NFC, RFID, Mifare — the complete guide to technologies, security and compatibility
Anyone looking to implement badge authentication at their MFP quickly encounters a wealth of acronyms: NFC, RFID, Mifare Classic, DESFire, HID iClass, Legic, EM4200, HITAG, 125 kHz, 13.56 MHz. What do these terms mean, which technologies are secure, and how do you find the right card reader for your existing access cards?
This guide explains all relevant card types and frequencies, evaluates their security, and shows how a dual-frequency reader achieves maximum compatibility.
The foundation of all contactless card technologies
Contactless cards communicate with the card reader via radio frequencies. There are two relevant frequency ranges:
The older technology, widespread in access systems from the 1990s and 2000s. Cards such as EM4200 and HITAG operate at this frequency. Advantage: robust and inexpensive. Disadvantage: low data capacity, no or weak encryption, easy to clone.
The modern standard on which NFC is based. Mifare, HID iClass SE and Legic Advant operate at this frequency. Advantages: higher data rate, strong encryption (AES-128), larger storage, international standardisation (ISO 14443, ISO 15693).
Recommendation: If you are building a new system, use 13.56 MHz technology exclusively. If 125 kHz cards are already in use, a dual-frequency reader enables parallel use of both frequencies — ideal for gradual migration.
Security, prevalence and use cases
| Card Type | Frequency | Encryption | Security | Prevalence |
|---|---|---|---|---|
| Mifare Classic 1K/4K | 13.56 MHz | Crypto-1 (cracked) | Low | Very high |
| Mifare DESFire EV1 | 13.56 MHz | 3DES, AES-128 | High | High |
| Mifare DESFire EV2/EV3 | 13.56 MHz | AES-128 | Very high | Growing |
| HID iClass SE | 13.56 MHz | AES-128, SIO | Very high | High (US/Int.) |
| Legic Prime | 13.56 MHz | Proprietary | Medium | Medium (DACH) |
| Legic Advant | 13.56 MHz | AES-128 | High | Medium (DACH) |
| EM4200 | 125 kHz | None | Very low | High (legacy) |
| HITAG | 125 kHz | Proprietary (weak) | Low | Medium (legacy) |
The Mifare Classic encryption (Crypto-1) was completely cracked back in 2008. With freely available software and a reader costing under 50 euros, cards can be cloned in minutes. For basic MFP authentication without high-security requirements, this is acceptable — for access to sensitive areas, however, it is not.
Mifare DESFire EV2 and EV3 offer AES-128 encryption, which cannot be cracked according to current knowledge. The cards support multiple independent applications (e.g. access + MFP + canteen on a single card) and are backwards compatible with DESFire EV1.
Door, MFP and canteen with the same card
The greatest advantage of modern card systems: the same card can be used for multiple applications. Most organisations already have access cards for building security. These cards can typically also be used at the MFP — without replacing cards.
If your organisation uses different card types — for example EM4200 (125 kHz) for the access system and Mifare (13.56 MHz) for newer applications — a dual-frequency reader solves the compatibility problem. It reads both frequencies and enables gradual migration to the newer technology.
Flexibility vs. integration — the right choice for your MFPs
| Criterion | USB Card Reader | Built-In Reader |
|---|---|---|
| Cost | 50-150 EUR | 200-400 EUR (manufacturer-specific) |
| Compatibility | Manufacturer-independent | Specific MFP models only |
| Installation | Simple (plug in USB) | Professional installation required |
| Appearance | External device visible | Seamlessly integrated |
| Replacement | Easy to replace | More complex |
| Tamper protection | Medium | High |
For an overview of all compatible MFP models and card readers, visit our Compatible Devices page. For more information on card technologies, see the Authentication & Card Readers Glossary.
Docuflair Access Control supports all common card formats and frequencies. In a free demo, we will determine which card reader fits your existing access cards.
Answers to the most important questions about MFP card readers
RFID is the umbrella term for contactless identification technologies. NFC is a specific RFID technology operating at 13.56 MHz with a range of just a few centimetres. At the MFP, both terms are often used interchangeably, as most card readers are NFC-based.
No, the Mifare Classic encryption (Crypto-1) was cracked back in 2008. For security-critical applications, you should upgrade to Mifare DESFire EV2/EV3 with AES-128 encryption. For basic MFP authentication without high-security requirements, however, Mifare Classic remains adequate.
Yes, in most cases. Docuflair supports all common card formats. A dual-frequency reader can even read cards with different frequencies (125 kHz and 13.56 MHz).
Both have advantages. Built-in readers are visually unobtrusive and tamper-proof. USB card readers are manufacturer-independent, cheaper (50-150 EUR) and easier to replace. For most organisations, the USB card reader is the more pragmatic choice.