Kingston Technology IronKey 64GB USB-C Vault Privacy 50C AES-256 Encrypted, FIPS 197

Kingston IronKey™ Vault Privacy 50 series are premium USB Type-A and USB Type-C®* drives that provide enterprise-grade security with FIPS 197 certified AES 256-bit hardware-encryption in XTS mode, including safeguards against BadUSB with digitally-signed firmware and against brute force password attacks. VP50 has been penetration tested***** (pen tested) for enterprise-grade security. Because it provides encrypted storage under the user’s physical control, the VP50 series is superior to using the internet and Cloud services to safeguard data.

Vault Privacy 50 supports multi-password options (Admin, User and One-Time Recovery) with Complex or Passphrase modes. This enhances the ability to recover access to the data if one of the passwords is forgotten. Traditional Complex mode allows for passwords from 6-16 characters using 3 out of 4 character sets. The new Passphrase mode allows for a numeric PIN, sentence, list of words or even lyrics from 10 to 64 characters long. Admin can enable a User and a One-Time Recovery password, or reset the User password to restore data access. To aid in password entry, the “eye” symbol can be enabled to reveal the typed-in password, reducing typos that lead to failed login attempts. Brute force attack protection locks out User or One-Time Recovery passwords if 10 invalid passwords are entered in a row, and crypto-erases the drive if the Admin password is entered incorrectly 10 times in a row.

To protect against potential malware on untrusted systems, both Admin and User can set Read-Only mode to write-protect the drive; additionally, the built-in virtual keyboard shields passwords from keyloggers or screenloggers.

Organisations can customise and configure VP50 series drives with a product ID (PID) for integration with standard endpoint management software to meet corporate IT and cybersecurity requirement through Kingston’s Customisation Programme.

Small and medium businesses can use the Admin role to manage their drives locally, e.g. use admin to configure or reset employee User or One-Time Recovery Passwords, recover data access on locked drives and comply with laws and regulations when forensics are required.

Vault Privacy 50 offers fast dual-channel performance on all capacities. The drive is waterproof with IPX8 rating****, TAA compliant and assembled in the USA.

Hardware-encrypted USB drive for data protection
Safeguard important data with FIPS 197 certified XTS-AES 256-bit encryption. Built-in protections against BadUSB, brute force attacks and pen tested for enterprise-grade security.

Multi-password option for data recovery
Enable Admin, User and One-Time Recovery passwords. Admin can reset a User password and create a One-Time Recovery password to restore User’s access to data. Brute force attack protection locks out User or One-Time Recovery passwords if 10 invalid passwords are entered in a row, and crypto-erases the drive if the Admin password is entered incorrectly 10 times in a row.

New Passphrase mode
Select between Complex or Passphrase password mode. Passphrases can be a numeric PIN, sentence with space characters, list of words or even lyrics – from 10 to 64 characters long.

Dual read-only (write-protect) settings
Avoid malware attacks with a forced Read-Only mode set by Admin for User, or a session-based Read-Only mode set by Admin or User.

Locally manage drives for small and medium businesses
Use Admin role to locally manage employee User and One-Time Recovery passwords, recover data access on locked drives, and comply with laws and regulations when forensics are required.

Additional security features
Reduce failed login attempts and frustration by enabling “eye” button to view the password typed. Use virtual keyboard to shield password entry from keyloggers and screenloggers.

How to use

Connect the Kingston IronKey Vault Privacy 50C to a USB-C port and follow the built-in on-screen prompts to set Admin and User passwords or a One-Time Recovery password. Choose Complex or Passphrase mode during initial setup. Admins can configure forced or session-based Read-Only mode and use the Admin role to reset User passwords or create One-Time Recovery credentials to restore access. Use the virtual keyboard for password entry on untrusted systems to reduce the risk of keylogging.

Recommendations

Set an Admin password and store it separately from the drive. Enable One-Time Recovery if you require a recoverable mechanism for user access. Use Passphrase mode for longer, memorable credentials when permitted. Enable Read-Only mode when connecting the drive to untrusted computers and use the virtual keyboard for password entry to mitigate keyloggers.