Get Static NFC Tag Id with HCE mode

Why do some phones have static UID and some do not? Is this chipset related?

That depends on the chipset and the implementation of the NFC stack. As far as I’m aware of, there are three different scenarios used by various Android NFC devices:

  • The device has a secure element and uses the static UID of that secure element.
  • The device generates a new random UID whenever it is turned on.
  • The device generates a new random UID on every activation by an external reader device. I.e. whenever an external HF field is applied to the NFC antenna of the Android device.
  • The device has no secure element but still uses a static UID (typically not unique), e.g. 0x01020304. [Thanks to ErikM for pointing this out.]

Is it possible to get a fixed UID?

Typically, you can’t influence this. Specifically without modifying the Android device firmware (changes to the NFC stack) it’s definitely not possible. See this answer for a method to set the UID value on Broadcom chipsets through modifying the libnfc-nci library.

I need it to authenticate the device.

Don’t do this! See this answer for more information on that.

Leave a Comment