Switch 2 Master Keys and Key Generations Explained

Last checked against Lichii build 117

A master key is the root key of one key generation, and a key generation is a revision of the console’s encryption introduced by a system update. Each master_key_XX line in prod.keys is one generation.

Why does Nintendo add new key generations?

Nintendo adds a key generation so content built after an update cannot be decrypted with older keys. Games and updates built with the newer SDK use the newest generation.

Which keys are derived from a master key?

  • The key area keys that decrypt game NCAs for that generation.
  • The title key encryption key (titlekek) for that generation.
  • Package keys used for system content of that generation.

How do key generations break games?

A game built for generation N needs master_key_N in prod.keys. With an older key file the game header opens, but its content does not, so the game fails at launch even with current firmware.

How do you count key generations in your file?

Open prod.keys in a text editor and find the highest master_key_XX number. Compare it with prod.keys v22.5.0; if yours is lower, your keys are older.

Using key generations

This page is part of Lichii Switch 2 keys and firmware, where every prod keys and firmware version for Lichii is listed with its download link. Related guides are collected under Switch 2 keys and firmware explained.