diff --git a/README.md b/README.md
index fd172e4..d9527ef 100644
--- a/README.md
+++ b/README.md
@@ -44,3 +44,19 @@ If you can not pass strong integrity, you can try to enable build vars spoofing
 by creating a file in `/data/adb/modules/tricky_store/spoof_build_vars`.
 
 Zygisk (or Zygisk Next) is needed for this feature to work.
+
+## Leaf hack or fully generate
+
+For target packages, TrickyStore will hack leaf certificate by default.
+On TEE broken devices, this will not work. You can add a `!` after package name to enable fully
+generate mode.
+
+For example:
+
+```
+# target.txt
+# leaf hack for KeyAttestation App
+io.github.vvb2060.keyattestation
+# fully generate for gms
+com.google.android.gms!
+```