OnAirDecode Flipper Zero Sub-GHz chat with an SDR
Flipper Zero Sub-GHz chat: talk to Flippers on 433.92 MHz, plain or AES-encrypted (receive and send).
- Group
- IoT & sensors
- In the mode list
- Chat, 433.92 MHz
What Flipper Zero Sub-GHz chat is
Chat with Flipper Zero devices running the Enhanced Sub-GHz Chat app (or the firmware's CLI Sub-GHz chat), receive and send: CC1101 GFSK at 9.99 kbaud with 19 kHz deviation on 433.92 MHz or any frequency the Flippers use. Heard lines appear in a chat with level and frequency offset; lines are sent through a transmit-capable radio (HackRF and others). Plain chats, or encrypted ones with the same….
Frequencies and settings
OnAir takes any frequency you type; the numbers above are the mode's starting point and the range its table describes. In the app the shortcut label is Chat, 433.92 MHz.
What OnAir shows
Chat with Flipper Zero devices running the Enhanced Sub-GHz Chat app (or the firmware's CLI Sub-GHz chat), receive and send: CC1101 GFSK at 9.99 kbaud with 19 kHz deviation on 433.92 MHz or any frequency the Flippers use. Heard lines appear in a chat with level and frequency offset; lines are sent through a transmit-capable radio (HackRF and others). Plain chats, or encrypted ones with the same password or hex key as the Flippers (AES-256-GCM with replay protection, as the app does). On a half-duplex radio the receiver pauses while a line is sent. Transmitting needs the right to use the frequency where you are.
Limits and what it was checked with
Checked with generated signals and impairments; recordings of real signals welcome.
Which radio you need
This is a shortwave mode, so the radio has to tune HF. An SDRplay, Airspy HF+ or an RTL-SDR in direct-sampling mode do that directly; with a HackRF an HF upconverter or a direct-sampling receiver is the usual route. A long wire or loop antenna matters more than the radio.
Receiving and the law
Questions about Flipper Zero Sub-GHz chat
Can I decode Flipper Zero Sub-GHz chat with an RTL-SDR?
An RTL-SDR can receive HF only in direct-sampling mode, which OnAir offers in its radio settings; results depend on the antenna. SDRplay and Airspy HF+ radios are better suited.
Is it legal to receive Flipper Zero Sub-GHz chat?
This mode is passive. It only receives, never connects, pairs or joins networks, and never decrypts payloads. Check the rules where you live.
Can I try Flipper Zero Sub-GHz chat in OnAir without a radio?
Yes. Most modes include a built-in synthetic test signal, so you can open the screen and try the controls before you own a radio.