Nokia Secret Codes

Nokia Secret Codes
Nokia On the main screen type

*#06# for checking the IMEI (International Mobile Equipment Identity).

*#7780# reset to factory settings.

*#67705646# This will clear the LCD display(operator logo).

*#0000# To view software version.

*#2820# Bluetooth device address.

*#746025625# Sim clock allowed status.

*#62209526# - Display the MAC address of the WLAN adapter. This is available only in the newer devices that supports WLAN like N80

#pw+1234567890+1# Shows if sim have restrictions.

*#92702689# - takes you to a secret menu where you may find some of the information below:

• Displays Serial Number.
• Displays the Month and Year of Manufacture
• Displays (if there) the date where the phone was purchased (MMYY)
• Displays the date of the last repair - if found (0000)
• Shows life timer of phone (time passes since last start)

*#3370# - Enhanced Full Rate Codec (EFR) activation. Increase signal strength, better signal reception. It also help if u want to use GPRS and the service is not responding or too slow. Phone battery will drain faster though.

*#3370* - (EFR) deactivation. Phone will automatically restart. Increase battery life by 30% because phone receives less signal from network.

*#4720# - Half Rate Codec activation.

*#4720* - Half Rate Codec deactivation. The phone will automatically restart

If you forgot wallet code for Nokia S60 phone, use this code reset: *#7370925538#
Note, your data in the wallet will be erased. Phone will ask you the lock code. Default lock code is: 12345

Press *#3925538# to delete the contents and code of wallet.

*#7328748263373738# resets security code.

Default security code is 12345

Unlock service provider:
Insert sim, turn phone on and press vol up(arrow keys) for 3 seconds, should say pin code. Press C,then press * message should flash, press * again and 04*pin*pin*pin#

Change closed caller group (settings >security settings>user groups) to 00000 and ure phone will sound the message tone when you are near a radar speed trap. Setting it to 500 will cause your phone 2 set off security alarms at shop exits, gr8 for practical jokes! (works with some of the Nokia phones.)
Press and hold "0" on the main screen to open wap browser.

#!!!Some of these codes may not work. !!!

Read more »

Motorola 7500 Secrets Codes

Motorola 7500

Activate RBS
(Note: pause means the * key held in until box appears)
To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it.
De-activate RBS
To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
This only works with some versions of software.

These countries has been reported working:

IT (model: F16 HW: 5.2 SW: 2.1)

What's the use of RBS:

Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.

Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected.

Pin Outs

Numbered right to left, keypad up, battery down looking

1. Gnd
2. Pos
3. True data (TD) (input)
4. Complimentary data (CD) (input)
5. Return data (RD) (output)
6. Audio gnd
7. Audio out
8. Audio in

Read more »

MOTOROLA 6200,7500,8200,8400 and 8700

MOTOROLA 6200 / 7500 / 8200 / 8400 / 8700

To activate RBS (Engineering Menus):

[pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]

(pause means the * key held in until box appears)

You now have to press the [MENU] and scroll to the
'Eng Field Options' function with the <> keys, and enable it.

To de-activate RBS (Engineering Menus):

[pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]

(pause means the * key held in until box appears)

Works on 6200's,8200's,1-888's,7500's,8400's and GSM StarTacs
with later than version .27 software.

Options under Eng Field Options

Eng Field Options
Active Cell
RxLev -55Received powerlevel in dBm

NCC 0National Colour Code, used for identifying channel

BCC 7Broadcast Colour Code, also for identifying purposes

MSTxPwr 35Max allowed transmit power 35dBm about 3.2W

Time Adv xxxxxx is a number. Multiply this number by 550,and the result is the distance from the RBS (Radio Base Station), in meters.
Adjacent Cells
Adj Cell 1

Channel 0033Channel Number

RxLev -65Received power level in dBm

BCCH DecodeI think it means it is able to decode thechannel information contained in the BCCH

RxLevAM -104Min allowed reception, compare with RxLev -65 and you get the C1 value which is 39 and reported back to base asmeasure of field strength.

MTxPwr 35 Aain max allowed power level

C1 003 ??

NCC 0 National Colour Code

BCC 6 Broadcast Colour Code
System Parameters
Combined Off ??

AcsClas 0000 Allows different priorities - this network doesn't support it.

MCC 505 Mobile Country Code, 505 for Australia, 240 for Swedes etc

MNC 01Mobile Network Code, 01 for Mobilenet, 02 for Optus, 03 for Vodafone using MCC 505. MCC+MNC is often called Network Code

LAC 08720Location Area Code, shows which exchange your're in

CellID 00473Base Station Identity

T3212 005Time between periodic network updates (either hours between or time remaing until update, not sure)

BS-PA-MFRM 4 ??

XZQTY 14.3 ??
Motorola Flip Pinout:

ANT- (O) | | | | | | | | | |

10 9 8 7 6 5 4 3 2 1

Top of phone (screen)
1) Audio Ground

2) Ext b+

3) T Data

4) C Data

5) R Data

6) Logic Ground

7) Audio Out - on/off

8) Audio In

9) Manual Test

10) Battery Feedback

Read more »

Ericsson GA628 Secrets Codes

Ericsson GA628

*#06# for checking the IMEI (International Mobile Equipment Identity)

*#0000# to reset the phones menu-language to English.

*#103# then YES Time and date will be shown.

>*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language. (298 entries)

>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language. (160 entries?)

The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not available to the end user.

Here is how to activate the menu:

<**<> key for a second or two The option Menu size turns up Choose 'yes' and go from there.

An alarm clock turned up too but it never rang. I think this was because there is no clock in the phone.

Free phone calls using the GA628
This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions.

The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)... if it can be traced? - we don't know...

Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out: Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone. You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE phone calls in some countries.. we hope!!

Another variant of the code
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone.

If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...???

Main PCB rear:Here is 3 main section like Transmitter, receiver, and analogue/digital processing.The rightmost section contains the main processor, flash program memory (1MByte), working RAM (32Kbytes), plus the signal processing circuitry required to interface to the RF (transmitter and receiver) and analogue (speech) sections. The red device top-right is the SIM, a smartcard chip containing the user identity.
Main PCB front:8KByte memory device left-centre holds user's stored numbers and option settings. Gold pads on right half of board are keyboard contacts.
The Flash program memory is 128Kbytes - substantially less than the digital unit, which uses a great deal more software signal processing.
Now you can repair any kind of Ericsson GA628 phones using codes and see its main board.

Read more »

Ericsson 868 and 888 Secret Codes

Ericsson 868/888

To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- * (you also get version of InfraRed driver software and text labels) Pinouts 1 = + external power supply. 7.2v @ 600mA. 2 = RS232 input (TTL) 3 = GND (digital) 4 = RS232 output (TTL) 5 = +5V output. Limited. 6 = Test. Switch phone off and provide +5V and switch back on. (set comms at 9600, n,8,1)
7 = Mute (0 - Normal, 1 - In Call)
8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak)
9 = GND (analog)
10 = Related to Mic/Speak
11 = BF in
12 = BF out
Ericsson AH 230/238 PROGRAMMINGPress and hold down FCN while entering the digits 9 8 7. You must enter the digits within ten seconds.
The text "SER NUMBER" is displayed along with the telephone's electronic serial number. The number contains 11 digits, so the most significant digit is shown for one second, followed by the other 10 digits.
ENTRY
DISPLAY TEXT
PERMISSABLE VALUE
Electronic Serial #
ESN
Not Changeable
Phone Number
MIN x
(where x is NAM choice)
10 digits
System ID
SID x
(where x is NAM choice)
00000 to 32767
Press # to review
MIN & SID, or END/PWR
to exit the short NAM-
programming mode.
NB:
The Number Assignment Module (NAM) is programmed through the telephone keypad. There are two NAM-programming modes available; the short and the long. The short programming mode is all that is required in most cases. The long programming mode is required if a value set by the short mode is not desired.
Either mode may be used stand-alone, or the short mode can be used to set up most of the values and then the long mode can be used to make any changes desired. To enter either of the two NAM programming modes, press and hold down the FCN key while entering a specific series of digits. You must enter the digits within ten seconds.
In each programming step, you can either keep the displayed setting or value, or you can change it.
a. To go to the next step, without changing anything, press #. b. In some steps, you can "toggle" a setting from ON or OFF, or vice versa. To change the setting, press any numeric key.
In other steps, you can replace a displayed value. To replace a value, enter the digits on the numeric keys. If you enter a wrong digit, you can erase it by pressing FCN CLR.
Pressing * key restores the original value in the display.
Press # to store new setting/value and go to next step.
Press END/PWR in any step to leave the NAM-Programming mode. If you have changed anything in a step, you must store the setting by pressing # before pressing END/PWR.

Read more »

Ericsson 688 Secrets Codes

Ericsson 688

To view IMEI number *#06#
To view Software Version enter -> * <- <- * <- * CLR (Use with Care) To reset phone language to English *#0000# >*<<*<*> 1-row text strings. If pressing YES you can check the phones 1-row text programming in currently selected language.

>*<<*<*>> n-row text strings. If pressing YES you can check the phones n-row text programming in currently selected language.
Pinouts
1 = + external power supply. 7.2v @ 600mA.
2 = RS232 input (TTL)
3 = GND (digital)
4 = RS232 output (TTL)
5 = +5V output. Limited.
6 = Test. Switch phone off and provide +5V and switch back on. (set comms at 9600, n,8,1)
7 = Mute (0 - Normal, 1 - In Call)
8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak)
9 = GND (analog)
10 = Related to Mic/Speak
11 = BF in
12 = BF out
Ericsson 768/788To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- * Service Provider Lock is * <- <- * but it is now called the ME lock. There are two options after selecting yes on another menu. These are lock to Network or lock to NetSubet. Command set The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity. ATA Pick up phone during ring AT+GMI Manufacturer identification AT+GMO Request model Identification AT+GMR Request revision Identification AT+GMM ATDxxx; Dial number xxx ATH Hangup phone AT+CFUN=? Define levels of fuctionality in the order of power consumed AT+CFUN=0 Switches off the phone AT+CBC Query battery level Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed. These commands will be ackowledged with an 'OK' prompt. An incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode. Portable Handsfree Unit 1 Earphone: 16 Ohm 2 Microphone: <- 2 kOhm 5 Connected to 04 (GND) Pinouts Left to right, keyboard up. 1 Audio Out 2 Audio In 3 Accessory Sense. GND to enable External Mic and Speaker (Analog) 4 Audio Signal GND. 5 Portable handsfree In.
6 Music Mute Out, High when phone is used.

7 In Flash Memory Voltage and Service Voltage, In 0V=normal,+5V=test, +12V=test+flash

8 Logic Out, Status On. Sources over 100mA

9 Data Out from Mobile Station. Debug messages appear here at 112KBaud when in debug mode.

10 Digital Ground and DC return

11 Data in

12 DC in for battery charging, DC out for accessory power

Read more »

Alcatel Secret Codes

Alcatel HC400 / HC1000 SECRET CODES
Software releases
HC400 on the backside near the IMEI number is a sticker with a software
release.
Alcatel have split the software releases
1.x No Cellbroadcast
5.x Cell broadcast
The newest software release of the HC 1000 is AK1 03
Alcatel HC 600 / 800 / 1000 SECRET CODES
*#06# returns IMEI number and Software Version (not HC600).
These are the pinouts for the HC600 they are the same as the
800/1000 I beleive.
1 3 5 7 9 11 13 15
I I I I I I I I
O O 17
I I I I I I I I
2 4 6 8 10 12 14 16

1 Vbat_ext 9 SDA_E
2 EMMI_PAE 10 GND
3 Mic 11 GND
4 EMMI_OPE 12 DC_IN (charge)
5 GND 13 Speaker
6 EXT_EMET 14 MARCHE
7 SCL_E 15 DC_IN (charge)
8 EXT_RECDIT 16 GND
17 Antenna+internal switch (int/ext)
Alcatel One Touch Easy
Secret Codes
To view IMEI (International Mobile Equipment Identity) number enter
*#06#
To Enter Service Menu enter: *#000000#
To view Secret Menu type 000000 then press *
Secret Menu Appears
TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test

The Service provider (SP) lock is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator,
if one inserts a SIM card from a different operator the phone will
refuse to accept it! The cell phone will however accept another SIM
card from the same operator.

Removing SP lock on Alcatel Easy
This is how to remove the SP lock on Alcatel (one touch) Easy.
(You wil need a cable, a eeprom device and some sw)

Edit the eeprom:

Address Replace with
------------- ---------------
176h FFh
177h FFh
ALCATEL:
*#06# -> Displays imei & Software Version
000000* -> Entering in engineering Menu1 (with sim)
###847# -> Reset to Factory Defaults (with sim)
###765*02# -> Add Barring Groups
###765*05# -> Locking To Network
###765*07# -> Unlocking From Network
###765*78# -> Deactivate Barring Groups

Read more »