Is it legal to clone RFID cards?

Cloning your own access cards for backup or convenience is generally legal. Cloning cards you do not own, or cloning cards to gain unauthorized access to buildings or systems, is illegal in most jurisdictions. Always check your local laws and your organization's policies before cloning any access card.

Can I clone a card with my phone?

Phones can read 13.56 MHz NFC tags (NTAG, Mifare) using NFC, but cannot clone 125 kHz RFID cards (EM4100, T5577) because phones operate at 13.56 MHz only. For 125 kHz cloning, you need a dedicated RFID reader/writer like the ACR122U or a handheld RFID copier.

What cards cannot be cloned?

Cards with cryptographic protection cannot be cloned by simply copying the UID. Mifare DESFire EV2/EV3, Mifare Plus, and any card using AES encryption require the cryptographic keys to clone. EMV payment cards and FIDO2 security keys are cryptographically protected and cannot be cloned.

What is the difference between UID cloning and full cloning?

UID cloning copies only the card's unique identifier (UID) — the 4 or 7 byte serial number. This works for simple access systems that only check the UID. Full cloning copies the UID plus all data blocks on the card, which is needed for systems that verify data beyond the UID.

Disclosure: As an Amazon Associate, CardWise earns from qualifying purchases at no additional cost to you. This does not affect our recommendations.

How to Clone an RFID Card (2026)

Cloning an RFID card means copying its data to a blank writable tag. This is useful for creating backup copies of your apartment key fob, office access card, or gym membership card. This guide covers both 125 kHz (older RFID) and 13.56 MHz (NFC/Mifare) card cloning.

Legal note: Cloning your own access cards for backup or convenience is generally legal. Cloning cards you don't own, or using cloned cards to gain unauthorized access, is illegal. Always check your local laws and organization policies. This guide is for educational purposes and legitimate use cases only.

Understanding RFID Card Types

Before cloning, you need to know what type of card you have:

Frequency	Chip Type	Common Uses	Cloneable?
125 kHz	EM4100 / EM4200	Older access cards, gym, apartment doors	Yes (UID only)
125 kHz	HID Prox	Corporate access, parking	Yes (UID only)
125 kHz	T5577 (writable)	Blank target for cloning	This is the target, not source
13.56 MHz	Mifare Classic 1K/4K	Building access, transit cards	Yes (with keys)
13.56 MHz	NTAG213/215/216	NFC tags, smart home, business cards	Yes (copy NDEF data)
13.56 MHz	Mifare DESFire EV2/EV3	Modern access, transit, payment	No (cryptographic)
13.56 MHz	Mifare Plus	Upgraded building access	No (AES encrypted)

How to check your card frequency: If your card or fob is unmarked, try reading it with your phone's NFC. If the phone detects it, it's 13.56 MHz. If the phone does nothing, it's likely 125 kHz. You can also use our NFC Tag Detector tool to check.

Hardware You Need

For 125 kHz Cloning

You have two options — a handheld copier (no computer needed) or a USB reader:

Option A: Handheld RFID Copier (Simplest)

A standalone device that copies 125 kHz EM4100/HID cards to T5577 blanks without a computer. Place original on reader, press "Read", place blank, press "Write". ~$15-25 on Amazon.

Check Price on Amazon

Option A: Handheld RFID Copier (Simplest)

Option B: ACR1252U Reader (Developer Approach)

USB reader that supports both 125 kHz and 13.56 MHz. More flexible — can read, write, and analyze card data via PC/SC or Python. Better for understanding what's on your card.

Check Price on Amazon

For 13.56 MHz (NFC/Mifare) Cloning

ACR122U or ACR1252U Reader

The ACR122U is the classic NFC reader for card analysis and cloning. The ACR1252U is the newer version with faster throughput. Both support Mifare Classic, NTAG, and other 13.56 MHz cards. See our Best Smart Card Readers guide for details.

Check Price on Amazon

Blank Target Cards

T5577 Blank Cards/Rings (for 125 kHz)

T5577 is the universal writable 125 kHz chip. Available as cards, key fobs, and even rings. Write your cloned UID to the T5577, and it acts as a clone of the original.

Check Price on Amazon

CUID / FUID Blank Cards (for Mifare Classic 13.56 MHz)

For cloning Mifare Classic cards, you need CUID (Changeable UID) blanks. These allow you to set a custom UID — standard NTAG cards have a locked UID that cannot be changed.

Check Price on Amazon

Method 1: Clone a 125 kHz Card (EM4100 → T5577)

This is the simplest cloning scenario — older apartment and gym access cards that use 125 kHz EM4100 technology.

Using a Handheld Copier

Place your original card on the reader surface
Press the Read button — the LED should turn green or beep
Remove the original and place a blank T5577 card/fob on the reader
Press the Write button — the LED confirms success
Test the cloned card on your door/gym reader

That's it. The handheld copier reads the 10-digit hex UID from the EM4100 card and writes it to the T5577. The entire process takes about 5 seconds.

Using ACR1252U + Python

For developers who want to see the raw data:

# Install pyscard (Python smart card library)
pip install pyscard

# Read 125 kHz EM4100 UID via ACR1252U
from smartcard.System import readers
from smartcard.util import toHexString

reader = readers()[0]  # ACR1252U
connection = reader.createConnection()
connection.connect()

# Send APDU to read 125 kHz card (ACR1252U multi-protocol)
# The ACR1252U supports both 125 kHz and 13.56 MHz
# Commands vary by reader firmware — see ACR docs

# For 125 kHz: use the reader's built-in RFID copier commands
# or use the Proxmark3 for advanced analysis

Developer note: For serious RFID analysis (not just cloning), consider a Proxmark3 — it can sniff, read, and emulate both 125 kHz and 13.56 MHz cards. It's more expensive (~$50-200) but is the gold standard for RFID research. See our PC/SC Programming Guide for more on working with smart card readers.

Method 2: Clone a Mifare Classic Card (13.56 MHz)

Mifare Classic 1K/4K is the most common 13.56 MHz access card. It uses proprietary Crypto-1 encryption, but the keys can be extracted using known weaknesses (MFOC/Mfuk attacks).

Step 1: Read the Card

# Using mfoc (Mifare Classic Offline Cracker)
# Install: apt install mfoc (Linux) or brew install mfoc (macOS)

mfoc -O original_card_dump.mfd

# This extracts all sectors + keys using nested attack
# Works on Mifare Classic 1K and 4K
# Takes 5-60 seconds depending on key strength

Step 2: Write to a CUID Blank

# Write the dump to a CUID (writable UID) blank card
nfc-mfclassic W a u original_card_dump.mfd

# W = write mode
# a = use key A
# u = use CUID blank (UID-writable)

Step 3: Verify

Read the cloned card and compare the dump with the original. The UID, all sector data, and keys should match. Test on the access reader.

Mifare Classic is insecure by design. The Crypto-1 cipher has been broken since 2008. If your organization uses Mifare Classic for access control, they should upgrade to Mifare DESFire or Mifare Plus. See our Mifare Comparison for chip security differences.

Method 3: Copy NFC Tag Data (NTAG → NTAG)

For NFC tags (NTAG213/215/216), "cloning" means copying the NDEF data — the URL, vCard, or text record stored on the tag. This is simpler than UID cloning:

Using Your Phone

Open NFC Tools app on your phone
Go to Read tab and scan the original tag
Note the NDEF records (URL, text, etc.)
Go to Write tab and recreate the same records
Hold a blank NTAG tag against your phone to write

The copy will have the same NDEF content but a different UID — you cannot change the UID of NTAG tags (it's burned in at the factory). For most use cases (smart home, business cards), the NDEF content is what matters, so this is fine.

Use our NDEF Parser to inspect the original tag's data, and our NDEF Writer to generate the data for the new tag. See our NDEF Writing Guide for the full tutorial.

Using Smart Rings as Cloned Cards

One popular use case is cloning an access card to an NFC smart ring — tap your ring to the door instead of carrying a card. You need a T5577 ring for 125 kHz systems or a CUID ring for 13.56 MHz systems:

HECERE T5577/UID RFID Smart Ring

Clone your 125 kHz access card to a ring. The most popular NFC/RFID ring on Amazon (400+ reviews). Available in T5577 (125 kHz) or UID (13.56 MHz) versions.

Check Price on Amazon

Dual-Frequency RFID Ring (125 kHz + 13.56 MHz)

Both chips in one ring — clone a 125 kHz card AND a 13.56 MHz card. Best option if you have multiple access systems.

Check Price on Amazon

What CANNOT Be Cloned

Card Type	Why Not	Alternative
Mifare DESFire EV2/EV3	AES-128 encryption, challenge-response	Get a legitimate duplicate from issuer
Mifare Plus (SL3)	AES-128 encrypted communication	Get a legitimate duplicate from issuer
EMV payment cards	Dynamic cryptograms per transaction	Use mobile wallet (Apple/Google Pay)
FIDO2 security keys	Public-key cryptography, per-site keys	Register multiple keys to account
Government ID cards	PKI + biometric binding	Illegal to clone in most countries
Hotel cards	Varies — some use Mifare Classic (clonable), some use DESFire (not)	Request additional key from hotel

Security Implications

If you're a building manager: If your access system uses Mifare Classic or EM4100, anyone with a $15 device can clone cards in seconds. Upgrade to Mifare DESFire EV3 or HID Seos for cryptographic protection. See our Mifare Comparison for secure alternatives.

If you're a user: Use an RFID-blocking wallet to prevent unauthorized reading of your cards. This blocks both 125 kHz and 13.56 MHz signals. While remote cloning ofEM4100 cards is theoretically possible with specialized equipment, RFID-blocking wallets prevent casual scanning.

Quick Reference: Which Method to Use

Your Card	Frequency	Method	Hardware
Apartment/gym fob	125 kHz	Handheld copier or ACR1252U	T5577 blank or ring
Office access (Mifare Classic)	13.56 MHz	mfoc + nfc-mfclassic	CUID blank card
NFC tag (NTAG)	13.56 MHz	NFC Tools app (phone)	Blank NTAG tag
Modern access (DESFire)	13.56 MHz	Cannot clone	Request duplicate

Best Smart Card Readers — ACR122U, ACR1252U, and more | Best NFC Smart Rings — T5577 and NTAG216 rings | Best RFID Blocking Wallets — Prevent unauthorized scanning | Mifare Comparison — Classic vs DESFire vs Plus | PC/SC Programming Guide — Smart card programming | NFC Tag Detector — Check your card type | NDEF Parser — Decode NFC tag data

How to Clone an RFID Card (2026)

Understanding RFID Card Types

Hardware You Need

For 125 kHz Cloning

Option A: Handheld RFID Copier (Simplest)

Option B: ACR1252U Reader (Developer Approach)

For 13.56 MHz (NFC/Mifare) Cloning

ACR122U or ACR1252U Reader

Blank Target Cards

T5577 Blank Cards/Rings (for 125 kHz)

CUID / FUID Blank Cards (for Mifare Classic 13.56 MHz)

Method 1: Clone a 125 kHz Card (EM4100 → T5577)

Using a Handheld Copier

Using ACR1252U + Python

Method 2: Clone a Mifare Classic Card (13.56 MHz)

Step 1: Read the Card

Step 2: Write to a CUID Blank

Step 3: Verify

Method 3: Copy NFC Tag Data (NTAG → NTAG)

Using Your Phone

Using Smart Rings as Cloned Cards

HECERE T5577/UID RFID Smart Ring

Dual-Frequency RFID Ring (125 kHz + 13.56 MHz)

What CANNOT Be Cloned

Security Implications

Quick Reference: Which Method to Use

Related