diff --git a/README.md b/README.md
index 806fb6f..d181bb1 100644
--- a/README.md
+++ b/README.md
@@ -41,22 +41,22 @@ format:
 ## Build Vars Spoofing
 
 If you can not pass strong integrity, you can try to enable build vars spoofing
-by creating a file in `/data/adb/tricky_store/spoof_build_vars`.
+by creating a file `/data/adb/tricky_store/spoof_build_vars`.
 
 Zygisk (or Zygisk Next) is needed for this feature to work.
 
-## Leaf hack or fully generate
+## Support TEE broken devices
 
-For target packages, TrickyStore will hack leaf certificate by default.
-On TEE broken devices, this will not work. You can add a `!` after package name to enable fully
-generate mode.
+TrickyStore will hack leaf certificate by default.
+On TEE broken devices, this will not work because we can't retrieve leaf certificate from TEE.
+You can add a `!` after package name to enable certificate generate support for this package.
 
 For example:
 
 ```
 # target.txt
-# leaf hack for KeyAttestation App
+# use leaf certificate hacking mode for KeyAttestation App
 io.github.vvb2060.keyattestation
-# fully generate for gms
+# use certificate generating mode for gms
 com.google.android.gms!
 ```