Flipper Zero as a BLE sniffer: what it can and can't do
"Flipper Zero BLE sniffer" is a common search, and the honest answer is: the Flipper Zero can do Bluetooth Low Energy advertisement scanning, but it is not a connection-level packet sniffer, and out of the box its Bluetooth features are limited. This guide lays out exactly where the line is.
What the Flipper Zero's Bluetooth radio is for
The Flipper Zero is built around an STM32WB55 microcontroller, which has an integrated Bluetooth Low Energy radio. In the stock firmware, that radio's main job is connecting the Flipper to the official mobile app — for file transfer, remote control, and firmware updates. There is no full-featured BLE scanner in the default firmware menu.
So if you picked up a Flipper expecting a ready-made "sniff everything nearby" tool, that is not what ships on it.
What community firmware and apps add
The Flipper has an active third-party ecosystem. Custom firmware distributions and apps from the Flipper application catalog have added BLE features over time, including:
- BLE device scanners that list nearby advertising devices with their address, name, and RSSI — the same advertisement layer any phone reads.
- BLE advertising tools that make the Flipper itself broadcast advertisement packets.
These features come and go with firmware versions and app updates, and installing custom firmware is your decision and your risk. What none of them change is the underlying hardware limit below.
Where the Flipper Zero stops
The Flipper's BLE radio is a normal Bluetooth Low Energy controller, not a promiscuous capture radio. That means it cannot follow the traffic inside a live BLE connection — the encrypted or unencrypted data two paired devices exchange as they hop across 37 channels many times per second. Capturing that requires hardware designed for it, such as a Nordic nRF52840 dongle running nRF Sniffer, or an Ubertooth One. Our BLE sniffer hardware guide covers those options, and our scanner vs. packet sniffer guide explains why the two jobs need different tools.
For the connection-capture job, treat the Flipper as a scanning and experimentation tool, not a protocol analyzer.
Flipper Zero vs. a phone for BLE scanning
For advertisement scanning — seeing what is broadcasting, reading device names and addresses, gauging proximity from signal strength — a phone and a Flipper capture the same layer. A phone has some practical advantages:
| Flipper Zero | Phone | |
|---|---|---|
| Reads BLE advertisements | Yes (with suitable firmware/app) | Yes |
| Follows live connections | No | No |
| Screen size for reading results | Small monochrome | Full |
| Logging and CSV export | Depends on the app | Built into scanner apps |
| Extra hardware to buy | The Flipper itself | None — you own one |
If your goal is specifically BLE reconnaissance, a phone app is the faster path. If you already own a Flipper and want a pocket device that also does sub-GHz, NFC, infrared, and GPIO work, its BLE scanning is a reasonable bonus.
Getting real payloads to inspect
Whatever captures the advertisements, the interesting part is decoding them. BLE Sniffer for Android scans nearby Bluetooth Low Energy devices, logs every session on-device, and exports to CSV — no ads, no telemetry. Paste a captured payload into our BLE advertisement decoder to break it into its AD structures, or read how BLE advertising works for the byte-by-byte background.
Bottom line
The Flipper Zero can scan BLE advertisements with the right firmware or app, on the same terms as a phone. It cannot capture the traffic inside live BLE connections — that is dedicated-hardware territory. Match the tool to the job: a phone or Flipper for reconnaissance, an nRF52840 or Ubertooth plus Wireshark for connection capture.
Flipper Zero is a trademark of Flipper Devices Inc. BLE Sniffer and Shibby Ventures LLC are independent and are not affiliated with, sponsored by, or endorsed by Flipper Devices. Custom firmware is developed by third parties; installing it is at your own risk. This guide is general information, not legal or security advice.