Black Friday Cyber Monday 2021: Get 10% off + free hardware! - click here for more details

MIFARE DESFire® Compatible UID Modifiable Emulator Card

MIFARE DESFire® Compatible UID Modifiable Emulator Card

  • €29.99 €35.99
    Unit price per 

DESFire Compatible UID Modifiable Emulator Card

MIFARE DESFire®MIFARE DESFire® EV1 remain the industry standard for ultra-high security badges. As of yet - the MIFARE DESFire® EV1 remains invulnerable to all channels of analysis.

The inner workings of the MIFARE DESFire® cards remain under NDA lock and key, making it incredibly difficult to reverse engineer the protocols. 

Lab401's MIFARE DESFire® Compatible UID Modifiable Emulator Card is a card that emulates a MIFARE DESFire® card, allowing you to set a custom UID.

This card will allow for bypass on systems that authenticate based off the UID.

There are two variations of card, 7-byte UID and 4-byte UID.

Please note, this card does not emulate any other MIFARE DESFire® features.

Badges come in a white PVC card format.

  • Badges come in a white PVC card format.
  • Proxmark 3 compatible

Hands on with the MIFARE DESFire® Compatible UID Modifiable Card

Modification of the UID is incredibly simple, thanks to a raw 14443 command.
Using your Proxmark 3, you can issue the following command:


hf 14a raw -s -c 02 00 ab 00 00 07 xx xx xx xx xx xx xx


Where xx xx xx xx xx xx xx is your target UID.
For 4-byte cards, your UID will be 4-bytes, for 7-byte cards, the UID will be 7-bytes.

Likewise, you can also use set the UID on Windows/MacOS/Linux via LibNFC and a LibNFC compatible reader/writer.

Launch the tool pn53x-tamashell


$ pn53x-tamashell


Then, use the following commands to select the card, and then write the UID.

> 4a 01 00
> 42 02 00 ab 00 00 07 XX XX XX XX XX XX XX

Where xx xx xx xx xx xx xx is your target UID.
For 4-byte cards, your UID will be 4-bytes, for 7-byte cards, the UID will be 7-bytes.


The UID of MIFARE DESFire® Compatible UID Modifiable tags is comprised of two parts: the UID itself, and the BCC. The BCC is a checksum value calculated from the UID. If the BCC is incorrect, tag will be rejected by the reader.

Most RFID tools, such as the Proxmark, LibNFC, MCT etc automatically calculate the BCC when the UID is modified. If you are modifying the UID by hand, it is vital that the BCC is correctly calculated.

Lab401 cannot provide support or refunds under any circumstances for cards that were 'bricked' due to incorrect UID/BCC configuration.

Frequently Asked Questions

What are the ATS values?

The card responds with 06 75 77 81 02 80 02 F0

Can I modify the ATS / ATQA / SAK values ?

No, the ATS / ATQA values are fixed.

SAK values can be modified upon request at the factory.


When will I receive my order?

Average order times can be estimated below.

Average shipping estimates can be seen by selecting the destination country / region below.

While actual shipping times may vary - these estimations are built off our real delivery statistics. To receive an order as quickly as possible, we recommend:

  • Use the express delivery shipping method
  • Use same day shipment by placing the order before 12PM GMT+1

Where do you ship from?

All items are dispatched from France. You will receive a tracking number upon item dispatch. The address used on your purchase is printed as a label - please double check your address to avoid mistakes.

When will my order be dispatched?

Lab401 dispatches orders Monday - Friday.
All orders placed before 12PM GMT+1 will be dispatched the same day. All orders placed after this cutoff time will be dispatched the next business day.

For example:

  • An order placed Friday, 9AM GMT+1 will be dispatched the same day.
  • An order placed on Friday, 6PM GMT+1 will be dispatched Monday.
  • An order placed on Saturday will be dispatched Monday

For any questions, please contact customer support.

What shipping options are available?

We provide four types of shipping:

  • EU Standard Post
  • EU Express Post
  • International Standard Post
  • International Express Post

How are import duties / customs handled?

For all European Union destinations, all shipments are DDP - Delivered Duty Paid. This means all applicable VAT/TVA, shipping costs and customs fees are pre-paid. 
You will not be charged by the courier service / post office or customs.

For all destinations outside European Union, all shipments are DDU - Delivered Duty Unpaid. This means that your country's custom service impose a VAT/TVA/Import Duty on your shipment.

I am charged VAT ?

Lab401 (ETOILE 401 SAS) is an EU-Registered entity. VAT is applicable to purchases delivered within the EU, with exceptions for VAT Registered entities.  VAT is calculated at checkout. For your convenience, you can browse Lab401 with prices Including VAT and Excluding VAT.

Sales are contractual

Please note - a purchase is an explicit agreement of our terms and conditions. Any products refused by clients will not be refunded.

Purchase Security Validation may be applied

To protect against credit card fraud, orders may be flagged for Purchase Security Validation. In this instance, we will reach out to the customer to perform a manual verification process.

Orders that are flagged for Purchase Security Validation are considered to be incomplete until validated. Our delivery deadline obligations begin only when an order is validated.

Delivery Protection

Is my delivery protected?

All Lab401 shipments are insured with the carrier.

We also provide an advanced insurance, Lab401 Delivery Protection.

Lab401 Delivery Protection means we remain fully responsible for the package right up to delivery. If the package is lost or damaged, the package can be resent immediately (48 business hours) upon receipt of proof.

For orders without Delivery Protection, lost or damaged packages will pass through the carrier's protocols, which can take up to 30 days.

For orders that are time-sensitive, we recommend Lab401 Delivery Protection.

Delivery Protection can be purchased at checkout easily and cheaply.