one browser dashboard for a connected Flipper: live device info, a file explorer, a live screen mirror, a terminal/CLI, and an NFC file viewer β€” plus the Wallpaper Painter, Wallpaper Showcase, and FAP Compiler embedded right inside it, all sharing a single serial connection. Fox_ESP32_FW tools are built in too, so you can work on both devices without swapping tabs.

Connect once and everything shares that connection β€” no need to reconnect when you switch between the file explorer, screen mirror, terminal, or the embedded tools.
🦊 Open FoxFW Lab β†’

Opens at foxfw.github.io/fox-web/foxfw-lab.html

What's inside

Chapter 4

FAP Compiler New

Want to run a third-party app that isn't bundled with FoxFW? Paste its GitHub URL into the FAP Compiler and it builds a .fap against FoxFW v2.0 for you β€” no local toolchain install required.

No GitHub account or login needed β€” just paste a repo URL and compile.
βš™ Open FAP Compiler β†’

Opens at foxfw.github.io/fox-web/fap-compiler.html

How it works

  1. Paste the GitHub URL of the app you want, then click Compile .FAP.
  2. Watch the live console as GitHub Actions checks out FoxFW v2.0 and builds the app.
  3. Download the finished .fap and copy it to apps/ on your SD card.
The target repo just needs an application.fam file β€” the same format used by every Flipper Zero app. Multi-app repos are supported via an advanced "subfolder" option.

Statistics

The Web Installer, the ESP32 Web Flasher and the FAP Compiler each have a Statistics bar at the bottom of the page. Click it to see public, anonymous counts by month, day and country, and on the FAP Compiler the most compiled and most recently compiled apps. No IP addresses, cookies, device IDs or personal details are stored.

Chapter 5

Wallpaper Painter New

Draw a custom wallpaper straight in your browser β€” no MS Paint round-trip, no separate converter tool. Pencil, eraser, line, and fill-bucket tools on a pixel-accurate 128Γ—64 canvas, with the status bar and border pre-locked so you can't accidentally draw somewhere that won't show up on the device.

Works fully offline β€” download an .xbm file with no Flipper connected. Optionally connect over USB to preview your drawing live on the device's screen, or save it straight to the SD card β€” and activate it β€” without unplugging anything.
🎨 Open Wallpaper Painter β†’

Opens at foxfw.github.io/fox-web/wallpaper-painter.html

How it works

  1. Draw in the open area of the canvas β€” the gray border and status bar strip are locked.
  2. Give it a name, then click Download and copy the .xbm file into the wallpapers folder on the root of your SD card.
  3. Optional: click Connect Flipper (Chrome/Edge only) to preview live on the device's screen, or save straight to the SD card with Save to Flipper SD Card β€” this also sets it as the active Custom Wallpaper and turns Custom Wallpaper on.
Save to Flipper SD Card never overwrites an existing wallpaper β€” if the name is already taken on the device, a number is added automatically (e.g. MyWallpaper(2).xbm). Pick which saved wallpaper is active any time under Fox Settings β†’ Custom Wallpaper.
Chapter 6

Wallpaper Showcase New

Browse community-made wallpapers, download the ones you like, or β€” with a Flipper connected over USB β€” install one straight to the SD card in one click, no file transfer needed.

New wallpapers show up automatically. Nothing to configure or refresh β€” just check back.
πŸ–ΌοΈ Open Wallpaper Showcase β†’

Opens at foxfw.github.io/fox-web/wallpaper-showcase.html

How it works

  1. Browse the gallery β€” sort by name, newest, or oldest, and search or filter by name.
  2. Click Download on any wallpaper to save its .zip (contains the .xbm file), or
  3. Click Connect Flipper (Chrome/Edge only), then click Install on a wallpaper to write it straight to the SD card.
Install saves into the wallpapers folder on the SD card (never overwriting an existing file β€” a number is added automatically if the name is taken) and immediately sets it as the active Custom Wallpaper, turning Custom Wallpaper on if it was off.
Chapter 7

Fox ESP32 Firmware

A companion firmware that runs on a separate ESP32 board wired to your Flipper over UART, giving it WiFi and Bluetooth for the whole Fox ESP32 Apps suite β€” FoxHub, Fox Chat, Fox AI Chat, Fox Portal, and more. ESP32 Classic, S3, S2 (including the official Flipper Wi-Fi Dev Board), C3, C5, and C6 boards are all supported, and the flasher detects which one you have when you connect.

⚑ Open ESP32 Web Flasher β†’

Opens at foxfw.github.io/fox-web/fox-esp32-flasher.html β€” Chrome / Edge, USB cable, no software install.

Prefer not to use a PC? The on-device Fox ESP32 Flasher app (Apps β†’ Fox) flashes straight from the Flipper β€” no browser, no cable to a computer. Firmware for every supported board is bundled into FoxFW itself.
Full wiring diagrams, board-specific notes, and the complete command reference are in the Fox ESP32 Firmware guide. See the Fox ESP32 Apps chapter below for what each app actually does once it's flashed.
Chapter 8

First Boot β€” Fox Setup Wizard

After installing FoxFW (or after a firmware update that includes a wizard reset), the device automatically launches the Fox Setup Wizard on the first boot. You cannot skip the wizard entirely β€” you must at least reach the final page and press Finish.

The wizard walks through four pages:

  1. Welcome β€” Introduces FoxFW. Press Right or OK to continue.
  2. Rename your Flipper β€” Optionally set a custom device name.
  3. Set a PIN β€” Optionally secure the device with a lock-screen PIN.
  4. Done β€” Summary. If you made changes the device restarts automatically to apply them.
You can skip both name and PIN by pressing Left (Skip) on those pages. The wizard will still complete and the device will boot normally. You can configure both later in Fox Settings.

Renaming your Flipper

Enter a name using the on-screen keyboard. Allowed characters are letters (A–Z, a–z) and numbers (0–9). Maximum length is 7 characters. Leave the field empty and confirm to use the hardware default name.

The device name appears on the lock screen greeting and is used as the Bluetooth advertised device name.

Setting a PIN in the wizard

The PIN grid shows digits 0–9 arranged in a 3-column layout. Navigate with the directional buttons, press OK to select a digit, and press Back to delete the last digit. Once you have entered at least one digit you will be asked to confirm by entering the same PIN again.

The PIN is applied immediately β€” you do not need to reboot for the lock-screen PIN to become active. The PIN is also stored persistently so it survives power cycles.

Done page text:
If you changed your Flipper name β†’ "Flipper will restart to apply your changes." The restart happens automatically when you press Finish.
If you only set a PIN (no name change) or made no changes β†’ "Please join our Discord!" and the device does not restart.
Chapter 9

Desktop Overview

The FoxFW desktop is the idle screen you see after booting. FoxFW uses a fully custom Fox Theme with an all-orange UI β€” the stock Dolphin idle animation is intentionally absent and is replaced by a clean static screen. The status bar at the top shows the battery, clock (if enabled), and connection indicators.

Internet Connectivity Icon New

A small three-bar icon sits in the status bar immediately to the left of the battery indicator, showing whether an attached ESP32 companion board currently has a WiFi/internet connection.

Connected WiFi status bar icon
Connected
Bold, solid ascending bars
Disconnected WiFi status bar icon
Disconnected / Idle
Same bars, thin outline β€” not an error
Both states use the same three-ascending-bars shape on purpose, so they're clearly the same icon at a glance. The icon stays visible even when nothing is connected β€” it's a deliberate hint to anyone who hasn't tried the ESP32 companion apps yet that the feature exists at all.

The icon reflects whatever an ESP32 board wired to your Flipper's GPIO header last reported through FoxHub's WiFi menu, and FoxFW also runs a quiet background check roughly once a minute so the icon can't get stuck showing "connected" forever if the board is reflashed, unplugged, or powered off while no companion app is open to notice.

Requires Fox ESP32 Firmware. This icon β€” and the full suite of Fox ESP32 apps bundled with FoxFW (FoxHub, Chat, Portal, Detector, Flasher, and Chameleon) β€” need a companion ESP32 board wired to your Flipper's GPIO header and running Fox ESP32 Firmware. Flash it straight from the Flipper using the built-in Fox ESP32 Flasher app (no PC required), or via the Web Flasher. Source code and releases are at github.com/FoxFW/Fox_ESP32_FW. See the Fox ESP32 Apps section below for a full overview.

Button Shortcuts

Pressing directional buttons on the idle desktop triggers shortcuts. Some shortcuts are fixed by the firmware; others are configurable in Fox Settings β†’ Favorite Apps.

Button Action Configurable?
↑ Up (short) Lock Menu β€” shows lock / power options No β€” always fixed
↑ Up (hold) Lock Screen immediately No β€” always fixed
↓ Down (short) Fox File Browser (FFB) No β€” always FFB
↓ Down (hold) Fox Clock β€” a full-screen clock with an alarm clock built in (long-press Down or Back again to exit) No β€” always fixed, alarms configurable in Fox Settings β†’ Alarm Clock
← Left (short) Favorite App β€” default: Fox File Browser Yes β€” Fox Settings β†’ Favorite Left Short
← Left (hold) Favorite App β€” default: Fox File Browser Yes β€” Fox Settings β†’ Favorite Left Long
β†’ Right (short) Favorite App β€” default: Fox File Browser Yes β€” Fox Settings β†’ Favorite Right Short
β†’ Right (hold) Cycles Custom Wallpaper β€” see Custom Wallpaper No β€” hardcoded
OK (hold) Favorite App β€” default: Fox File Browser Yes β€” Fox Settings β†’ Favorite OK Long
OK (short) Open main App Menu No
Fox Clock has its own Left/Right and Up/Down shortcuts once you're on it: ← Left turns the backlight off immediately; β†’ Right turns it back on. If "Keep Backlight On" (Fox Settings β†’ Alarm Clock) is off, Right just lights it up for the normal timeout, the same as pressing any other button. If it's on, Right restores the persistent stay-on behavior. Neither key changes the saved setting β€” it only affects the backlight for as long as Fox Clock stays open. ↑ Up / ↓ Down instead raise or lower the actual LCD Backlight level (same setting as Settings β†’ Notifications β†’ LCD Backlight, in 5% steps) and show a "Brightness NN%" readout for a couple of seconds β€” this one does stick after you leave Fox Clock. Long-press Down or Back exits back to the desktop; a short press of Back instead shows a "Press and Hold DOWN to Exit" reminder for a couple of seconds. If an alarm is ringing, a short OK press (or holding Down/Back) silences it.

Lock Menu (Up short)

The Lock Menu appears when you short-press Up on the desktop. It offers:

Lock Screen

When locked, the screen shows a padlock and the PIN entry grid will display when you press any key (if a PIN is set). Enter your PIN to unlock. If no PIN is set, any button press unlocks the device.

USB: No AutoLock β€” In Fox Settings β†’ Security, the USB: No AutoLock setting suppresses the auto-lock timer while qFlipper is actively connected via USB. This prevents the device from locking and dropping your qFlipper session mid-transfer. When USB is disconnected, normal auto-lock timing resumes immediately.

Auto-lock and PIN: If your PIN is removed β€” or after a firmware update clears it β€” the auto-lock timer is automatically reset to Off on the next boot. Auto-locking without a PIN has no security value (the BackΓ—3 bypass is trivially easy), so FoxFW enforces this reset silently and saves the corrected settings.
Wrong PIN attempts: If you enter the wrong PIN more times than the configured MAX Attempts limit, the On Exceed action triggers (see Fox Settings β†’ Security & Privacy). If you are permanently locked out, email foxcustomfirmware@gmail.com.
Chapter 10

Fox File Browser FoxFW Exclusive

The Fox File Browser (FFB) replaces the stock Archive app as FoxFW's primary file management and launch tool. It is accessible from the desktop (Down short press, or any configured Favorite shortcut) and from within the firmware updater flow.

The home screen offers two options:

If you have no Favorites saved, the home screen is skipped entirely and FFB opens directly in Browse mode. The home screen only appears once you have pinned at least one file.

Browse SD Card

The file browser lists all files and folders on your SD card. Navigate with Up / Down, open a folder with OK or Right, and go back with Left or Back.

The Left button on the home screen also directly opens the Favorites list if one exists.

Favorites

The Favorites list shows pinned files as two-line rows:

If the path hint is too long to fit, it scrolls when selected β€” bouncing left and right so you can read the full path. Unselected rows show a …suffix β€” the most specific (rightmost) part of the path that fits, preceded by ....

Favorites are stored in /ext/apps_data/ffb/favorites.txt. The file is created automatically if it does not exist.

File Actions

Press OK on any file in Browse or Favorites to open the action menu:

ActionFile typeWhat it does
Run in app NFC, Sub-GHz, Infrared, iButton, MP3, text, and other supported types Opens the matching app pre-loaded with the selected file. If more than one app can open that file type, an Open With menu lists the candidates by app name β€” pick one to launch it.
Install .fuf firmware update files Launches the firmware updater to install the selected firmware. The device will restart automatically to begin the update process.
Launch .fap external apps Runs the selected FAP application directly.
View .xbm screenshots Opens the image fullscreen right inside FFB β€” no separate app. Left/Right cycles alphabetically through the other .xbm files in the same folder; Back returns to the list with whichever image was on screen selected.
View / Open With New .bmp (converted screenshots) FFB can't display a .bmp directly β€” View shows a brief "Convert to XBM to view on Flipper Zero" reminder instead. If Fox XBM Converter is installed, OK instead opens an Open With menu offering View (same reminder) or Fox XBM Converter (converts it back to .xbm).
Add to Favorites Any file Adds the file to your Favorites list so it appears on the FFB home screen.
Remove Favorite Files in your Favorites list Removes the file from Favorites. If this was the last Favorite, the home screen is hidden until you add another.
Rename Any file Renames the file in place using the on-screen keyboard.
Delete Any file Permanently deletes the file. There is no undo.
Run in app currently covers: .sub/.rem (Sub-GHz), .nfc (NFC), .ir (Infrared), .rfid/.lfrfid (125 kHz RFID), .bad (Bad USB), .ibtn/.ibutton (iButton), .u2f (U2F), .js/.jss (JS Runner), .mp3 (MP3 Player), .txt/.csv (FlipNote β€” a full on-device text editor), .xbm (View β€” opens FFB's own built-in image viewer for the 128x64 screenshots the Back+Up shortcut saves, no separate app to launch), and .bmp (a screenshot already converted by Fox XBM Converter β€” View just shows a reminder, since FFB can't render it). If Fox XBM Converter is installed, both .xbm and .bmp instead offer it as a second Open With option alongside View. A file whose extension has no matching app (e.g. a bare .wav β€” the bundled MP3 Player only decodes MP3) doesn't get a Run entry at all, rather than offering an action that does nothing.
Chapter 11

Fox Settings

Fox Settings is found in the main App Menu under Settings. It contains all FoxFW-specific configuration. The menu remembers your scroll position while you navigate into sub-menus and back β€” it only resets to the top when you exit the app entirely.

Security & Privacy

The Security & Privacy screen is the heart of FoxFW's protection system. It covers PIN management, attempt limiting, the On Exceed action, automatic communication disconnect on lock, and auto-lock timers.

PIN Setup

The label changes based on current state: Set PIN (no PIN exists), Change PIN, and Remove PIN (once one is set).

PIN entry uses the digit grid β€” Up/Down moves between rows, Left/Right moves between columns, OK selects a digit, Back deletes the last digit. Confirm by pressing OK in the bottom-right cell once your minimum digit count is reached.

The PIN is applied immediately without requiring a reboot.

MAX Attempts
How many wrong PINs are allowed before the On Exceed action fires. Set to 0 to allow unlimited attempts (no lockout).
Range: 0 (unlimited) Β· 1 – 10
On Exceed
What happens when wrong PINs exceed MAX Attempts.

Device is Locked: The device immediately reboots and on the next startup displays a "Locked!" screen, advising you to reinstall the firmware. The locked screen itself does not delete anything β€” any actual data loss depends on the On Exceed settings you configured beforehand.
Recovery after On Exceed triggers: The device is locked, which also blocks qFlipper access. The fastest path back is a DFU firmware reinstall β€” your SD card files are unaffected. Alternatively, see the Lockout & Recovery section below for a step-by-step guide (you will need a computer and your SD card).

Disconnect Services

Controls which interfaces are disconnected when the device locks. All sub-options are disabled and shown as N/A while On Lock is OFF.

On Lock (master toggle)
Must be ON for any interface to disconnect on lock.
Options: OFF Β· ON
BLE
Drops any active Bluetooth Low Energy connection when the screen locks. The Flipper re-advertises automatically after unlocking.
Options: OFF Β· ON
GPIO
Acquires exclusive control of the hardware UART pins (USART & LPUART) on the GPIO header when locked, blocking external serial adapters and debuggers. Pins are released on unlock.
Options: OFF Β· ON
USB
Minimal β€” USB stays connected, GUI is locked. qFlipper buttons are inactive but the device stays visible. Fastest to unlock.

CLI + RPC β€” Physical USB connection stays alive but the active CLI/RPC session is closed. Reopen qFlipper after unlocking.

Full Disconnect β€” The CDC interface is torn down. Windows removes the COM port, qFlipper shows "Connect your Flipper." Maximum isolation. Best for unattended or high-security storage.
Choosing USB mode:
At desk, actively working β†’ Minimal
Stepping away but staying plugged in β†’ CLI + RPC
Storing, transporting, or handing over β†’ Full Disconnect
Auto Lock Timer
How long the device stays idle before locking automatically.
Options: OFF Β· 10s Β· 15s Β· 30s Β· 60s Β· 90s Β· 2min Β· 5min Β· 10min
Auto Lock Disarm by USB
When ON, the auto-lock timer is suppressed while the Flipper is connected to USB β€” handy for desk sessions with qFlipper.
Options: OFF Β· ON

USB Mode New

Fox Settings → USB Mode chooses what the Flipper's USB port is for. qFlipper Mode (the default, and what every boot starts in) is the normal serial/RPC connection used by qFlipper and the CLI. Mass Storage Mode shares the SD card itself with your computer as a removable drive, so you can copy files on and off without pulling the card. The mode that is currently active shows the 7×7 OK marker to its left. The list also includes Music USB Mode and Media USB Mode, which launch the Fox MP3 USB and Fox Media USB apps — these serve the SD card's /MP3/ and /MEDIA/ folders to a computer as read-only drives (for speakers, TVs and media players).

Selecting Mass Storage takes effect immediately: Fox Settings closes and the Mass Storage app takes over the screen, any open qFlipper or CLI session is closed, and the card is handed to the computer. While the Mass Storage Mode screen is showing, nothing on the Flipper can use the SD card and qFlipper cannot connect. Eject the drive on your computer, then press Disconnect (OK or Back) to return to qFlipper Mode instantly — the card is remounted, qFlipper can reconnect, and you are back on the desktop. Ejecting from the computer also returns to qFlipper Mode. The choice is not saved: the Flipper always boots in qFlipper Mode.

↑ ↓Move between the four USB modes
OKSwitch to / launch the highlighted mode
BackReturn to Fox Settings

Custom Wallpaper

Replaces the desktop background with a custom 128 Γ— 64 pixel monochrome image. FoxFW can store any number of these at once in a wallpapers folder on the root of the SD Card (path: /ext/wallpapers/) and lets you switch between them from Fox Settings without reconnecting the device.

If the folder is missing or empty, FoxFW automatically generates a default wallpaper inside it on first boot. This means a valid wallpaper is always available and selected by default.

FoxFW Wallpaper Painter New

The easiest way to make a wallpaper β€” draw it directly in your browser, no separate converter or image editor needed. The border and status bar are pre-locked so you can't draw somewhere it won't show up, and you can preview your drawing live on the device or save it straight to the SD card over USB (which also activates it immediately). See Wallpaper Painter above for details.
FoxFW Wallpaper Converter

Prefer working offline in MS Paint? This older, standalone tool turns a .xbm wallpaper into a .bmp that you can edit in MS Paint (or any similar image editor), then converts it back to .xbm when you're ready to put it back on your SD card.

To use it: copy the wallpaper you want to edit into the same folder as the Wallpaper Converter and run it from there.

github.com/FoxFW/FoxFW-Wallpaper-Converter β†’
FoxFW Wallpaper Showcase New

Don't want to make your own? Browse community wallpapers and install one straight to your SD card over USB (this activates it immediately too), or just download the file and copy it over yourself. See Wallpaper Showcase above for details.
Wallpaper Name
Lists every valid 128Γ—64 .xbm file found in /ext/wallpapers/, alphabetically. Use < and > to pick which one is active β€” the desktop updates as soon as you select it.
Custom Wallpaper
Toggles the wallpaper on or off. When a wallpaper is active β€” the desktop shows your artwork cleanly with the status bar and any running app UI drawn on top.
Options: OFF Β· ON
Live updates: if you overwrite a wallpaper file over USB (e.g. with qFlipper) while it's the active one, the desktop picks up the change automatically β€” no reboot or menu visit needed.
Quick switch: Hold Right on the desktop New

A hardcoded shortcut for cycling wallpapers without opening Fox Settings. Custom Wallpaper off β†’ turns it on. On with only one wallpaper file β†’ turns it back off (default Fox background). On with two or more files β†’ advances to the next one alphabetically, wrapping back to the first after the last.

Creating your own wallpaper:

Validation: Only files that are valid 128Γ—64 XBM images show up in the Wallpaper Name list. If a file you copied over isn't appearing, re-export using one of the methods above and ensure the output dimensions are exactly 128Γ—64 pixels.

Change Flipper Name

Changes the device's display name. The name appears on the lock screen greeting and is broadcast as the Bluetooth device name.

Tip: A unique name makes your Flipper easy to identify in qFlipper and when nearby Flippers exchange information.
Menu Style
Controls the layout of the main Menu only β€” the app list you get from the Desktop's center button. Submenus and settings lists elsewhere in the firmware keep the same rounded-box styling under all four options; only Classic switches those back to plain, unboxed lists.

Classic β€” the original Flipper vertical list: one icon centered on screen at a time, with the previous/next item faded above/below and a scrollbar on the right. Up/Down/Left/Right all step through the list.
Fox Theme β€” a 3Γ—2 grid of double-row button boxes, six visible at once, orange FoxFW styling. All four directions move between cells.
Carousel β€” a horizontal row of icon tiles (the current item, one before it, up to four after), with the selected tile drawn larger and a "Start" banner + scrolling name underneath; side tiles show icon only. Device name top-left, dotted scrollbar along the bottom. Only Left/Right move through it; Up/Down do nothing. Only this main Menu ever uses this style β€” no other app's own internal menu is affected, and Carousel has no settings of its own beyond this picker.
Slider New β€” a horizontal row of icon tiles that wraps around in both directions (two items before the current one, two after), with the selected tile shown larger in a bold frame with a notched top edge and a scrolling name underneath. Dotted scrollbar along the bottom. Only Left/Right move through it; Up/Down do nothing, same as Carousel.
Options: Classic Β· Fox Theme Β· Carousel Β· Slider

Battery View

Controls the battery level indicator in the status bar. Changes take effect immediately β€” no restart is required.

Bar
Classic segmented bar β€” no numbers, clean look.
Percent
Plain percentage number (e.g. 87%).
Inverted Percent
Percentage in a filled (inverted) block.
Retro 3
3-segment retro-style bar.
Retro 5
5-segment retro-style bar β€” more granular than Retro 3.
Bar + Percent
Segmented bar combined with a percentage number.

Show Clock

Show Clock
Displays the current time in the status bar. Follows the system 12h/24h setting. Changes take effect immediately β€” return to the desktop and the clock appears or disappears without a restart.
Options: OFF Β· ON

Favorite Apps

Assigns apps to four configurable desktop button shortcuts. Each slot is triggered from the idle desktop screen.

Favorite β€” Left Short
Short press of Left on the desktop. Default: Fox File Browser.
Favorite β€” Left Long
Hold Left on the desktop. Default: Fox File Browser.
Favorite β€” Right Short
Short press of Right on the desktop. Default: Fox File Browser.
Favorite β€” OK Long
Hold OK (centre) on the desktop. Default: Fox File Browser.
Tip: Any installed app (including external FAPs) can be assigned to a Favorite slot. Select None to clear a slot and restore its default behaviour.
Hold Right isn't a Favorite anymore: it's now a hardcoded quick wallpaper switcher β€” see Custom Wallpaper below.
Chapter 12

Fox ESP32 Apps FoxFW Exclusive

FoxFW ships a full suite of apps that pair with a wired ESP32 to extend your Flipper Zero with WiFi, BLE, HTTP, scripting, Discord, captive portal, and more. All communicate over a plain UART link at 115200 baud β€” connect TX (GPIO1) β†’ Flipper pin 14 and RX (GPIO3) β†’ Flipper pin 13.

Firmware required. Flash your ESP32 first. The easiest way is the built-in Fox ESP32 Flasher app (see below) β€” no PC, no downloads, the firmware is bundled into FoxFW. Alternatively use the Web Flasher (Chrome / Edge). Source code and releases: github.com/FoxFW/Fox_ESP32_FW.
AppLocationESP32?What it does
FoxHub Main Menu (last item) / Apps β†’ Fox βœ“ The main control hub β€” WiFi recon, BLE scanning and attacks, HTTP/WebSocket bridge, FoxScript engine, Discord messaging, and more. Start here after flashing.
Fox Chat Apps β†’ Fox βœ“ Post and read Discord channel messages directly from your Flipper using the ESP32's WiFi connection.
Fox AI Chat Apps β†’ Fox βœ“ Chat with Google Gemini from your Flipper's screen over the ESP32's WiFi connection β€” no API key needed, conversation history saved permanently to the SD card.
Fox Portal Apps β†’ Fox βœ“ Turns the ESP32 into a captive portal access point. Visitors who join the Fox Portal WiFi network see your custom HTML form; submissions stream back to the Flipper over UART.
Fox ESP32 Detector Apps β†’ Fox βœ“ Scans every GPIO pin pair and baud rate combination to identify a connected ESP32. Run this first if any app reports "not detected".
Fox ESP32 Flasher Apps β†’ Fox βœ“ Flash Fox ESP32 Firmware onto a connected ESP32 directly from the Flipper β€” no PC, no browser, no files to download. Firmware for every supported board is bundled into FoxFW.
Fox ESP32 Terminal Apps β†’ Fox βœ“ A focused live-terminal companion β€” streaming console, quick command send, and per-session logs saved to your SD card.
CSIght_FoxEdition Apps β†’ Fox βœ“ WiFi CSI (Channel State Information) motion/presence sensing through a wired ESP32 β€” connects the same way as every other Fox-Edition app (auto-detect, no board picker) and reports the ESP32's CSI capability tier (Full/Limited/None) for your board.
Fox Update Downloader Apps β†’ Fox βœ“ Checks GitHub for newer FoxFW2.0 and Fox ESP32 Firmware releases, downloads them over the ESP32 bridge, and hands off to install β€” no PC needed.
Fox File Downloader Apps β†’ Fox βœ“ Direct URL downloads with resume, an App Catalog browser, a GitHub .fap installer, and its own app-manager and WiFi/recon/attack menus β€” all over the ESP32 bridge.
FoxLAB Apps β†’ Fox βœ“ Turns the ESP32 into a full browser control page for your Flipper β€” dashboard, file browser, Fox app library, live screen mirror, NFC tools, a Paint canvas, a pulse plotter, a Sub-GHz signal viewer, a raw Terminal, and a full Settings tab (display, locale, alarms, Security & Privacy/PIN, and more). Reachable from any phone, tablet, or laptop joined to the ESP32's WiFi hotspot (foxlab.local) β€” no companion app, no USB, no drivers. Keep the FoxLAB app open on the Flipper while connected.
FoxDeFlock Apps β†’ Fox βœ“ Flock Safety / ALPR camera detector β€” rotates through WiFi probe, WiFi beacon, and BLE scans over the ESP32, scoring hits by confidence. Based on FlipDeFlock by ReconGrunt.
Fox Chameleon Apps β†’ Fox βœ“ BLE bridge between the Flipper and a Chameleon Ultra β€” uses the ESP32's BLE stack to relay commands without a phone or PC.
Fox RF Jammer Apps β†’ Fox β€” Multi-mode Sub-GHz RF jammer. Runs entirely on the Flipper's built-in CC1101 radio β€” no ESP32 needed. Also reachable via the RF Jammer button on Sub-GHz's Mode Picker screen.
Fox TPMS Apps β†’ Fox β€” Tire-pressure sensor reader β€” decodes, edits, and (for Schrader) re-transmits TPMS signals. Also reachable via the TPMS Read/Edit button on Sub-GHz's Mode Picker screen. See Tire Pressure Monitoring below.
What's inside FoxLAB? Open the app on your Flipper (Main Menu β†’ Fox β†’ FoxLAB) to start the ESP32's WiFi hotspot and web server, then join that network β€” advertised as both a fixed IP and foxlab.local β€” from any phone, tablet, or laptop and point a browser at it β€” no companion app, no USB cable, no drivers to install. The page itself is tabbed: Dashboard (device, power, and storage info at a glance), Files (browse, read, and write your SD card straight from the browser), Libraries (Fox app library), Screen mirror (live view of the Flipper's display with remote D-pad input), NFC, Paint (a drawing canvas you can send to the Flipper), Pulse Plotter, Sub-GHz Viewer (visualize captured signals), Terminal (a raw command console), and a full Settings tab built out to match the on-device Settings app β€” Display & Sound, Locale & Input, Menu Theme, Desktop Display, Night Shift, RGB Backlight, Device Name, Input, Bluetooth, Power, Fox Alarm Clock, and Security & Privacy (PIN set/change/remove and the rest). The old Firmware Update Check, Showcase, and FAP Compiler tabs have been removed β€” none of them work without internet access, which the FoxLAB hotspot doesn't provide. FoxLAB has to stay open on the Flipper for the page to respond β€” closing it, or the Flipper losing power or its connection to the ESP32, disconnects the browser; changing your Flipper's device name from here queues a restart until you close the app, rather than rebooting immediately.
Compatible boards. ESP32 Classic (WROOM-32 / DevKit), ESP32-S3, ESP32-S2 (including the official Flipper Wi-Fi Dev Board), ESP32-C3, ESP32-C5, and ESP32-C6 are all supported. The Web Flasher detects which chip you have. See the Fox ESP32 Firmware guide for full wiring diagrams, board-specific notes, and the complete command reference.
Chapter 13

Fox USB Drive Apps β€” MP3 & Media New

Two apps turn a folder on your SD card into a small read-only USB drive named FOX that you plug straight into a Bluetooth speaker, car head unit, or TV β€” no PC in the middle. Unlike Mass Storage Mode (which shares your whole SD card), these expose only one chosen folder, so the device on the other end sees just your media.

How to use: copy your files into /MP3/ (or the /MEDIA/ sub-folders) first β€” over qFlipper, Fox File Browser, or a card reader β€” then launch the app. It builds the drive from whatever is in the folder and presents it over USB as FOX. Plug the Flipper into the speaker or TV and it reads your files like an ordinary thumb drive.

Built instantly β€” nothing is copied. The drive is generated from the folder's current contents the moment you open the app; even a large library is ready in a second or two, because the files are served in place rather than duplicated onto a separate image. Add or remove files in the folder, relaunch, and the drive reflects the change.
Read-only by design. The FOX drive cannot be written to from the speaker, TV, or PC side β€” the connected device can only read your files, never add, change, or delete them. Long file names are handled automatically.

While the drive is active the screen shows the FOX drive with live read counters and a brief LOADING hint while the other device opens it. Press Disconnect (OK) or Back to end the session and return to normal β€” qFlipper reconnects on its own.

OKDisconnect the drive and exit
BackDisconnect the drive and exit
Chapter 14

Sub-GHz

The Sub-GHz app lets your Flipper interact with radio-frequency devices between ~300 MHz and 928 MHz β€” garage doors, gate openers, weather stations, tyre-pressure sensors, key fobs, alarm remotes, and many more. FoxFW adds a Bar/Line signal display, an in-app RAW editor, a Modulation Analyzer, and per-protocol enable/disable toggles.

Legal notice: Only transmit signals you are authorised to send. Replaying remotes you own is generally fine; transmitting on licensed frequencies without authorization is not. Know your local regulations.

Read Enhanced

Opens on a Start screen β€” press OK to begin listening for an incoming signal. Unlike the original Read screen (which decodes every protocol continuously in real time), Garage/Gate/Other's Read now records the incoming signal raw first and only runs it through the protocol decoders once the transmission has actually finished β€” the listening screen looks and behaves like Read RAW's own recording screen. The decode pass tries every enabled Protocol Group against the capture in turn until one decodes it or none do. While that runs, a Decoding screen shows a progress bar and which Protocol Group is being tried (for example 3/11); Back cancels and returns to the Start screen. A signal has to clear the RSSI Threshold set in Receiver Config before Read starts treating it as an actual transmission, so ambient RF noise alone won't trigger a capture. Read also measures the background level of the radio it is using as listening starts: if that background sits close to or above your threshold (some amplified external modules do this), the bar is raised above it automatically for that Read. A burst of only a few stray pulses is ignored and Read keeps listening, and a single capture ends after 5 seconds at most. If the signal decodes successfully you're taken straight to its info screen to save or discard it; if nothing matches, a "No Match" screen offers Back (return to the Start screen with the Start button ready, not counting down) or Save (keep the raw capture and load it into the RAW editor). Nothing is written to SD card unless you choose to save.

OKStart listening (from the Start screen)
←Open Receiver Config (frequency, modulation, hopping, RSSI threshold, and more) β€” from the Start screen or while listening
BackWhile listening: stop the read and return to the Start screen (no countdown). During the Start countdown: cancel it, leaving Start selected. From the Start screen: return to menu
Garage/Gate/Other mode shows a reduced Receiver Config β€” Frequency, Modulation, Hopping, Bin RAW, and Sound only. Automotive mode's Receiver Config additionally has per-protocol Ignore toggles, Preset Hopping, Delete Old Signals, Reset to Default, and Lock Keyboard, none of which Garage/Gate/Other needs.
Auto-Save Every Signal New β€” a toggle in the main Sub-GHz Read's Receiver Config (Automotive mode). With it on, every signal Read decodes is written straight to your Sub-GHz folder as its own .sub file the moment it lands in the history β€” no need to open each capture and save it by hand. Files are named automatically from the protocol name and a date/time stamp (plus any File Prefix you've set), and a double-buzz confirms each save. Leave it off to keep the normal save-only-what-you-choose behavior.
Flipper RAM warning New β€” if free RAM is already low when the app opens (or qFlipper's screen-mirror is already running), a one-time "Flipper RAM" screen gives you a heads-up that Read, Read RAW, and Decode RAW need extra RAM. qFlipper's screen-mirror keeps working normally everywhere else, including while you're browsing this app's other menus and while sitting on the idle Start screen of Read, Read RAW, or Decode. The moment you press Start/Rec in one of those three, Fox disconnects CLI/qFlipper β€” qFlipper shows its own "Connect your Flipper" screen until you finish and back out, at which point it reconnects automatically and the mirror resumes on its own.

Read RAW Enhanced

Records everything the radio receives as a timed sequence of high/low edges without attempting to decode. Use this when the protocol is unknown, not yet supported, or uses rolling codes.

OKStart / stop recording
RightSave the current recording
LeftSend the recording immediately without saving
BackDiscard and return

FoxFW enhancements to Read RAW:

Storage tip: RAW files can be large. A 60-second recording at 433 MHz can exceed 1 MB. Keep recordings short and trim them in the RAW editor afterwards.

Saved Files & RAW Editor NEW

The Saved menu lists all .sub files under /ext/subghz/. Tap a file and press OK or More for available actions.

ActionFile typeDescription
EmulateAll decodedContinuously retransmit the saved signal.
RenameAllRename the file on SD card.
Edit RAWRAW onlyOpen the built-in waveform editor to trim the capture.
DeleteAllPermanently delete the file.
Counter BruteForceCounter-basedTry incrementing counter attacks.
Fiat V1 (Hitag2) key Updated β€” Fiat V1 signals are secured with a Hitag2-derived rolling code that also depends on a hidden 18-bit "epoch" counter. If Read already matched the signal against one of FoxFW's known keys, Emulate works immediately. Otherwise, Emulate offers a choice: Recover Key (Auto) brute-forces every known key against the full epoch range (up to ~2.1 million combinations) with a live progress bar, speed, and ETA β€” typically done in well under a minute β€” Enter Key Manually for the original hex-entry flow (epoch fixed at 0), or, if the free Hitag2 Hell app is installed, Recover Key (Hitag2Hell) to launch it directly against the loaded signal. On a successful recovery, the key and epoch are saved straight into the file, and the result screen offers Apply (transmit once) or CBF (jump straight into Counter BruteForce using the newly recovered key, useful if the fob's rolling counter has drifted from what was captured).

RAW Editor controls:

← β†’Move the active marker (A or B) through the waveform
↑ ↓Zoom in / out
OK (short)Switch between marker A and marker B
OK (hold)Open the Save / Cut / Undo menu
BackReturn to file menu
Save
Export the region between A and B as a new .sub file in the same folder.
Cut
Remove everything outside the A–B region. Reversible with Undo.
Undo
Revert the last Cut. One undo level is kept in RAM; rebooting clears it.
Trimming workflow: Record with Read RAW β†’ open in editor β†’ place A just before the signal starts, B just after it ends β†’ OK hold β†’ Cut β†’ Save. Clean, trimmed capture with no leading or trailing noise.

Signal Display β€” Bar & Line NEW

Change between display styles in Radio Settings β†’ Visualizer. The setting persists across reboots. Both styles read the same live RSSI window and share the dashed trigger-threshold line β€” only the rendering differs.

Bar
Each column is drawn as a filled vertical bar (signal "strength" view). Lightweight. Good for confirming the presence or absence of a carrier.
Best for: Quick detection, low-noise environments
Line
Columns are connected with line segments, giving a continuous trace similar to a spectrum-analyzer envelope. A quiet/empty signal renders as a flat baseline.
Best for: Reading fine RSSI shape and burst edges

Frequency Analyzer

Sweeps a wide frequency range looking for any signal above the noise floor. When a carrier is detected its frequency is highlighted.

OK (short)Lock / unlock the highlighted frequency
OK (hold)Accept locked frequency and open Receiver on it
BackReturn to menu
When to use it: You have an unknown remote and don't know its frequency. Press a button on the remote while the analyzer runs β€” it finds the transmission frequency automatically.

Modulation Analyzer FoxFW Exclusive

New in FoxFW. The Modulation Analyzer does not exist in stock Flipper firmware.

The Modulation Analyzer solves the complementary problem to the Frequency Analyzer: you know the frequency but you don't know the modulation. It rapidly cycles through all enabled modulation presets at a fixed frequency, recording any preset whose RSSI rises above a detection threshold as a "hit." After scanning, select a hit and press OK to open the Receiver pre-configured for that exact frequency and modulation.

Controls:

↑ ↓Select a hit in the results list
OK (short)With hits: open Receiver on selected modulation. No hits: toggle Start/Stop
OK (hold)Toggle scanning on / off
← LeftOpen Config page (scanning pauses)
BackStop scanning and return to menu

Screen layout:

AreaContent
Header barTarget frequency (left) Β· Current preset being tested or STOPPED (right)
Hit listDetected modulations with RSSI in dBm and signal-strength bars (●●●○○)
FooterConfig Β· Stop/Start Β· OK=Tune (when hits exist)

Config page: Press Left to open. Scanning pauses automatically.

Frequency
The target frequency (300–928 MHz). Pre-populated from Radio Settings, so running the Frequency Analyzer first means this is already set correctly.
AM650 / AM270 / FM238 / FM476 / FM95 / FM15k / BLE / GFSK9.99
Toggle each modulation preset ON (include in scan) or OFF (skip). Disabling unlikely presets makes each cycle faster and reduces false positives.
OOK_LR / OOK_U / AM_1 / FSK_1 / FreqFast / FreqUnlckd / Pagers New
Additional general-purpose presets. Toggle ON (include in scan) or OFF (skip) the same as the original presets above.
AUDIv1 / AUDIv2 / AUDIv3 / FORDv1 / FORDv2 / FORDv3 / FORDv3-Orig / FORDv4 / FORDv5 / FORDv6 / Honda1 / Honda2 New
Vehicle-specific presets tuned for Audi, Ford, and Honda key fobs. Toggle ON (include in scan) or OFF (skip) the same as the other presets.

Modulation reference:

AM650
OOK/ASK Β· 650 baud
Most common. Gate openers, garage doors, alarm remotes.
AM270
OOK/ASK Β· 270 baud
Slower OOK. Older remotes and simple sensors.
FM238
2-FSK Β· 2.38 kbps
Narrow-band FSK. Weather stations, tyre-pressure sensors.
FM476
2-FSK Β· 4.76 kbps
Wider FSK. Some security systems, sensor hubs.
FM95
2-FSK Β· 9.5 kbps
Higher-rate FSK. Metering, industrial sensors.
FM15k
2-FSK Β· 15 kbps
High-speed FSK. Some proprietary protocols.
BLE
GFSK Β· 1 Mbps
Bluetooth LE channels. Mainly useful at 2.4 GHz; rarely useful in Sub-GHz range.
GFSK9.99
GFSK Β· 9.99 kbps
Gaussian FSK. European devices, smart meters.
OOK_LR New
OOK/ASK Β· Long Range
Extended-range OOK preset for weak or distant signals.
OOK_U New
OOK/ASK Β· Universal
General-purpose OOK preset covering a wide range of ASK devices.
AM_1 New
AM/OOK
Alternate amplitude-modulation preset for AM-based remotes.
FSK_1 New
2-FSK
Alternate frequency-shift keying preset for FSK-based devices.
FreqFast New
FSK Β· fast timing
Fast-timing frequency preset for high-speed transmissions.
FreqUnlckd New
FSK Β· extended range
Unlocked/extended frequency preset for a wider tuning range.
Pagers New
FSK
Tuned for pager-network transmissions.
AUDIv1 New
FSK Β· vehicle preset
Audi key fob preset (variant 1).
AUDIv2 New
FSK Β· vehicle preset
Audi key fob preset (variant 2).
AUDIv3 New
FSK Β· vehicle preset
Audi key fob preset (variant 3).
FORDv1 New
FSK Β· vehicle preset
Ford key fob preset (variant 1).
FORDv2 New
FSK Β· vehicle preset
Ford key fob preset (variant 2).
FORDv3 New
FSK Β· vehicle preset
Ford key fob preset (variant 3).
FORDv3-Orig New
FSK Β· vehicle preset
Original Ford key fob preset (variant 3).
FORDv4 New
FSK Β· vehicle preset
Ford key fob preset (variant 4).
FORDv5 New
FSK Β· vehicle preset
Ford key fob preset (variant 5).
FORDv6 New
FSK Β· vehicle preset
Ford key fob preset (variant 6).
Honda1 New
FSK Β· vehicle preset
Honda key fob preset (variant 1).
Honda2 New
FSK Β· vehicle preset
Honda key fob preset (variant 2).

Recommended workflow β€” unknown device:

Step 1Frequency Analyzer
Find frequency
β†’
Step 2OK on result
Saves to Radio Settings & returns to Sub-GHz
β†’
Step 3Modulation Analyzer
Find modulation at saved freq
β†’
Step 4OK on hit
Opens Receiver pre-configured
β†’
Step 5Receiver
Capture & save
Seamless transition: When the Frequency Analyzer locks onto a signal and you press OK, the detected frequency is saved directly to the Sub-GHz Radio Settings and you are returned to the Sub-GHz main screen β€” no manual entry required. Similarly, pressing OK on a Modulation Analyzer hit immediately opens the Receiver with both frequency and modulation already configured. The entire workflow from unknown signal to captured .sub file can be completed in under a minute without touching a settings menu.
Dwell time: The analyzer spends ~80 ms on each preset before moving to the next. With all 8 enabled, a full cycle takes under a second. For very short transmissions, disable all presets except the most likely candidates so each gets more dwell time.
Limitation: The analyzer detects carrier energy (RSSI), not successful decoding. A strong interference source will register on every modulation. The hit with the highest RSSI is most likely the correct one. Always confirm in the Receiver.

Protocol List & Filters NEW

Automotive mode lists every protocol grouped by manufacturer/family (Ford, Kia/Hyundai, VAG, PSA, and so on). Each group has its own master ON / OFF toggle that sets every protocol inside it at once, and every individual protocol underneath can still be toggled on its own. Protocols set to OFF are completely ignored during Read and Read RAW β€” the toggle is live, not just cosmetic.

The top of the list shows the active protocol count, computed live:

SituationDisplay
All enabledProtocols: 34
Some disabledProtocols: 28/34
↑ ↓Scroll the list
← β†’ or OKToggle the highlighted group or protocol ON / OFF
Select rowSet to "All"/"None" then OK β€” bulk-enable or bulk-disable every protocol
BackSave and return
Persistence: Toggle states are saved as part of last_subghz.settings and restored on every app launch.

Garage/Gate/Other mode shows a different screen here instead, opened from the app's own full-width Protocol Group button β€” one double-row button per Protocol Group. Each button shows the group's name in bold with its member protocols scrolling underneath. Up/Down move the highlight to browse groups; pressing OK on a group toggles it ON or OFF independently of every other group, shown with a small icon on the left (filled = enabled, hollow = disabled) β€” at least one group must stay enabled. Only one group's protocols are ever resident in RAM at a time, but Read's decode pass tries every enabled group in turn against a captured signal, so you don't have to pre-pick a single group before capturing β€” only rule out the ones you're not interested in.

Sub-Ghz Mode Picker New

Opening Sub-GHz first shows a Sub-Ghz Mode screen β€” five stacked buttons, two visible at a time with a scrollbar on the right showing there's more to scroll to:

ButtonCovers
AutomotiveCar and motorcycle key fobs β€” Ford, Kia/Hyundai, VAG, PSA, Fiat, Honda, and the rest of the Automotive Key Fob Protocols table below.
Garage/Gate/OtherEvery non-automotive protocol β€” garage and gate remotes plus general-purpose RF protocols like Princeton, Security+, and X10. See the Garage/Gate/Other Protocols tables below.
RF JammerLaunches the standalone Fox RF Jammer app β€” a multi-mode Sub-GHz jammer running on the Flipper's built-in CC1101 radio.
TPMS Read/EditLaunches the standalone Fox TPMS app to scan, decode, and edit tire-pressure sensor signals β€” see Tire Pressure Monitoring below.
Radio SettingsOpens the shared Radio Settings screen directly from this picker β€” the same screen and settings file every mode uses, so there's only one place to configure frequency, TX power, and the rest regardless of which mode you're about to load.
↑ ↓Move the highlight between the five buttons, scrolling the page when needed
OKLoad the highlighted mode, or open Radio Settings

Automotive opens straight into the same Sub-GHz screen you already know β€” Read, Saved, Protocol List, and so on. Garages/ Gates/Other launches a separate external app that looks and behaves exactly the same way, just scoped to non-automotive protocols; a loading wheel is shown briefly while it starts, since it's a large app. RF Jammer and TPMS Read/Edit each launch their own standalone app the same way, and Back returns you to this picker with that row still highlighted. Whichever mode you pick, pressing Back from its main menu exits Sub-GHz entirely (same as before) β€” relaunch the app to pick a mode again.

Garage/Gate/Other also automatically uses an external CC1101 module (connected via GPIO/external antenna) instead of the internal radio whenever one is present β€” no setting to turn on. A small background app checks for one automatically, and remembers the answer, rather than checking on every single launch, which would cost RAM even for the common case of nothing being plugged in. This check only runs while the Flipper is idle (home screen, not locked, nothing else running), on the same schedule as the status bar WiFi/CC1101 icon's ESP32 check β€” every 15 seconds once an ESP32 companion board has ever answered on this device, every minute until then. If you've just connected a module and don't want to wait, run CC1101 External Probe for SubGhz Garage from the Apps menu to force an immediate recheck β€” that also opens Garage/Gate/Other automatically once it's done.

Supported Systems Reference

FoxFW includes protocol decoders and encoders across two groups, matching the Sub-Ghz Mode picker: the Automotive Key Fob Protocols table below is what the Automotive mode loads; Gate & Access Control and General RF Protocols together are what the Garage/Gate/Other mode loads. All operate within the 315 MHz, 433 MHz, and 868 MHz Sub-GHz bands.

Legal notice: Only capture, replay, or transmit signals on systems you own or have explicit authorisation to test. Comply with your local radio regulations.

Automotive Key Fob Protocols Automotive

ManufacturerProtocolFrequencyModEncodeDecodeCRC
VAG (VW / Audi / Skoda / Seat)VAG GROUP433 MHzAMβœ“βœ“β€”
PorschePorsche AG433 / 868 MHzAMβœ“βœ“β€”
PSA (Peugeot / CitroΓ«n / DS)PSA GROUP433 MHzAM/FMβœ“βœ“βœ“
FordFord V0315 / 433 MHzAMβœ“βœ“βœ“
FordFord V1315 / 433 MHzFMβœ“βœ“βœ“
General Motors (Chevrolet / GMC / Buick / Cadillac)GM315 / 433 MHzAMβœ“βœ“β€”
FordFord V2433 MHzFMβœ“βœ“β€”
FordFord V3433 MHzFMβœ“βœ“βœ“
FiatFiat SpA433 MHzAMβœ“βœ“βœ“
FiatMarelli / Delphi433 MHzAMβ€”βœ“βœ“
Renault (older models)Marelli433 MHzAMβ€”βœ“β€”
Renault (Hitag2)Renault V1315 / 433 / 868 MHzAMβœ“βœ“β€”
MazdaSiemens 5WK49365D315 / 433 MHzAM/FMβœ“βœ“βœ“
MazdaMazda V0433 MHzFMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V0433 MHzFMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V1315 / 433 MHzAMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V2315 / 433 MHzAM/FMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V3 / V4315 / 433 MHzAM/FMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V5433 MHzFMβœ“βœ“βœ“
Kia / HyundaiKIA/HYU V6433 MHzFMβœ“βœ“βœ“
Kia / HyundaiKIA V7433 MHzFMβœ“βœ“βœ“
SubaruSubaru433 MHzAMβœ“βœ“β€”
SuzukiSuzuki433 MHzFMβœ“βœ“βœ“
MitsubishiMitsubishi V0868 MHzFMβœ“βœ“β€”
MitsubishiMitsubishi V0-a315 / 433 MHzAM/FMβœ“βœ“βœ“
Chrysler / Dodge / JeepFOBIK GQ43VT315 / 433 MHzAMβœ“βœ“β€”
StarlineStar Line433 MHzAMβœ“βœ“β€”
Scher-KhanScher-Khan433 MHzFMβœ“βœ“β€”
Scher-KhanMagic Code PRO1 / PRO2433 MHzFMβœ“βœ“βœ“
SheriffSheriff CFM ZX750 / ZX930433 MHzAMβœ“βœ“β€”
PSA & “Unknown Signal”: On receive, a PSA-group signal that has not been decrypted yet is shown as Unknown Signal rather than PSA GROUP. This is deliberate: several other makes’ remotes (GM, Honda, VW, Ford and similar) share enough of PSA’s signalling that an undecrypted capture cannot be told apart with certainty, so FoxFW no longer claims “PSA” until a frame is actually recovered. The capture is still saved and fully usable — you can raw-replay it, and running PSA Decrypt on it will reveal the real key, at which point it is relabeled PSA GROUP and the saved file is renamed with a PSA_decrypted_ prefix. If a capture never decrypts, it was almost certainly another manufacturer’s rolling code, which can only be raw-replayed anyway.

Tire Pressure Monitoring (TPMS) Standalone App

TPMS is its own app. TPMS decoding doesn't run inside Automotive mode. Pick TPMS Read/Edit on the Sub-Ghz Mode picker (see Sub-Ghz Mode above) to launch the standalone Fox TPMS app β€” it scans, decodes, edits, and saves independently of the main Sub-GHz app, and Back returns you to the Mode Picker with TPMS Read/Edit still highlighted, the same way Garage/Gate/Other does.
Guided Select Model flow. Fox TPMS opens on a Select Model screen β€” pick your vehicle group (Ford, Renault, CitroΓ«n/Peugeot, Toyota/Lexus, Kia/Mercedes/Other) and the app walks you through vehicle-specific instructions while tuning the scanner to that group's candidate frequencies and modulations. Pick Manual Scan instead to skip the guide and scan everything, the old generic behavior. A Trigger screen (renamed from "Relearn/Activate") pulses the sensor's 125kHz LF wake signal to prompt it to transmit β€” once triggered, the Scanning/Receiver screen automatically re-fires that pulse every 5 seconds while listening, with a vibrate + "Reposition" cue if a pulse gets no reply, instead of pulsing once and listening forever.
ManufacturerProtocolFrequencyModSendDecodeCRC
SchraderSchrader GG4433 MHzFMβœ“βœ“βœ“
FordTPMS Ford315 / 433 MHzFMβ€”βœ“βœ“
CitroΓ«nTPMS Citroen433 MHzFMβ€”βœ“βœ“
PMV (aftermarket)TPMS PMV-107J433 MHzFMβ€”βœ“βœ“
RenaultTPMS Renault433 MHzFMβ€”βœ“βœ“
TPMS signal editing β€” decoding a TPMS sensor opens Fox TPMS's receiver info screen showing Pressure, Temperature, ID, and Battery instead of a text dump. Select a field (Up/Down) and press OK to edit Pressure, Temperature, or ID; Battery cycles Ok/Low/Unknown in place with OK. Right saves the edited signal. Editing correctly re-encodes the raw payload and checksum/CRC for all five protocols above, not just Schrader β€” each has its own re-pack logic matching its real bit layout, so a saved edit is never mismatched with the protocol it claims to be.
Send (OK, hold) only works for Schrader GG4. The other four TPMS protocols don't have a transmit encoder built yet β€” this is unrelated to editing/saving, which is correct for all five. Ford, CitroΓ«n, PMV-107J, and Renault TPMS signals can be received, viewed, edited, and saved; actually re-transmitting one over the air is a separate, not-yet-built feature.

Gate & Access Control Protocols Garage/Gate/Other

The Group column shows which Protocol Group each protocol belongs to β€” make sure that group is enabled on the app's own Protocols screen for Read to try it (every group is enabled by default).

ProtocolFrequencyModEncodeDecodeCRCGroup
Keeloq315 / 433 / 868 MHzAMβœ“βœ“β€”2 Β· General 2
Clemsa433 MHzAMβœ“βœ“β€”8 Β· Spain, Russia
Dooya315 / 433 MHzAMβœ“βœ“β€”11 Β· Blinds / Shutters
Ansonic433 MHzFMβœ“βœ“β€”8 Β· Spain, Russia
Nice FLO433 MHzAMβœ“βœ“β€”6 Β· Italian Brands 2
Nice FloR-S433 MHzAMβœ“βœ“βœ“6 Β· Italian Brands 2
CAME315 / 433 MHzAMβœ“βœ“β€”5 Β· Italian Brands 1
CAME TWEE433 MHzAMβœ“βœ“β€”5 Β· Italian Brands 1
CAME Atomo433 MHzAMβœ“βœ“β€”5 Β· Italian Brands 1
Faac SLH433 / 868 MHzAMβœ“βœ“β€”7 Β· Italian Brands 3
Telcoma/Cardin EDGE433 MHzAMβœ“βœ“β€”7 Β· Italian Brands 3
Holtek433 MHzAMβœ“βœ“β€”1 Β· General
Holtek HT12x433 MHzAMβœ“βœ“β€”1 Β· General
Somfy Telis433 MHzAMβœ“βœ“βœ“11 Β· Blinds / Shutters
Somfy Keytis433 MHzAMβœ“βœ“βœ“11 Β· Blinds / Shutters
Alutech AT-4N433 MHzAMβœ“βœ“βœ“8 Β· Spain, Russia
Keyfinder433 MHzAMβœ“βœ“β€”2 Β· General 2
KeyFinder2433 MHzAMβœ“βœ“β€”2 Β· General 2
KingGates Stylo4k433 MHzAMβœ“βœ“β€”6 Β· Italian Brands 2
Beninca ARC433 MHzAMβœ“βœ“β€”5 Β· Italian Brands 1
Hormann HSM433 / 868 MHzAMβœ“βœ“β€”9 Β· Germany
Marantec433 MHzAMβœ“βœ“βœ“9 Β· Germany
Marantec24433 MHzAMβœ“βœ“βœ“9 Β· Germany
GangQi433 MHzAMβœ“βœ“β€”10 Β· China / Gate Only
Jarolift433 MHzAMβœ“βœ“β€”11 Β· Blinds / Shutters

General RF Protocols Garage/Gate/Other

ProtocolFrequencyModEncodeDecodeCRCGroup
Princeton315 / 433 MHzAMβœ“βœ“β€”1 Β· General
Doorbell32433 MHzAMβœ“βœ“β€”13 Β· More Gates 2
Linear315 MHzAMβœ“βœ“β€”4 Β· Linear (USA)
LinearDelta3315 MHzAMβœ“βœ“β€”4 Β· Linear (USA)
GateTX433 MHzAMβœ“βœ“β€”10 Β· China / Gate Only
Security+ 1.0315 MHzAMβœ“βœ“β€”3 Β· Chamberlain (USA)
Security+ 2.0315 MHzAMβœ“βœ“β€”3 Β· Chamberlain (USA)
Chamberlain Code315 MHzAMβœ“βœ“β€”3 Β· Chamberlain (USA)
MegaCode315 MHzAMβœ“βœ“β€”4 Β· Linear (USA)
Mastercode433 MHzAMβœ“βœ“β€”8 Β· Spain, Russia
Dickert MAHS433 MHzAMβœ“βœ“β€”9 Β· Germany
SMC5326433 MHzAMβœ“βœ“β€”1 Β· General
Phoenix V2433 MHzAMβœ“βœ“β€”6 Β· Italian Brands 2
Doitrand433 MHzAMβœ“βœ“β€”7 Β· Italian Brands 3
Hay21433 MHzAMβœ“βœ“β€”10 Β· China / Gate Only
Revers RB2433 MHzAMβœ“βœ“β€”10 Β· China / Gate Only
Roger433 MHzAMβœ“βœ“β€”7 Β· Italian Brands 3
X10310 MHzAMβœ“βœ“β€”2 Β· General 2
RAW315 / 433 / 868 MHzAM/FMβœ“β€”β€”All
BinRAW315 / 433 / 868 MHzAM/FMβœ“βœ“β€”All
RAW / BinRAW aren't device-specific protocols β€” they're the generic raw-signal capture/replay entries every other frequency and modulation falls back to, which is why they cover all three bands. RAW stores the raw pulse timing (record/replay only, no protocol-level decode); BinRAW additionally decodes it into a bit stream.

Disabled / Experimental Protocols

These protocols are fully implemented in the FoxFW source tree but are commented out of the active registry, so they do not count toward the 63 active protocols above and won't appear in the Protocol List on the device. Reason: Further testing/fixes required.

ProtocolFrequencyModStatus
Honda Static315 / 433 MHzFMDisabled
BMW CAS4433 MHzAMDisabled
Nero Sketch433 MHzAMDisabled
Nero Radio433 MHzAMDisabled
iDo 117/111433 MHzAMDisabled
Power Smart433 MHzAMDisabled
BETT433 MHzAMDisabled
Honeywell (WDB)315 / 433 MHzAMDisabled
Honeywell Sec315 MHzAMDisabled
Magellan433 MHzAMDisabled
Intertechno V3315 / 433 / 868 MHzAMDisabled
Clemsa433 MHzAMDisabled
Ansonic315 / 433 MHzFMDisabled
Dooya315 / 433 MHzAMDisabled
Legrand433 MHzAMDisabled
Hollarm433 MHzAMDisabled
Feron433 MHzAMDisabled
Elplast433 MHzAMDisabled
Treadmill37433 MHzAMDisabled
Column guide:
Mod β€” Modulation: AM = OOK/ASK Β· FM = FSK
Encode β€” FoxFW can transmit / replay signals in this protocol
Decode β€” FoxFW can receive and identify signals in this protocol
CRC β€” Protocol includes a checksum; decoded frames are validated (βœ“) or not (β€”)

Radio Settings

Frequency
Receive / transmit centre frequency. FoxFW extends the allowable range beyond stock firmware limits.
Common: 315 MHz Β· 433.92 MHz Β· 868.35 MHz Β· 915 MHz
Modulation
CC1101 modulation preset. Must match the target device β€” wrong modulation means no decode even on the right frequency.
Options: AM270 Β· AM650 Β· FM238 Β· FM476 Β· FM95 Β· FM15k Β· BLE Β· GFSK9.99 Β· OOK_LR Β· OOK_U Β· AM_1 Β· FSK_1 Β· FreqFast Β· FreqUnlckd Β· Pagers Β· AUDIv1 Β· AUDIv2 Β· AUDIv3 Β· FORDv1 Β· FORDv2 Β· FORDv3 Β· FORDv3-Orig Β· FORDv4 Β· FORDv5 Β· FORDv6 Β· Honda1 Β· Honda2
Visualizer
Live signal display style while the app is actively receiving.
Options: Bar (filled vertical bars) Β· Line (continuous trace)
TX Power
Transmit power. Higher = more range, more battery drain. Preset uses whatever the loaded .sub file specifies.
Options: Preset Β· 10 dBm Β· 7 dBm Β· 5 dBm Β· 0 dBm Β· βˆ’10 dBm Β· βˆ’15 dBm Β· βˆ’20 dBm Β· βˆ’30 dBm
Frequency Hopping
When ON, the Receiver cycles through multiple frequencies automatically instead of listening on one.
Freq Offset
Crystal calibration offset, applied to every RX and TX frequency. Use this if your radio consistently reads or transmits slightly off-frequency.
Range: βˆ’500 kHz to +500 kHz in 10 kHz steps
Chapter 15

System UX β€” Bounce Scroll & Text Rendering FoxFW Exclusive

FoxFW replaces the stock single-direction text scroll with a bounce-scroll system applied throughout the entire firmware. Any label that is too long to fit in its display area will:

  1. Pause briefly showing the start of the text.
  2. Smoothly slide left to reveal the end of the text.
  3. Pause at the right end.
  4. Slide back to the left β€” and repeat.

This affects the App Menu, all Settings menus, the Sub-GHz Protocol List, the Fox File Browser Favorites list path hints, and every other scrollable text element in the firmware.

In the Fox File Browser Favorites list specifically:

Chapter 16

Screenshot Tool FoxFW Exclusive

Capture exactly what's on screen, from anywhere in the firmware β€” no computer, no qFlipper, no cables. Hold Back + Up together for about one second on any screen (the lock screen, the Desktop, any app, any menu) and FoxFW saves the current display to your SD card.

A confirmation box with corner accents pops up on screen for one second ("Screenshot" / camera icon / Saved), while the LED flashes blue twice with a short vibration on the second flash. If saving fails (usually a missing or full SD card), you'll get FoxFW's standard error notification instead and nothing else on screen changes.
Back and Up are captured for as long as you hold them together, so the screenshot combo takes over cleanly β€” it won't also trigger Back's normal "go back" or "exit app" behavior underneath while you're holding for a capture. Release both keys and everything goes back to normal.
Chapter 17

Installing Firmware Updates

There are four ways to install a FoxFW update:

Method 1 β€” via Web Installer New (recommended)

  1. Connect your Flipper to your computer via USB.
  2. Open the FoxFW Web Installer in Chrome or Edge on desktop.
  3. Choose Standard Update and click Connect Flipper, selecting your device from the browser dialog.
  4. Click Install Now β€” the installer downloads the firmware and transfers it automatically, no software install required.
  5. The Flipper will reboot. On first boot after the update the Fox Setup Wizard runs.
Tip: No qFlipper install needed β€” everything runs in the browser. See Chapter 2 for full details on the Web Installer.

Method 2 β€” via qFlipper

  1. Connect your Flipper to your computer via USB.
  2. Open qFlipper (v1.3.3 or later).
  3. Click Install from file and select the FoxFW .tgz update package.
  4. qFlipper will flash the firmware and copy resources automatically.
  5. The Flipper will reboot. On first boot after the update the Fox Setup Wizard runs.

Method 3 β€” via Fox File Browser (wireless / SD-card update)

  1. Copy the .fuf firmware update file to your SD card (any folder β€” Favorites or a dedicated folder is recommended).
  2. Open Fox File Browser from the desktop.
  3. Navigate to the .fuf file and press OK.
  4. Select Install from the action menu.
  5. The firmware updater launches and the device restarts to apply the update.
Tip: Pin your .fuf file to FFB Favorites for one-tap access β€” ideal if you regularly test new builds.

Method 4 β€” via Fox Update Downloader (fully wireless, no PC or USB)

If you already have a wired ESP32 running Fox ESP32 Firmware, Fox Update Downloader can check GitHub, download, and install a FoxFW update entirely on-device β€” the ESP32 acts as the internet connection your Flipper doesn't otherwise have.

  1. Make sure your ESP32 is wired up and joined to a WiFi network (see the Fox ESP32 Apps chapter if you haven't set this up yet).
  2. Open Fox Update Downloader and select Fox Custom Firmware.
  3. Wait for the check to finish. If an update is available, press Download.
  4. Once it finishes downloading, press Install β€” the device restarts automatically to apply it, same as any other method.
Not ready to install yet? Press Later instead of Install β€” the downloaded update stays on your SD card, and a Restart button on the following screen installs it whenever you come back, without downloading it again. The same app can also update your Fox ESP32 Firmware β€” see the Fox ESP32 Firmware guide for that side of it, including picking your board.
After an update: The Fox Setup Wizard runs on the first boot after every firmware update. Your PIN, name, settings, and files are all preserved. The wizard simply confirms your preferences for the new build.
Slow verification at ~11%: During "Install from file" via qFlipper, the progress bar may pause for an extended period (30 seconds or more) while verifying resources.ths. This is normal β€” FoxFW includes a larger resource bundle than stock firmware. qFlipper will eventually continue. If qFlipper times out and reports an error, the most reliable alternative is to copy the update .tgz directly to your SD card using a card reader, then use the Fox File Browser to install it from the device itself β€” this bypasses the USB verification step entirely.
Chapter 18

Lockout & Recovery

I forgot my PIN

If you remember your PIN but keep entering it wrong, stop β€” every failed attempt counts toward the MAX Attempts limit. Once the limit is reached, the On Exceed action fires and the device reboots to a "Locked!" screen. At that point normal access via the device or qFlipper is blocked. See below for recovery options.

I am completely locked out

If you cannot get back into the device on your own, you have two options:

  1. Reinstall the firmware via qFlipper DFU Mode. Boot your Flipper into DFU mode (there are several methods for this that should be common knowledge to you by now). In DFU Mode, connect your Flipper via USB, open qFlipper, and use Install from file to flash flipper-z-f7-full-local.dfu. This will restore normal access. Your SD card files (saved signals, NFC cards, etc.) are not affected by a firmware reinstall.
  2. Contact support. Email us and we will provide recovery instructions specific to your situation.
Contact support at:

πŸ“§ foxcustomfirmware@gmail.com  or  πŸ’¬ our Discord

Please include a description of what happened and how you became locked out β€” this helps us give you the fastest and most accurate recovery path.