prod.keys is the system key file dumped from a Switch console. Switch games and firmware are encrypted, and an emulator needs prod.keys to decrypt them. Without it, an emulator can only run homebrew, not commercial games.

Do I need title.keys?

Not always. title.keys holds the per-title keys for digital games, updates and DLC, and is usually dumped along with prod.keys. Often prod.keys alone is enough; you mainly see errors when a digital title's key is missing.

How do I fix MissingKeyException?

It means your keys are missing or outdated. Dump fresh keys from your own console, put them where your emulator expects them, and make sure the keys are not older than your firmware.

Is the newest firmware always best?

No. Emulator support lags behind. Citron Neo's site says it supports firmware up to 21.2.0, and as of October 2026 no emulator has officially stated support for 23.x. Keep keys and firmware matched, with keys at least as new as the firmware.

Are there Switch 2 decryption keys for emulators?

The Switch 2 emulator builds don't use keys. As of November 3, 2026, the unofficial Eden forks that run Switch 2 games, such as eden-nx2 and Eglantine, can't decrypt Switch 2 games themselves; they load game files already decrypted on a Switch 2 (the unpacked exefs/main file plus the romfs folder). Switch 1 prod.keys and firmware only matter for Switch 1 games.

Switch & Switch 2 Decryption Keys Explained: prod.keys, Firmware

prod.keys is the Switch console's system key file. Emulators use it to decrypt games and firmware, and can't run commercial games without it. title.keys holds the per-title keys for digital games, updates and DLC. Firmware is the Switch system software, which gives emulators the system archives, fonts, Miis and other pieces games expect. All three are dumped from a Switch console.

This page covers what they are, how versions must match, and where they go.

Why emulators need keys and firmware

Switch games and system files are encrypted. Nintendo's February 2026 DMCA notice to GitHub says it plainly: Switch games are encrypted with proprietary keys referred to as prod.keys, and can't be played until they are verified and decrypted with Nintendo's keys. On real hardware the system does that. An emulator doesn't have Nintendo's system, so you supply:

Keys, so the emulator can decrypt games and firmware.
Firmware, so it has the system archives, fonts, Miis, HOME menu data and so on that games call at runtime.

That decryption step is also why Nintendo argues emulators "necessarily" circumvent its protection measures. The legal side is covered in Are Switch emulators legal?

The three files

Name	What it is	Required?	Notes
prod.keys	The console's system keys, used to decrypt games and firmware	Yes	Without it you can only run homebrew. Eden only lets you pick this one file
title.keys	Per-title keys for digital games, updates and DLC	Optional	Usually dumped with prod.keys; common for digital content
Firmware	The Switch system software (a system update package)	Most games need it	Version must match your keys

Game files themselves usually come as NSP (digital) or XCI (cartridge image), which contain encrypted NCA archives. Short definitions are in the glossary.

Versions must match: keys can't be older than firmware

Ryubing's docs put it simply: your prod.keys must be at least as new as the firmware you install. Typical errors when keys are too old:

Error	Cause	Fix
`MissingKeyException` (Missing NCA title key, etc.)	Keys missing or outdated	Dump fresh keys from your own console
`RYU-0003: Firmware parsing error` (Ryubing)	Keys older than firmware	Update keys and firmware together
"System update title was not found in the firmware package"	The file isn't firmware	Dump the firmware again
`System archive with titleid 0100000000000823 was not found`	Firmware too old for the game	Update keys and firmware

Newer firmware isn't automatically better. As of October 2026, Nintendo's update history lists 23.0.0 (September 9, 2026) as the latest major version, but emulator support lags: Citron Neo's site says up to 21.2.0, and Eden v0.2.0's release notes mention 22.0 compatibility. No emulator has officially stated 23.x support yet.

Where keys and firmware go in each emulator

Emulator	Keys	Firmware
Ryubing (Windows / Linux / Mac)	File > Open Ryujinx Folder, open the `system` subfolder, drop in prod.keys (and title.keys), then restart so it can verify them. Default data folder on Windows is `%appdata%\Ryujinx`	Tools > Install Firmware > Install from XCI/ZIP and pick the firmware ZIP. "System Version" appears in the bottom right when it works. An untrimmed cartridge XCI also works
Eden (Windows / Linux / Steam Deck / Mac)	On first launch it warns about missing decryption keys; click OK, then Tools > Install Decryption Keys and pick prod.keys. Eden stores it in the `keys` folder of its data directory (`%AppData%\eden\keys` on Windows, or `user\keys` next to the program in portable mode)	Tools > Install Firmware > From Folder or From ZIP
Eden for Android	The first-run wizard has "Install prod.keys"	In the wizard, "Install firmware" takes the firmware ZIP, not extracted. The nca files must sit at the root of the ZIP; an extra folder level makes the install fail
Citron Neo	Same yuzu-family flow as Eden (menu names may differ slightly)	Same
MeloNX (iPhone / iPad)	Imported during first-time setup	Installed during setup
nxnative (Mac packaging)	You provide your own prod.keys and game when packaging; the project ships no game files	—

Full walkthroughs: Windows setup, Android setup, Mac setup and iPhone / iPad setup.

Switch 2 decryption keys

As of November 3, 2026, Switch 2 emulation doesn't use prod.keys at all. The first public builds that run Switch 2 games are unofficial Eden forks such as eden-nx2 and Eglantine, released from October 29, 2026. They can't decrypt Switch 2 game cards or digital games on their own. Instead they load a game that was already decrypted on the console: the unpacked exefs/main executable plus its romfs/ folder, from a Switch 2 on firmware 23.0.1, the version the ns2jb exploit works on.

The Switch 1 keys and firmware described above play no part in this. They only matter for Switch 1 games, including the Switch 1 versions of games that also came out on Switch 2.
Eden itself has no Switch 2 support yet; its Switch 2 pull request was still a draft as of November 1. See Eden Switch 2 forks.
These builds are experimental: missing 3D models, black textures and heavy shader stutter are common. eden-nx2 asks for 16 GB of RAM and a Vulkan GPU with 8 GB of VRAM.

Current status and which games boot: Switch 2 emulator status.

Common misconceptions

"With keys, every game will run." Keys only handle decryption. Whether a game runs, and how well, depends on the emulator's compatibility and your hardware. See the best Switch emulators in 2026 and troubleshooting.
"Each emulator needs its own keys." It doesn't. prod.keys is the same file for yuzu-family and Ryujinx-family emulators; only the folder differs. On first launch, Eden even offers to import settings if you've used another Switch emulator.
"Always install the newest firmware." Not necessarily. Emulator support lags, and your keys have to be updated to match. See the version section above.
"Switch 2 keys let you emulate Switch 2." That's not how it works today. As of November 3, 2026, the unofficial Switch 2 builds don't read keys at all (see the Switch 2 section above), and they are still experimental.

Key packs and firmware bundles

"Key packs" and "firmware bundles" are a common way to spread malware, and keyword-stuffed GitHub repos posing as emulators sometimes ask you to run them as administrator. See How to spot fake emulator sites.

After a console system update

Keys and firmware are a pair. If you want to use a newer firmware in your emulator after updating your console, replace the keys with the matching newer set too, or you'll hit the errors above.

prod.keys, title.keys and Firmware Explained for Switch Emulators

Key points