Secret GSM Codes:
Alcatel
Bosch
Ericsson

Motorola
Nokia
Philips

Panasonic
Sagem
Samsung

Siemens
Sony

The following codes are the standard GSM codes for various services. Not all codes are functioning in all nets. It depends on what the operators have included in their software. Most Nokia phones have easier ways to activate these codes through the menus, check the guides for your model.
Some characters explained : *ACTIVATE
**REGISTER AND ACTIVATE
*#CHECK STATUS
#UNREGISTER
##UNREGISTER AND DEACTIVATE
Codes :

To check the IMEI (International Mobile Equipment Identity) type *#06#
Information you get from the IMEI :
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code
FAC = Final assembly code
SNR = Serial number
SP = Spare

Press *#000000# to enter Service Menu

To view Secret Menu type 000000 then press *

Secret Menu Appears

TRACES - Channel indicator menus
ARRETS - I Dunno
VIDER ARRETS - Press OK and the phone responds: This action is executed!
CTRL CHARGE - It shows the charger voltage and battery voltage.
DAMIER - Display TestEFR : to activate *3370#
to deactivate #3370#

HR : to activate *4720#
to deactivate #4720#

Talk time is reduced by 5% if Enhanced Full Rate is active, and increased by up to 30% if Half Rate is active.

To cancel all diverting : ##002#Call Diverting
All
To Activate: * * 21 * NUMBER # [SEND]
To Cancel: # # 21 # [SEND]
To Check: * # 21 # [SEND]
No Answer
To Activate: * * 61 * NUMBER # [SEND]
To Cancel: # # 61 # [SEND]
To Check: * # 61 # [SEND]
Unreachable
To Activate: * * 62 * NUMBER # [SEND]
To Cancel: # # 62 # [SEND]
To Check: * # 62 # [SEND]
Busy
To Activate: * * 67 * NUMBER # [SEND]
To Cancel: # # 67 # [SEND]
To Check: * # 67 # [SEND]
To Cancel All Call Forwarding # # 002 # [SEND]
Diverting Data Calls
All
To Activate: * * 21 * NUMBER * 25 # [SEND]
To Cancel: # # 21 # * 25 [SEND]
To Check Status: * # 21 # * 25 # [SEND]
No Answer
To Activate: * * 61 * NUMBER * 25 # [SEND]
To Cancel: # # 61 * 25 # [SEND]
To Check Status: * # 61 # * 25 # [SEND]
Unreachable
To Activate: * * 62 * NUMBER * 25 # [SEND]
To Cancel: # # 62 # * 25 # [SEND]
To Check Status: * # 62 # * 25 # [SEND]
Busy
To Activate: * * 67 * NUMBER * 25 # [SEND]
To Cancel: # # 67 # * 25 # [SEND]
To Check Status: * # 67 # * 25 # [SEND]
Diverting Fax Calls
All
To Activate: * * 21 * NUMBER * 13 #[SEND]
To Cancel: # # 21 # * 13 # [SEND]
To Check Status: * # 21 # * 13 # [SEND]
No Answer
To Activate: * * 61 * NUMBER * 13 # [SEND]
To Cancel: # # 61 * 13 # [SEND]
To Check Status: * # 61 # * 13 # [SEND]
Unreachable
To Activate: * * 62 * NUMBER * 13 # [SEND]
To Cancel: # # 62 # * 13 # [SEND]
To Check Status: * # 62 # * 13 # [SEND]
Busy
To Activate: * * 67 * NUMBER * 13 # [SEND]
To Cancel: # # 67 # * 13 # [SEND]
To Check Status: * # 67 # * 13 #[SEND]
Call Barring
Before you can activate these barring services you will need a barring code from your service provider.
Call Barring can not be activated if Call Forwarding diverts are already in use.

All Calls
To Activate: * 330 * BARRING CODE # [SEND]
To Cancel: # 330 * BARRING CODE # [SEND]
To Check: * # 330 # [SEND]
All Outgoing Calls
To Activate: * 333 * BARRING CODE # [SEND]
To Cancel: # 333 * BARRING CODE # [SEND]
To Check: * # 333 # [SEND]
All Incoming Calls
To Activate: * 353 * BARRING CODE # [SEND]
To Cancel: # 353 * BARRING CODE # [SEND]
To Check: * # 353 # [SEND]
All Outgoing Calls
To Activate: * 33 * BARRING CODE# [SEND]
To Cancel: # 33 * BARRING CODE # [SEND]
To Check: * # 33 # [SEND]
All Outgoing International Calls
To Activate: * 331 * BARRING CODE# [SEND]
To Cancel: # 331 * BARRING CODE # [SEND]
To Check: * # 331 # [SEND]
All Outgoing International Calls Except To Home Country
To Activate: * 332 * BARRING CODE# [SEND]
To Cancel: # 332 * BARRING CODE # [SEND]
To Check: * # 332 # [SEND]
All Incoming Calls
To Activate: * 35 * BARRING CODE # [SEND]
To Cancel: # 35 * BARRING CODE # [SEND]
To Check: * # 35 # [SEND]
All Incoming Calls When Outside Home Country
To Activate: * 351 * BARRING CODE # [SEND]
To Cancel: # 351 * BARRING CODE # [SEND]
To Check: * # 351 # [SEND]
Cancelling All Call Barring # 330 * BARRING CODE # [SEND]
SMS
Bar Incoming SMS Messages
To Activate: * 35 * BARRING CODE* 16 # [SEND]
To Cancel: # 35 * BARRING CODE* 16 # [SEND]
Call Waiting
To Activate: * 43 # [SEND]
To Cancel: # 43 # [SEND]
To Check: * # 43 # [SEND]
Calling Line Identity
Outgoing
To Activate: * 31 # [SEND]
To Cancel: # 31 # [SEND]
To Check: * # 31 # [SEND]
Incoming
To Activate: * 30 # [SEND]
To Cancel: # 30 # [SEND]
To Check: * # 30 # [SEND]

Siemens Secret GSM Codes
SP unlock : *#0003*(secret code 8 digits)#
if you lost your security code, you can get a 8-digit number from your siemens hotline, which will delete the security code
Show IMEI code: *#06#
Reset to factory defaults: *#9999# (does not change settings on your sim card or in your network)
5 x "no catch": (remove sim card first)
*#0606# + left softkey -> <number>
possibly for sp lock: to allow further inputs
!providername on your display:
the ! means: transmission is unencrypted
pay attention
Resets language to automatic selection:*#0000# then green button
Resets language to english:*#0001# then green button(useful, if you changed to a language you don't understand)
How to distinguish a c25 from a c25 power:
c25 handys have firmware versions:
5,8,10,12
c25 power handys have firmware versions:
(41?),43,46
In most cases, c25 power handys also have an isolated "P" on the sticker under the accu...go on reading..
Show your firmware revision:
switch off your handy, remove your sim card,
switch on again and enter *#06# and then
press the left display button,
it will show you something like 12/XX/XX,
where 12 is your version
actual version C25: 12
actual version C25 Power: 46









Nokia Secret GSM Codes
To check the IMEI (International Mobile Equipment Identity) type *#06#
Information you get from the IMEI :
XXXXXX XX XXXXXX X
TAC FAC SNR SPTAC = Type approval code
FAC = Final assembly code
SNR = Serial number
SP = SpareTo check the phones software revision type *#0000#
Information you get from the software revision :
V 05.31
18-02-99
NSE-3
-1st line = software revision-2nd line = the date of the software release
-3rd line = phone type(generation)
TO ENTER THE SERVICE MENU type *#92702689# (*#WAROANTY#)-Serial number IMEI
-Production date(MM/YY)
-Purchase date (MM/YY) You can only enter the date once.
-Date of last repair (0000=No repair)-Transfer user data to another Nokia phone via infra red
NOKIA 1610/1611
*#170602112302# show the software version
NOKIA 2110
*#3283# phone information
for 2110i *#170602112302# or *#9999# to see the software version
for 2110 *#682371158412125# to see the software version
NOKIA 3110
*#7780# make a reset
*#3110# to see the software version
*#92702689# to enter the secret menu
NOKIA 5110
*#0000# show the software version
*#92702689# to enter the secret menu
NOKIA 6110/6150
*#0000# show the software version
*#92702689# to enter the secret menu
NOKIA 8110/8210/8810
*#0000# show the software versionLatest versions:
Nokia 1610 NHE-5NX 5,23
Nokia 1611 NHE-5SX 4,05
Nokia 2010 NHE-3 5,12
Nokia 2110 NHE-1 4,97m
Nokia 2110i/2118 NHE-4 5,70
Nokia 3110 NHE-8 8,50
Nokia 3210 NSE-8/9 5,01
Nokia 5110 NSE-1 5,24
Nokia 6080 NME-2 4,80
Nokia 6081 NME-2A 5,14
Nokia 6090 NSM-3 4,10
Nokia 6110 NSE-3 5,48
Nokia 6150 NSM-1 5,22
Nokia 7110 NSE-5 4,73
Nokia 8110 NHE-6BX 6,21
Nokia 8110i NHE-6BM 5,20
Nokia 8210 NSM-3 5,16
Nokia 8810 NSE-6 5,00
Nokia 8850 NSM-2 5,11
Nokia 9110 RAE-2 5,02 / 4,15
*#921702689# to enter the secret menu

Motorola Secret GSM Codes
MOTOROLA 6200/7500/8200/8400/8700 Secrets
To activate RBS (Engineering Menus):

[pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
(pause means the * key held in until box appears)
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the < or > keys, and enable it.

To de-activate RBS (Engineering Menus):

[pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
(pause means the * key held in until box appears)
Works on 6200's,8200's,1-888's,7500's,8400's and GSM StarTacs with later than version .27 software.

Options under Eng Field Options

Eng Field Options

Active Cell

RxLev -55 Received powerlevel in dBm
NCC 0 National Colour Code, used for identifying channel
BCC 7 Broadcast Colour Code, also for identifying purposes
MSTxPwr 35 Max allowed transmit power 35dBm about 3.2W
C1 003 Is a calculated figure for the quality control signal which is constantly sent out from the RBS quality
the signal returning from the phone has. If this value is negative for more than 5 sec then the system will make a cell switch.
Time Adv xxx xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.

Adjacent Cells

Adj Cell 1
Channel 0033 Channel Number
RxLev -65 Received powerlevel in dBm
BCCH Decode I think it means it is able to decode the channel information contained in the BCCH
RxLevAM -104 Min allowed reception, compare with RxLev -65 and you get the C1 value which is 39 and
reported back to base as measure of field strength.
MTxPwr 35 Aain max allowed powerlevel
C1 003 ??
NCC 0 National Colour Code
BCC 6 Broadcast Colour Code

System Parameters

Combined Off ??
AcsClas 0000 Allows different priorities - this network doesn't support it.
MCC 505 Mobile Country Code, 505 for Australia, 240 for Swedes etc
MNC 01 Mobile Network Code, 01 for Mobilenet, 02 for Optus, 03 for Vodafone using MCC 505. MCC+MNC is often called Network Code
LAC 08720 Location Area Code, shows which exchange your're in
CellID 00473 Base Station Identity
T3212 005 Time between periodic network updates (either hours between or time remaing until update, not sure)
BS-PA-MFRM 4 ??
XZQTY 14.3 ??


Motorola Flip Pinout:
ANT- (O) | | | | | | | | | |
10 9 8 7 6 5 4 3 2 1
Top of phone (screen)

1) Audio Ground
2) Ext b+
3) T Data
4) C Data
5) R Data
6) Logic Ground
7) Audio Out - on/off
8) Audio In
9) Manual Test
10) Battery Feedback

Sony Secret GSM Codes
Sony CMD-Z 1

Press *#06# to view IMEI

Show Software version and manufacturing date : Press # 8377466 # (#version#)

Sony CMDX 1000

Show Software date : Remove your SIM Card, then press : * # 06 #
and finally press:
[left softkey]
To enter Monitor Mode on Network Option menu:
Menu
9 (Phone Options)
7 (Phone Status)
[Left Display Button] (left MENU key) 7684666 [HangUp Button] (Red HandSet key)

Ericsson Secret GSM Codes
Ericsson 628
To view IMEI number enter * # 0 6 #

To view Software Version enter -> * <- <- * <- *

To read all programmed texts enter -> * <- <- * <- * ->

To view phone network lock status enter < * * < (wait 3 sec)

To fast dial press phone number pos nr and # (Example: 1 5 #)

To fast dial last number press 0 #

To reset main menu language to english enter * # 0 0 0 0 #

To see battery level while phone is turned off quickly press and release on/off(NO button).

To see Extended menus (on older versions) go to MISSED CALLS, empty directory, press and HOLD right arrow button, choose menu type

To see Extended menus (on newer versions) go to READ, empty directory, press and HOLD left arrow button, choose menu type

To edit phone book Turn on extended menus and choose "EditPh.Bk".Command set
The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity.

ATA Pick up phone during ring
AT+GMI Manufacturer identification
AT+GMO Request model Identification
AT+GMR Request revision Identification
AT+GMM
ATDxxx; Dial number xxx
ATH Hangup phone
AT+CFUN=? Define levels of fuctionality in the order of power consumed
AT+CFUN=0 Switches off the phone
AT+CBC Query battery level
Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed.
These commands will be ackowledged with an 'OK' prompt. An
incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode.
Portable Handsfree Unit
1 Earphone: 16 Ohm
2 Microphone: <- 2 kOhm
5 Connected to 04 (GND)
Ericsson 688
To view IMEI number *#06#
To view Software Version enter -> * <- <- * <- * CLR
To reset phone language to English *#0000#
>*<<*<*> 1-row text strings. If pressing YES you can check the phones 1-row text programming in currently selected language.

>*<<*<*>> n-row text strings. If pressing YES you can check the phones n-row text programming in currently selected language.
Ericsson 788To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- *
Service Provider Lock is * <- <- * but it is now called the ME lock.
There are two options after selecting yes on another menu. These are lock to Network or lock to NetSubet.
Command set
The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity.

ATA Pick up phone during ring
AT+GMI Manufacturer identification
AT+GMO Request model Identification
AT+GMR Request revision Identification
AT+GMM
ATDxxx; Dial number xxx
ATH Hangup phone
AT+CFUN=? Define levels of fuctionality in the order of power consumed
AT+CFUN=0 Switches off the phone
AT+CBC Query battery level

Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed.
These commands will be ackowledged with an 'OK' prompt. An
incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode.
Portable Handsfree Unit
1 Earphone: 16 Ohm
2 Microphone: <- 2 kOhm
5 Connected to 04 (GND)
Ericsson 888
To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- *
Note: This code also shows version of Infrared driver software and text labels




Panasonic Secret GSM Codes
GD 90 :
press *#9999 in the 10 sec after the pincode to see the software version.
Samsung Secret GSM Codes
enter *#9999# to see the software version
enter *#0001# to see parameters.enter *

#9999# to see the software version
enter *#9125# to activate the smiley when the phone is charging
enter *#0837# instruction for the serial paramaters.
enter *#9998*228# to see battery informations.(capacity - voltage - temperature )
enter *#9998*246# to see the software status
enter *#9998*289# to change buzzer frequency
enter *#9998*364# to have the dog watch
enter *#9998*523# to change the contrast
enter *#9998*872# to have a diagnostic
enter *#9998*842# to make a vibrator test
enter *#9998*947# to make a reset (fatal error)
enter *#9998*9999# software version
enter *2767*2878# to make choice between the reset options

Alcatel Secret GSM Codes
One touch easy :to enter the service menu : *#000000#
All Alcatels :
to enter the secret menu : 000000*
TRACES : channel indicator menu
ARRETS : phone error
CLEAR ARRETS : press ok and the phone responds "this action is executed"
CTRL CHARGE : it shows the charger voltage and battery voltage
DAMIER : display test (except for Alcatel On Touch Pocket
Philips Secret GSM Codes
Philips DIGA phones:

Blocking list *#3333*#
Time connected *#2558*#
Flags,something *#3377*#
Security code *#7489*#

Philips FIZZ phones:

IMEI code *#06#
SW info *#8377*#
Security code *#1234*#

Philips SPARK phones:

IMEI: *#06#

Philips GENIE phones:

*#06# IMEI number
*#2254*# Status register: C, BS, RR, MMI, CREAT.
*#2255*# activate and deactivate the "DEBUG CALL"-Mode; when activated, make a call
to a busy line an the phone will display some hex-codes on the display
*#2558*# the time in days,hours and minutes you are connected to the net
*#2562*# not clear; the phone reconnects to the net
*#2565*# not clear; warmstart
*#3333*# (NO) BLOCKING - list (15 items)
*#2377*# "BEER": not clear, the phone waits a random time and reconnects to the net
*#3377*# Init, Flags, SIM LCK
*#3353*# resets the (NO) BLOCKING - list
*#7378*# Name, Length, SIM phase
*#7489*# SECURITY CODE
*#7693*# activate and deactivate the SLEEP MODE (when deactivated the battery will go down!)
*#7787*# SPURIOUS INTERRUPT
*#7948*# SWITCH OFF
*#8463*# Some information about the SLEEP MODE: Wake, Sleep Req., Sleep

show info *#8377*#security code *#1234*#

Sagem Secret GSM Codes
press MENU - 5 - 1 - 1 - # to enter the secret menu

Bosch Secret GSM Codes
Bosch 738 and Bosch 718, Bosch COM 607 and 908 Secrets
Codes:

*#06# to display the IMEI
*#0000# to set the language automaticaly (To english)Reset
*#3370# to set the Enhaced Full Rate
#3370# to Reset the phone
*#9000# to enter sim lock code
*#9003# to enter the network code
*#9004# to enter the subset code
*#9100# to remove the sim lock permanently
*#9101# to remove the corporate lock permanently
*#9102# to remove the provider lock permanently
*#9103# to remove the network lock permanently
*#9104# to remove the subset lock permanently

Reveal Engineering Menu

Press *#3262255*8378# (alent to *#DANCALL*TEST#) to make secret Engineering menu
(Menu 10) appear.
Then you will be able to see the following information.

10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data
Samsung SGH-600 / SGH-2100
Jun, 30 2000 - 04:47
Secret Codes

*#06# -> Show IMEI
*#9999# -> Show Software Version
*#0837# -> Show Software Version (instructions)
*#0001# -> Show Serial Parameters
*#9125# -> Activates the smiley when charging.

*#9998*228# -> Battery status (capacity, voltage, temperature)
*#9998*246# -> Program status
*#9998*289# -> Change Alarm Buzzer Frequency
*#9998*324# -> Debug screens
*#9998*364# -> Watchdog
*#9998*377# -> EEPROM Error Stack - Use side keys to select values. Cancel and ok.
*#9998*427# -> Trace Watchdog
*#9998*523# -> Change LCD contrast - Only with version G60RL01W
*#9998*544# -> Jig detect
*#9998*636# -> Memory status
*#9998*746# -> SIM File Size
*#9998*778# -> SIM Service Table
*#9998*785# -> RTK (Run Time Kernel) errors - if ok then phn is reset, info is put in memory error. *#9998*786# -> Run, Last UP, Last DOWN
*#9998*837# -> Software Version
*#9998*842# -> Test Vibrator - Flash the screenligth during 10 seconds and vibration activated.
*#9998*862# -> Vocoder Reg - Normal, Earphone or carkit can be selected
*#9998*872# -> Diag
*#9998*947# -> Reset On Fatal Error
*#9998*999# -> Last/Chk

*#9998*9266# -> Yann debug screen (=Debug Screens?)
*#9998*9999# -> Software version

*0001*s*f*t# -> Changes serial parameters (s=?, f=0,1, t=0,1) (incomplete)
*0002*?# -> unknown
*0003*?# -> unknown

SP-unlock SGH-600 and SGH 2100

*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-LOCK!! )
But also changes IMEI to 447967-89-400044-0, To restore your old IMEI use the IMEI program found on the software page.

*2767*2878# -> Custom EEEPROM Reset

These codes has been tested with version FLD_2C6 G60SB03X of Samsung SGH-600



Alcatel One Touch Easy
Jun, 30 2000 - 05:51
Secret Codes

To view IMEI (International Mobile Equipment Identity) number enter *#06#

To Enter Service Menu enter: *#000000#

To view Secret Menu type 000000 then press *

Secret Menu Appears
TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test

The Service provider (SP) lock is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator.

Removing SP lock on Alcatel Easy
This is how to remove the SP lock on Alcatel (one touch) Easy. (You wil need a cable, a eeprom device and some sw)

Edit the eeprom:

Address Replace with
------------- ---------------
176h FFh
177h FFh




Alcatel unlock Generator
Jun, 30 2000 - 07:05
Here's a program that generates the lock/unlock codes for the alcatel phones (One Touch Easy ..)
NB. The program may not work with 203 & newer versions of the software.

Instructions for unlock.exe
Once you enter your IMEI, you got 2 codes, ON, OFF plus phone type. ON is the code for turning on the SIMLOCK. We don't wanna do that, right? :-) So let's go for the OFF code. This is supposed to be the one to remove the SIMLOCK, but it's incomplete, at least for the network providers in Spain. This number, as you have seen, is in HEX format. I think it's a kind of universal code in which any netword provide add another fixed number (always the same) and the correct UNLOCK CODE is the sum of both of them. Let's see this in an example.

IMEI: 330020536226XXX
ON: 50453d90
OFF: 10453d90
Phone type: Alcatel HC800
Network provider: E MOVISTAR (214-07)

If we introduce the OFF code, the phone won't accept it. We have to add another number to this code. In Spain and for 214-07 (MoviStar) this is 9FDFFA. So we have to sum this numbers. The easier way is by loading the windows's calc, use the Hex mode and realize the sum 10453d90+9FDFFA=10E51D8A 10E51D8A is the right number. So we type this in our phone and ... the SIMLOCK is removed