What Are Prod Keys?
Prod keys — short for production keys — are the cryptographic keys a Nintendo Switch console uses internally to decrypt its own software. Dumped from a console, they live in a small text file named prod.keys, and that single file decides whether your emulator boots a game or throws “Missing prod.keys” at you. If you are here for the file itself, skip ahead — the latest prod keys are always in the download table on our homepage.
This page is the deep version: where prod keys come from, what is actually inside the file, how the decryption chain works, and why an outdated file stops booting new games.
Where Prod Keys Come From
Neither emulators nor Nintendo ever “issue” prod keys. Every Switch console carries its own secret key material, provisioned at the factory and unlocked at boot. A console owner can release the hardware into a special payload mode and run a tool such as Lockpick_RCM, which derives and exports the full key set into prod.keys and title.keys. Every prod.keys file in circulation is a dump from somebody’s console — and because consoles keep adding key generations with each firmware update, every dump is stamped by the firmware it was taken on.
That firmware stamp is the detail most newcomers miss: a dump taken on firmware 18.1.0 literally cannot contain key generation 19 or newer, no matter how you rename or re-save the file.
How the Decryption Chain Works
Switch content is encrypted in layers, and prod keys sit at the root of the chain:
- Master keys — one per firmware generation, stored as
master_key_00up to the current generation - Intermediate keys — titlekeks and key area keys are unwrapped using the matching master key
- Title keys — the per-game keys that unlock each title’s NCA containers
- Game data — only now can the emulator read the executable, assets and metadata inside the game
Miss the file at step one and nothing downstream can recover: the emulator sees only opaque encrypted bytes. This is why a missing or stale prod.keys produces such uniform symptoms across every emulator — “Failed to decrypt NCA”, a black screen on boot, or a game that never appears in the library at all.
What Is Inside a prod.keys File
Open one in a text editor and you will find a plain-text list of roughly two hundred entries in name = hex value form. The families that matter:
| Key entry | Role in decryption |
|---|---|
master_key_00…XX |
The root keys — one per firmware generation. Everything else derives from these. |
titlekek_00…XX |
Used to unwrap the encrypted title keys attached to digital games. |
key_area_key_application |
Decrypts the content area of standard game card and eShop titles. |
key_area_key_ocean |
Decrypts downloadable and update content areas (DLC, update partitions). |
key_area_key_system |
Decrypts system-module content, including parts of the firmware itself. |
header_key |
Decrypts the NCA file header — the very first thing an emulator touches. |
A complete, current file contains every generation up to the firmware it was dumped on. Truncated or hand-edited files are a classic cause of “some games work, others don’t”.
Why Prod Keys Expire With Every Firmware
Nintendo introduces a new master key generation with each major system update, and newer first-party releases are encrypted with the newest generation. An older prod.keys file keeps working for everything released before it, then one day the latest game simply refuses to boot. The fix is never reinstalling the same file — it is updating to a dump that covers the newest generation, currently v23.0.0. The homepage download table lists every version from v16.1.0 to the latest release so you can match the file to your setup.
Prod Keys vs Title Keys vs Firmware
Prod keys unlock the system-level encryption; title keys unlock individual digital titles and are usually derived automatically; firmware is the operating system content that decrypted games need at runtime. All three roles are covered in depth in our comparisons: Prod Keys vs Title Keys and the Switch firmware guide.
Which Emulators Use Prod Keys?
All of them. The same prod.keys file is accepted unchanged by:
- Suyu — open-source emulator for Windows, Linux and Android
- Ryujinx — the accuracy-focused emulator with the strictest key checks
- Yuzu — the original PC Switch emulator and its many forks
- Eden — a modern fork tuned for current firmware parsing
- Citron, Sudachi, Skyline, Egg NS and every other Switch emulator we track
Only the expected folder differs between emulators — the file itself never changes. Our installation guide lists the exact path for each one.
Are Prod Keys Legal?
The keys are cryptographic material extracted from hardware, and the legally cleanest path is dumping them from a console you own with Lockpick_RCM. Downloading dumps of unclear origin from random sites operates in a gray area, and we won’t pretend otherwise — which is exactly why the technical documentation here is kept complete and honest.
Get the Latest Prod Keys
Everything on this page reduces to one practical habit: keep one current prod.keys file and refresh it after every major firmware release. Grab the newest dump from the download table on our homepage, then follow the install guide for your emulator of choice.