iStorage datAshur PRO2 FIPS 140-2 Level 3 Encrypted USB Flash Drive - Black

Most encrypted USB drives ask you to trust a software layer that sits between your data and the operating system. The iStorage datAshur PRO2 does not work that way. Every byte stored on this drive is encrypted in hardware, in real time, using AES-XTS 256-bit full disk encryption — with no drivers, no software, and no host system involvement whatsoever. Unlock it with your PIN before you plug it in. If the drive is lost or stolen, whoever finds it has an aluminium sleeve and nothing else. The encryption key never leaves the device and is never exposed to the host computer.

What sets the PRO2 apart from every other encrypted flash drive on the market is its Common Criteria EAL5+ certified secure microprocessor. This is not a standard USB controller with encryption bolted on — it is a dedicated security chip of the same class used in banking smartcards and government credentials. The microprocessor delivers true random number generation, FIPS-validated key wrapping, and active hardware defences against side-channel attacks (SPA, DPA, SEMA, DEMA), physical probing, voltage and frequency manipulation, and temperature attacks. Paired with FIPS 140-2 Level 3 certification for the full device, this is the most rigorously certified USB flash drive available in its class.

Key Features

• FIPS 140-2 Level 3 certified — full device, not just the controller
• Common Criteria EAL5+ certified secure microprocessor — same class as banking smartcards
• AES-XTS 256-bit full disk hardware encryption — always on, no software required
• PIN authenticated — 7 to 15 digit PIN, independent User and Admin PINs
• IP68 rated — dust-proof and waterproof to 1.5m for 30 minutes
• Tamper-proof and tamper-evident design — epoxy-sealed internals
• Self-destruct PIN — instantly and permanently wipes all data
• USB 3.2 Gen 1 — 168 MB/s read, 128 MB/s write
• Immune to BadUSB attacks — digitally-signed flash lock mechanism
• Read-only (write protect) mode — configurable by Admin or User
• Works on any device with a USB port — no drivers, OS independent
• Available in 4GB, 8GB, 16GB, 32GB, 64GB, 128GB, 256GB, and 512GB
• Designed and developed in the UK | 3-year warranty

The anodised aluminium housing is not decorative — it is structural. The sleeve protects the drive from physical damage and the IP68 rating means immersion in 1.5 metres of water for 30 minutes leaves it functional. The epoxy-sealed internals are virtually impossible to access without destroying the components, and the tamper-evident design makes any attempt at physical intrusion immediately visible. For organisations deploying multiple drives, the PRO2 supports Admin and User PIN separation, one-time recovery codes, configurable brute force lockout (1 to 10 attempts), and unique VID/PID serial numbers for endpoint whitelist management.

GDPR, HIPAA, SOX, CCPA, DORA — the datAshur PRO2 satisfies the hardware encryption requirements of all of them. It does so without any dependency on cloud services, management consoles, or subscription licences. The security is entirely self-contained.

What's in the Box

• iStorage datAshur PRO2 Encrypted USB Flash Drive
• Aluminium protective sleeve
• Quick start guide
• 3-year warranty

Product Q&A