This page's purpose is to catalogue all known power off codes used with each revision of the WebTV/MSN TV product, their purposes, and how they can be triggered. This list is by no means complete or accurate.
Almost all information so far has been sourced from MattMan's page on known power off codes from his hacking site, with us at the moment merely adding in our own notes and information on previously-unknown power off codes for the MSNTV 2 (codes 8086 and 357).
First-Generation WebTV/MSN TV
To trigger power-off code, turn off unit and either press OPTIONS 3 times and then type out numeric code, or use the remote combo if applicable. The box lights should flash for a bit after successfully detecting the code.
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 217 |
↑, ↓, →, GO |
Go to phone settings |
N/A
|
| 32768 |
HOME, BACK, ↑, ↓, GO |
Clear flash NV RAM (including TellyScript, dialing options, TV listings, etc.) |
N/A
|
| 080813 |
HOME, BACK, ↓, ↑, GO |
Clear serial NV RAM (emergency 800 number) |
N/A
|
| 07081969 |
HOME, →, ←, BACK, GO |
Force flash download |
N/A
|
| 024995 |
N/A |
Boot into diags |
Doesn't appear to work on New Classic models. Unsure of use.
|
| 8675309 |
??? |
Boot into Mini-Browser for downloading Boot or App ROMS (primarily development use for flashing BootROMS) |
Reported to work on New Classic models.
|
Production Build Codes (Client 1.1+)
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 411 |
HOME, BACK, RECENT, GO |
Shows technical information for the box |
N/A
|
| 7264 |
SCROLL DOWN, BACK, HOME, SCROLL UP |
Clears TellyScript ONLY |
According to MattMan's website: "Used to be a bug in classic clients that made this secret code work improperly, but with the forced upgrade to client 1.4, this power code now works as expected." This code was removed in MSN TV builds.
|
| 7265 |
??? |
Another version of 7264, not currently in general use. |
This code was removed in MSN TV builds.
|
| 77437 |
BACK, BACK, ↑, ↑, GO |
"Spooky Dialing Options" |
N/A
|
| 18004693288 |
↑, ↓, ←, →, ↑, ↓, ←, →, GO |
Force signup again |
N/A
|
| 0000 |
??? |
Do MessageWatch mail check (unsupported, but seems to work) |
N/A
|
Non-Production Build Codes
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 93288 |
←, →, ←, →, GO |
Boot into connect setup |
N/A
|
| 90210 |
N/A |
Boot into tourist mode |
N/A
|
| 031158 |
HOME, BACK, ←, →, GO |
Starts up the Kiosk Demo mode. |
N/A
|
| 061185 |
N/A |
Turn off Demo mode on a retail box. If in retail group on the service, demo mode will be reset when it connects and will go back to demo. |
N/A
|
| 0000 |
N/A |
Check MessageWatch, Fetch Video Ad. |
Terminal must have connected to the service, with MessageWatch activated, at least once since it was plugged in. Box should power up, check for mail, and fetch a video ad.
|
| 744744 |
??? |
Boot into VFatHax |
Possibly a WebTV Plus-only code.
|
LC2/Plus Codes
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 314159 |
??? |
Disable secure download checking (used on pre-2014 builds as they don't support encrypted downloads) |
Does 2014 = build 2014?
|
| 159753 |
??? |
Delete Disk Cache |
N/A
|
| 48627931 |
??? |
Delete Group Database |
"The client and service often want to check to see if broad groups of files are present and valid. This is done by checking groups, instead of individual files. Sometimes, the group gets out of sync with the individual files. This code destroys the group database, so the service will download everything again (IR, EPG, etc.), or at least take a look at individual files."
|
| 7445000 |
??? |
Delete Video Ads from Disk |
N/A
|
| 55325532 |
??? |
Delete Everything But The Browser |
N/A
|
Internal
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 24682468 |
??? |
Trashes the browser image |
N/A
|
| 13571357 |
??? |
Writes a few spare bytes into NVRAM, so the checksum will fail |
N/A
|
| 7225000 |
??? |
Blanks TV listings -- deletes current set of TV listings |
N/A
|
| 7335000 |
??? |
Blanks IR Blaster Codes -- deletes current set of IR blaster codes |
N/A
|
| 1111 |
??? |
Forces Data downloads in non-debug, non-production builds |
N/A
|
Export Build Codes
| Numeric Code |
Remote Combo |
Function |
Notes
|
| 46725 |
??? |
Toggles between NTSC and PAL mode |
N/A
|
Japanese Dreamcast
Power-off codes for WebTV for Dreamcast.
To activate, press the S3 key on the Dreamcast keyboard 3 times right as the splash screen appears and type in numeric code. Only some codes have been confirmed to work on WebTV for Dreamcast, others might not work on this release. The time window for entering in the code is also extremely small and not easy to predict, making testing the codes extremely difficult.
Confirmed Codes
| Numeric Code |
Function |
Notes
|
| 411 |
Shows technical information about the WebTV disc and SSID assigned to Dreamcast |
N/A
|
| 7264 |
Clears TellyScript(?) |
N/A
|
| 32768 |
Resets flash data (TellyScript, dialing options, etc.). This does not appear to affect data stored by other titles in the Dreamcast's flash memory, but this hasn't been confirmed yet so use this code with caution |
N/A
|
| 1111 |
Power up for DataDownload. Triggering this PO code on the Dreamcast results in the screen fading to back and the Dreamcast booting back into its menu |
N/A
|
| 77437 |
Secret Phone Options |
N/A
|
Unconfirmed
| Numeric Code |
Function |
Notes
|
| 46725 |
Toggles between NTSC and PAL mode |
N/A
|
| 061185 |
Stops Demo (Plus) |
N/A
|
| 815963 |
? |
N/A
|
| 7265 |
Clears TellyScript (alt. code) |
N/A
|
| 112357 |
Default to WeCare Phone Settings |
N/A
|
| 10679 |
? |
N/A
|
| 1776 |
Sets the default interfacing to US (and not Japan) |
N/A
|
| 03774 |
? |
N/A
|
| 2403774 |
? |
N/A
|
| 0000 |
MessageWatch mail check |
N/A
|
| 112357 |
Clears Phone Options |
N/A
|
| 4930132 |
Set BYOISP to enabled |
N/A
|
| 8673094 |
? |
N/A
|
| 324 |
? |
N/A
|
| 314159 |
Disable secure download checking |
N/A
|
| 242424 |
Crash Log Report (Internal only?) |
N/A
|
| 9964 |
Scrub partition map |
N/A
|
| 55325532 |
Delete partitions |
N/A
|
| 48627931 |
Delete Group Database |
N/A
|
| 7225000 |
Blanks TV listings |
N/A
|
| 7335000 |
Blanks IR Blaster Codes |
N/A
|
| 7335001 |
Extend Code Set History |
N/A
|
| 7335002 |
Reset Code Set History |
N/A
|
| 6145539 |
? |
N/A
|
MSNTV 2
To trigger power-off code, turn off the unit and either hold the power button or press ALT 3 times, and then type out the code. The power, connecting, and message lights should quickly flash one by one three times.
Build 2005 codes (Beta)
| Numeric Code |
Function |
Notes
|
| 417 |
? |
N/A
|
| 93289 |
? |
N/A
|
| 504 |
? |
N/A
|
| 503 |
? |
N/A
|
| 56000 |
? |
N/A
|
| 802 |
Network Settings / Web Proxy (hit power) |
N/A
|
| 2020 |
Displays Box ID |
N/A
|
| 8086 |
? |
N/A
|
| 415865838 |
? |
N/A
|
| 415865828 |
? |
N/A
|
| 415865818 |
? |
N/A
|
| 415865808 |
? |
N/A
|
| 555 |
? |
N/A
|
| 32768 |
? |
N/A
|
| 32767 |
? |
N/A
|
| 8088 |
? |
N/A
|
| 8675309 |
? |
N/A
|
| 55325532 |
? |
N/A
|
| 219 |
? |
N/A
|
| 218 |
? |
N/A
|
| 1200 |
? |
N/A
|
| 217 |
? |
N/A
|
| 12357 |
? |
N/A
|
Final Build Codes
| Numeric Code |
Function |
Notes
|
| 6145539 |
"CrashTheSystem" |
N/A
|
| 32768 |
"DeleteAllFilesAndReboot" - Resets MSNTV 2 unit to factory state |
N/A
|
| 411 |
System Information page. |
Displays model name of unit, box ID, firmware version, boot ROM version, memory, and storage
|
| 93288 |
Goes to URL "msntv:/tvshell/Register.html". Use unknown |
N/A
|
| 55555 |
Unit registers power-off code, but doesn't do anything. According to the v5 Shell.html comments, this apparently toggles a "wholesale guest mode" if already in Guest mode. Need more documentation on this |
N/A
|
| 10000 |
Goes to URL "msntv:/Connecting/AboutToSynch.html?caller=updatecheck". Possibly used to check for firmware updates |
N/A
|
| 10001 |
Goes to URL "msntv:/Connecting/AboutToSynch.html?caller=mailcheck0". Used for mail check |
Comment from Shell.html component of MSNTV 2 - "// this is first mail check at anchor time"
|
| 10002 |
Goes to URL "msntv:/Connecting/AboutToSynch.html?caller=mailcheck1". Used for mail check |
Comment from Shell.html component of MSNTV 2 - "// this is mail check different than the one at anchor time"
|
| 7264 |
Clears TellyScript |
N/A
|
| 80211 |
Advanced wireless settings (hence the choice of numeric code) |
N/A
|
| 2021 |
BootROM power off code - Goes to customer system tests |
Allows user to test dialing and Ethernet connectivity
|
| 8086 |
BootROM power off code - Goes to factory service menu |
Diagnostics menu that shows detailed information about the unit and its usage, along with an option to test video capabilites of the MSNTV 2
|
| 3932397 |
Goes to service URL for update loop test. Need more documentation on this |
N/A
|
| 77437 |
"Spooky Dialing Options" |
Doesn't seem to work when testing power code on an MSNTV 2 unit first-hand
|
| 357 |
Custom secret code left over in the code of the Shell.html component used by the MSNTV 2 system. Use is currently unknown |
N/A
|