IronKey Vault Privacy 50 series

FIPS 197 certified USB flash drive with 256-bit XTS-AES encryption for data protection

The Kingston IronKey Vault Privacy 50 series is a premium FIPS 197-certified USB flash drive that offers business-grade security with 256-bit AES hardware encryption in XTS mode, including protection against BadUSB attacks through digitally signed firmware and against password brute force attacks. The VP50 series products are also TAA (Trade Agreements Act) compliant. Because it is encrypted storage that is directly controlled by the user, the VP50 series is a better solution for data security than using the internet and cloud services.

The Vault Privacy 50 supports the option of multiple passwords (administrator, user and one-time recovery) in compound password or passphrase mode. This increases the chances of regaining access to data if one of the passwords is forgotten. The traditional compound password mode allows a password of 616 characters to be entered using 3 of the 4 character types. The new password expression mode allows the user to enter a PIN number, a sentence, a list of words or even song lyrics between 10 and 64 characters in length. The administrator can activate a user and one-time recovery password or reset the user password to restore access. To make entering a password easier, the eye symbol can be activated so that the password becomes visible, reducing the risk of typos resulting in failed login attempts. When ten incorrect passwords are entered in a row, the brute force protection feature locks out user or one-time recovery passwords, and performs a cryptographic disk wipe if an incorrect administrator password is entered ten times in a row.

To protect against malware infection when running on untrusted systems, the administrator and user can set a read-only mode to write-protect the drive, and a built-in virtual keyboard protects passwords from keylogger or screenlogger software.

The memory is FIPS 197 certified and TAA (Trade Agreements Act) compliant, and organisations can take advantage of Kingston's personalisation programme to personalise and configure the VP50 series memory, using a product identifier (PID) to integrate with standard endpoint management software to meet corporate IT and cyber security requirements.

Small and medium-sized businesses can use the administrator role to manage drives locally, such as configuring or resetting user passwords or one-time recovery passwords for employees, regaining access to data on locked drives, and complying with laws and regulations in the event of an investigation.