iStorage datAshur BT FIPS 140-2 Bluetooth Encrypted USB Flash Drive

Every other encrypted USB drive on this page requires you to punch a PIN into a keypad. The iStorage datAshur BT takes a different approach: you unlock it from your phone. Open the datAshur BT app, authenticate with your password, Face ID, Touch ID, fingerprint, or iris scan — and the drive unlocks over Bluetooth before you plug it in. The host never sees an unencrypted device. Pull it out and it locks instantly. No keypad, no PIN to observe over your shoulder, no physical interaction with the drive at all.

The encryption itself is identical to the rest of the datAshur range: AES-XTS 256-bit, implemented entirely in hardware, always on. No data ever passes over Bluetooth — the wireless connection is used only for authentication. Once unlocked, the BT mounts as a standard USB 3.2 Gen 1 mass storage device at up to 170 MB/s read and 130 MB/s write. The FIPS 140-2 Level 3 design means the hardware-level security is independently validated — not just marketing. IP57 protection handles dust, dirt, and water immersion to 1 metre for 30 minutes.

Key Features

• Smartphone-activated — unlock via iOS or Android app, or Apple Watch
• Biometric authentication — Face ID, Touch ID, fingerprint, and iris scanning supported
• AES-XTS 256-bit full disk hardware encryption — always on, no software required
• FIPS 140-2 Level 3 certified design and technology
• No data transmitted over Bluetooth — wireless used for authentication only
• IP57 rated — dust-proof and water-resistant to 1m for 30 minutes
• USB 3.2 Gen 1 — 170 MB/s read, 130 MB/s write
• Built-in rechargeable battery for wireless authentication
• Remote Management Ready — central policy enforcement, remote lock and wipe
• Multi-factor authentication — app password plus device biometrics
• Works on any device with a USB port — no drivers, OS independent
• Available in 16GB, 32GB and 64GB
• Designed and developed in the UK | 3-year warranty

For organisations managing multiple drives, the datAshur BT supports an optional Remote Management Web Console. Administrators can enforce PIN and password policies centrally, monitor drive status across a fleet, remotely lock or wipe individual drives, and set geographic or time-based access restrictions — all without physical access to the drives. It is the only model in the datAshur range with this capability built in.

The app supports independent Admin and User accounts. The Admin can reset User passwords, configure auto-lock timers, enable read-only mode, set brute-force lockout thresholds, and assign one-time recovery passwords — without ever exposing the Admin credential. GDPR, HIPAA, SOX, and CCPA compliance requirements for hardware-encrypted portable media are fully satisfied. No cloud dependency, no subscription required for the core drive functionality.

What's in the Box

• iStorage datAshur BT Encrypted USB Flash Drive
• USB charging cable
• Quick start guide
• 3-year warranty

Product Q&A