The legality of possessing amiibo key files hinges on the Digital Millennium Copyright Act (DMCA) in the US and similar laws globally.
The reality: Distributing the keys is illegal. Owning them is rarely prosecuted. Creating dummy amiibo for games you own sits in a moral gray area. If you are selling pre-loaded "amiibo cards" on Etsy using these keys, you are violating Nintendo’s IP and can be sued.
Nintendo’s stance: They aggressively take down GitHub repos hosting key files. However, they have never sued an individual end-user for generating a backup of their own $15 figurine.
If you own physical amiibo figures and want to create your own digital backups:
| Hardware | Purpose | |----------|---------| | Android phone (with NFC) | Read/write NTAG215 tags | | PC + USB NFC Reader (e.g., ACR122U) | Dump and write amiibo data | | NTAG215 blank cards/stickers | Create physical “power tags” | | TagMo (Android app) | The standard tool for dumping/writing amiibo | | Emuiibo (PC/Switch) | Emulates amiibo on modded Switch |
Conclusion: While technically required for legitimate personal backups, possession and distribution of key files exist in a legal gray area, and Nintendo enforces its rights aggressively.
Amiibo key files are a fascinating artifact of modern gaming history. They represent the collision of consumer hardware, industrial cryptography, and homebrew ingenuity. For the average player, they are a way to keep a collection safe from loss or wear. For the pirate, they are a tool for theft. For the technician, they are a beautiful piece of reverse-engineered math.
If you choose to use amiibo key files, follow the golden rule: Do not download what you do not own physically. Do not sell what you make digitally. And always, always keep a backup of your plastic soldiers.
The key file doesn’t unlock the game. It unlocks your freedom to manage your collection—use that power wisely.
Disclaimer: This article is for educational purposes. Downloading copyrighted amiibo dumps is illegal. Modifying your console may violate Nintendo’s Terms of Service. Always check your local laws regarding format shifting and cryptographic circumvention.
Amiibo key files, often combined as key_retail.bin, contain cryptographic signatures and encryption keys essential for interpreting and modifying the encrypted data stored on NTAG215 NFC chips. These files allow software to decrypt, modify, and re-encrypt tag data, enabling the creation of functional backups or custom modifications for Nintendo consoles.
The Nintendo Switch saves game data to the amiibo (e.g., your horse in Breath of the Wild or your fighter data in Smash Bros.). If you lose the physical figure, that data is gone forever. With the key files, you can decrypt a backup of your amiibo, save it to your PC, and restore it to a new NFC tag later.
Assuming you have legally dumped your keys (or acquired a verified hash-matched set), here is how the most popular tool, TagMo, uses them.
Step 1: Prepare your Android device. Install TagMo (v2.9 or later) from GitHub. Do not use shady "modded" versions.
Step 2: Locate the Key Files.
In your device’s internal storage, create a folder:
/storage/emulated/0/tagmo/
Step 3: Drop the files into the folder. You need two specific files (though TagMo can combine them):
Alternatively, a single key_retail.bin often suffices.
Step 4: Import into TagMo.
Open TagMo → Menu (three dots) → Load Keys → Select the files. The app will verify the checksum. If it says "Keys Valid," you are ready. You can now write any amiibo .bin file to a blank NTAG215 sticker.
For PC Users (amiitool): Open CMD/Terminal and type:
amiitool -k key_retail.bin -d encrypted_amiibo.bin -o decrypted_amiibo.bin
Without the -k flag, the command fails instantly.
Extremely unlikely. Your Switch only communicates with the NFC tag itself. It cannot tell the difference between a genuine plastic Mario and a sticker written via TagMo, provided the dump came from a real tag. The key file ensures the encryption matches exactly. The only way to get banned is to go online with corrupted save data (e.g., an impossible number of Breath of the Wild arrows). The key file doesn't create that; user error does.
True, with nuance. If you upload your console-specific dump to a public server, Nintendo can blacklist that UID. However, the "retail keys" circulating online are identical across all consoles. Nintendo cannot ban a key; they can only ban the misuse of online services with spoofed tags.