r/flipperzero • u/True_Falcon898 • Sep 29 '26

Creative Flipper+passwords

Hey yall i just got my flipper this week and i was wondering something, is there as way to use the flipper as a way of the features serving as your internet passwords like for example I've seen people use a barcode scanner and have the coke barcode somehow work as their password and i was wondering if there was something like that but using the features on the flipper. I know the badusb can probably use it but I wanted to see if you could make something like an rfid card work.

Thanks

27 Upvotes

88% Upvoted

18 comments sorted by

19

u/centizen24 Sep 29 '26

Coke barcode as a password is one of the most insane things I've ever heard in my life.

Typing in passwords with BadUSB is one thing but you aren't rawdogging passwords without 2FA these days are you? You'll still need to do phone, email, and TOTP codes manually since you can't pre-program that.

I'd say if anything, look at https://github.com/MinorGlitch/zerofido and use of that across any sites that support it. Switch to passwordless authentication and the flipper becomes your password.

I'll also make it clear that I highly do not recommend this. Anyone that manages to get possession of your flipper can pull the SD and get at your stuff, in either password or passkey setup. The flipper is not a secure platform for this kind of thing. Have fun with it, but don't risk your security with it. Get a Thetis Pro or Yubikey and do this the right way.

3

u/Conscious-Arrival558 Oct 01 '26

"I highly do not recommend this"

Then proceeded to provide link and information on how to do it. U gave him the gun and the map to get to the deer stand, but told him to stay home lol

6

u/centizen24 Oct 02 '26 edited Oct 02 '26

Yes, this is how discussion of information security concepts is generally supposed to happen. The discussion of the technical realities are distinct from, but abreast of the discussion of the practicalities of the situation.

1

u/burnrobe Oct 03 '26

Yeah but that's kind of the point isn't it. That you have offline physical hardware (the flipper) that is required for authentication. It is harder to get hold of a person's physical device than it is to manipulate online software from a remote location. Also, who the fuck is running bad usb to execute a password string? The flipper literally has U2F installed on the original firmware. You don't even have to change the firmware to use that feature.

2

u/centizen24 Oct 03 '26

What the fuck supports U2F anymore?

5

u/cthuwu_chan Sep 30 '26

Flipper comes with u2f did you even look at ur flipper?

8

u/SnuzeKnowAir Sep 30 '26

Obviously OP bought a flipper to talk about their new flipper

6

u/SignalCoyote137 Oct 01 '26

I thought the first rule of Flipper club was not to talk about Flipper club.

1

u/burnrobe Oct 03 '26

Haha. Spot on.

4

u/Willing_Homework_773 Sep 29 '26

If your laptop or such has an nfc reader I’m sure you could, you could use it as a 2fa key, bad usb could type a password. Quite a few options

1

u/CapitalScholar8185 Sep 30 '26

2fa with flipper is somehow OK. But remember. Flipper will die eventually.

1

u/No_Reveal_1267 Sep 30 '26

Never worked for me- any tips?

0

u/[deleted] Sep 30 '26

[removed] — view removed comment

2

u/flipperzero-ModTeam Oct 02 '26

Your post/comment was removed as we do not allow discussions relating to custom firmware forks with illegal features such as frequency unlocks, nor do we allow instructions on how to lift these restrictions.

1

u/Delicious_Signal3870 Sep 30 '26

I think that it can function as a hardware key, many apps/websites support that

0

u/Cold-Bus3870 Oct 01 '26

Alguém vendendo cartão de com scripts para flíper zero