Ads keep us online. Without them, we wouldn't exist. We don't have paywalls or sell mods - we never will. But every month we have large bills and running ads is our only way to cover them. Please consider unblocking us. Thank you from GameBanana <3

How To Obtain All Keys and Title Keys with HACGUI

A Tutorial for The Legend of Zelda: Breath of the Wild (Switch)

Members see zero ads. Membership is 100% free


Updated Missing Steps 12mo
  • - Updated to include missing steps from the HACGUI instructions.
Hello everyone, seeing as how there's a new method to derive keys and title keys, I thought I'd write a short, easy guide detailing the steps to derive all of your hard earned keys with Memloader and HACGUI.

This guide will expect you to have already learned how to boot into RCM  mode, however, if you haven't you can reference this guide for steps on how to accomplish this.

You will need:
  1. Memloader. Chose the latest release. Unpack the .zip and place the contents of the sample folder on the root of your SD card.
  2. HACGUI. Chose the latest release.
  3. Hekate. Chose the latest release dependent on your firmware. 
  4. The payload delivery system you most prefer, be it GUI or CLI.

Dumping Keys:

Boot your Switch into the Hekate menu, go into the Console options, and print your fuse and TSEC keys. Afterwards, go into the Tools option and backup just the eMMC BOOT0/1

Restart your Switch into RCM, connect it to your computer and use the Memloader payload. Select ums_sd.ini on your Switch and your screen should go blank while the backlight remains. Boot HACGUI in Administrator mode (Administrator mode is Critical), click Start, give a name for your console (not required) and when the program detects your Switch's SD card as mounted, the Next button will become clickable. After clicking, Deriving Keys... should display for a few moments before asking for a rawnand.bin dump, which we will not be using.  

Power off your Switch, boot it again in RCM and use Memloader once more, however select ums_emmc.ini. Once again, the screen will go blank, the backlight will remain, and this time HACGUI will automatically detect your Switch's eMMC GPP and after a few moments all of your Keys and Title Keys will be derived. HACGUI will automatically create the folder .switch in your ~/Home/ , or C:\Users\USERNAME directory and populate this folder with your prod.keys, title.keys, and two bonus sets: console.keys, and extra.keys. 

And that's the process to derive all of your keys. If you acquire a new title, then this process will need to be completed again to dump the new keys.

Thank you, I hope this guide was informative enough. 


Sign up to access this!
  • SIMOMEGA avatar
    SIMOMEGA Joined 10mo ago
    access_time 10mo
    Whenever I try to print the TSEC keys it just says:
    "Unknown package1 version for reading
    TSEC firmware <= '20181107105733'>.
    URL to post:
  • leeanderthal avatar
    leeanderthal Joined 3y ago
    BotW Manager
    5,810 points Ranked 1119th
    16 medals 4 rare
    • Became a Game Pioneer Medal icon
    • Achieved Game Manager clearance Medal icon
    • Submitted 50 Skins Medal icon
    • 10 submissions featured Medal icon
    • One month a member Medal icon
    • 6 months a member Medal icon
    access_time 12mo
    u can derive my keys any day of the week
    • Agree x 1
    • wtf x 2
    URL to post:


Share banner
Image URL
HTML embed code
BB embed code
Markdown embed code


Key Authors
Memloader creator
HACGUI creator


Eloeri avatar
Eloeri Joined 2y ago
1,507 points Ranked 21777th
11 medals 1 rare
  • Returned 1000 times Medal icon
  • One month a member Medal icon
  • 6 months a member Medal icon
  • Returned 100 times Medal icon
  • 1 year a member Medal icon
  • Reached 1,000 Points Medal icon
  • Paypal Donate
Sign up to access this!
Sign up to access this!
Sign up to access this!


Sign up to access this!



Difficulty Level


Key Derivation


  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • favorite 0
  • remove_red_eye 44.8k
  • mode_comment 4
  • access_time 12mo
  • access_time 12mo
  • refresh 12mo

More Other/Misc Tutorials