CC1101 vs nRF24 vs 2-in-1: Which RF Radio Do You Actually Need?

PINGEQUA Lab · RF basics · 6 min read · Updated 2026-06-25

Three names, two radios, and a board that bundles both — here's how to tell CC1101, nRF24, and 2-in-1 modules apart and pick the right one for your Flipper Zero or M5Stack.

Quick answer These three names cover two completely different radios. CC1101 is a Sub-GHz transceiver — it works in the low bands (commonly 433, 868, or 915 MHz) and is what you use to capture and replay things like car-key fobs, garage doors, remote controls, and Sub-GHz sensors. nRF24L01+ is a 2.4 GHz transceiver used for nRF24-ecosystem tasks (such as MouseJack wireless mouse/keyboard injection research and nRF24 sniffing) — it is not a Wi-Fi or Bluetooth module. A 2-in-1 board simply puts both chips (CC1101 + nRF24L01+) on one PCB, so you don't have to choose. Pick CC1101 if you live in the Sub-GHz world, nRF24 if you're doing 2.4 GHz research, and a 2-in-1 if you want both without swapping hardware.

What the CC1101 actually does (Sub-GHz)

The CC1101 is a Sub-GHz radio. In practice that means it operates in the low ISM bands — most often 433, 868, or 915 MHz — and it's the chip behind almost everything people mean by "Sub-GHz hacking": capturing and replaying car-key fobs, garage-door remotes, RF remotes, weather and door/window sensors, and similar fixed-frequency devices.

One detail that trips people up: a single CC1101 board with its antenna is usually tuned for one band. A board tuned for 433 MHz will perform poorly if you try to use it at 868 or 915 MHz, because both the matching network and the antenna are cut for a specific frequency. So "I have a CC1101" doesn't automatically mean "I cover every Sub-GHz frequency" — band choice matters, and we cover that below.

What the nRF24L01+ actually does (2.4 GHz)

This is the single most misunderstood module in the category. The nRF24L01+ is a 2.4 GHz transceiver, but it is not a general Wi-Fi or classic-Bluetooth radio. You cannot use it to join a Wi-Fi network or pair a Bluetooth speaker. It speaks Nordic's own 2.4 GHz protocol.

What it's genuinely good for is the nRF24 ecosystem: research like MouseJack (looking at how some wireless mice and keyboards handle 2.4 GHz dongles) and nRF24 sniffing. If your goal involves wireless desktop peripherals or Nordic-based 2.4 GHz links, the nRF24 is the right tool. If your goal is "see Wi-Fi networks" or "connect to Bluetooth," the nRF24 is the wrong chip entirely — that's a different radio altogether. (Discussion of nRF24 uses on r/flipperzero)

So what is a "2-in-1" (and "3-in-1")?

A 2-in-1 board puts a CC1101 and an nRF24L01+ on the same PCB. That's it — two radios, one module, so you cover both Sub-GHz and 2.4 GHz without swapping hardware between tasks.

Watch the marketing on "3-in-1." On M5Stack's side, a "3-in-1" module typically means the two radios plus an onboard microSD slot — it is not three separate radios. The third item is storage, not a third frequency band. So a 3-in-1 gives you CC1101 + nRF24 + a card slot, which is convenient for logging and payloads, but it does not add a new radio capability beyond the two chips.

Which band do I buy? (433 / 868 / 915)

Because a CC1101 board is tuned to one band, region matters:

  • 433 MHz — the most widely used band for consumer devices worldwide. If you're unsure or want the broadest coverage of everyday remotes, 433 is the safe default.
  • 915 MHz — the ISM band used in the US, Canada, Australia, and Latin America.
  • 868 MHz — the ISM band used in the EU and the UK.

The rule to remember: bands don't mix. A 433-tuned board does a poor job at 868/915 and vice versa. If most of your targets are regional smart-home gear, match the board to your region's band; if they're generic consumer remotes, 433 covers the most ground.

Firmware: matching software to the hardware

Hardware is only half of it — the firmware has to support the radio.

  • Flipper Zero: the popular custom firmwares are Unleashed, Momentum, and RogueMaster. Note that the official Flipper firmware does not support an external CC1101 — that's a custom-firmware feature. (Users sometimes hit an external CC1101 that won't stay powered or isn't detected; see this Flipper forum thread on a CC1101 not being found.)
  • M5Stack (Cardputer, Sticks, etc.): the go-to firmware is Bruce, currently version 1.15 (released 2026-05-25, GitHub releases).

Before you buy, confirm that the firmware you intend to run actually supports the radio and the host device you have.

What separates a good board from a cheap one

The radios themselves are commodity chips; the board around them is where quality shows. Cheap modules in this category commonly suffer from noisy power and poor isolation, which shows up as shorter range, dropped captures, or a radio that resets under load. Better boards use a clean LDO for the radios and proper bus isolation so one chip doesn't disturb the other. You don't need to memorize part numbers — just know that a stable power and signal path is what you're paying for, and it's the difference between a board that captures cleanly and one that's flaky.

Comparison table

CC1101 nRF24L01+ 2-in-1 board
Frequency Sub-GHz (433 / 868 / 915 MHz) 2.4 GHz Both (Sub-GHz + 2.4 GHz)
Typical use Capture/replay key fobs, garage doors, remotes, sensors nRF24 ecosystem: MouseJack research, nRF24 sniffing Covers both worlds on one PCB
Wi-Fi / Bluetooth? No No (not a Wi-Fi/BT radio) No
Band coverage One band per board/antenna Single 2.4 GHz band One Sub-GHz band + 2.4 GHz
Best for Sub-GHz users 2.4 GHz researchers People who want both, no swapping

FAQ

Is nRF24 the same as Wi-Fi or Bluetooth?
No. The nRF24L01+ is a 2.4 GHz transceiver using Nordic's own protocol. It cannot join Wi-Fi networks or pair with classic Bluetooth devices. It is meant for nRF24-ecosystem work like MouseJack research and nRF24 sniffing, not general wireless connectivity.
Can one CC1101 board cover 433, 868, and 915 MHz?
Not well. A CC1101 board and its antenna are tuned for a single band. A 433-tuned board performs poorly at 868/915 and vice versa. Match the board to the band you need, or pick 433 for the broadest consumer-device coverage.
Is a 3-in-1 module three radios?
No. A typical M5Stack 3-in-1 is the two radios (CC1101 + nRF24L01+) plus an onboard microSD slot. The third item is storage, not a third frequency band, so you still have two radios.
Do I need a 2-in-1, or just one chip?
If all your work is Sub-GHz (fobs, garage doors, sensors), a CC1101 is enough. If it is all 2.4 GHz nRF24 research, get an nRF24. Buy a 2-in-1 when you genuinely move between both and do not want to swap hardware.
Does the official Flipper Zero firmware support an external CC1101?
No. External CC1101 support comes from custom firmwares like Unleashed, Momentum, or RogueMaster. On M5Stack, the equivalent stack is Bruce (currently 1.15). Confirm firmware support before buying.

Know which radio you need?

PINGEQUA builds boards for both worlds — clean power and proper isolation so captures stay reliable.

Flipper Zero 2-in-1 RF Module → Cardputer ADV Hydra RF-424 → RF Pack S3 (StickC S3) →

Not sure which host device fits you first? Start with our best RF module for the M5Stack Cardputer guide. Buying for a Cardputer specifically? Check ADV vs v1.1 module compatibility first, and if a module isn't detected, see the Bruce "module not found" fix.

Sources & further reading: nRF24 uses discussion on r/flipperzero — reddit.com; external CC1101 not found on Flipper — forum.flipper.net; Bruce firmware — bruce.computer / GitHub releases. Firmware and band facts verified June 2026.

For authorized security testing and education only. Use RF hardware only on devices and frequencies you are permitted to operate. You are responsible for compliance with all applicable laws and radio regulations (e.g. FCC Part 15 in the US, CE/RED in the EU). "Flipper Zero" and "M5Stack" are referenced for compatibility; PINGEQUA is independent and not affiliated with or endorsed by their owners.

Retour au blog