A lost USB stick is a data breach the moment someone plugs it in, and most “secure” drives only defend against that on a Windows or Mac host. The best encrypted USB drive for a mixed fleet takes its PIN on a keypad built into the drive, so the key never touches the computer and there’s no vendor app to install. The same PIN then opens it on Linux, a locked-down server or a kiosk exactly the way it does on a laptop.
The category changed in September 2026. NIST stopped accepting FIPS 140-2 certificates for new systems, so several drives still sold as “FIPS validated” now carry an old certificate. This guide ranks keypad drives by active FIPS 140-3 Level 3 certificates and names the models that fell off. Every certificate and price was checked against NIST’s CMVP database and Amazon in October 2026; we did not run these drives on a bench, so the Linux behaviour is the vendors’ documented claim.
Best encrypted USB drives at a glance
Three drives hold an active FIPS 140-3 Level 3 certificate, unlock with no host software and list Linux among supported systems. A fourth is still widely sold but now carries a Historical FIPS 140-2 certificate, which matters only if you answer to a procurement rule:
- Best overall: Kingston IronKey Keypad 200, certificate #5133, sold by Amazon itself at about $130 for 32GB.
- Best for USB-C laptops: iStorage datAshur PRO+C, certificate #4918, the fastest rated of the three at up to 300 MB/s.
- Best for large data sets: Apricorn Aegis Secure Key 3.0, certificate #5517 from September 2026, the only one sold up to 4TB.
- Best for shared team drives: Apricorn Aegis Secure Key 3NX, with up to four user PINs, on a certificate that is now Historical.
If you need one drive today and do not know which rules apply to you, buy the Keypad 200. Of the drives listed on Amazon, it is the cheapest with a current certificate, Amazon ships it directly rather than a marketplace seller, and its battery lets you unlock it before it ever touches the port.
| Drive | CMVP certificate | Status | Capacities | Wrong PINs before wipe | Rating | Approx. 32GB price |
|---|---|---|---|---|---|---|
| Kingston IronKey Keypad 200 | #5133, FIPS 140-3 L3 | Active to 2029 | 16GB to 512GB, USB-A or USB-C | 10 admin attempts | IP68 | about $130 |
| iStorage datAshur PRO+C / PRO+A | #4918, FIPS 140-3 L3 | Active to 2029 | 32GB to 512GB | 10 admin attempts | IP68 | about $170 |
| Apricorn Aegis Secure Key 3.0 | #5517, FIPS 140-3 L3 | Active to 2031 | 16GB to 4TB | 4 to 20, admin sets it | IP68 | not on Amazon US |
| Apricorn Aegis Secure Key 3NX | #4420, FIPS 140-2 L3 | Historical | 4GB to 512GB | 4 to 20, admin sets it | IP67 | about $150 |
Read the status column before the price column. An Active certificate means a US federal buyer can still put the drive into a new system; Historical means existing deployments may keep it, new ones should not. Outside government and its contractors, the 3NX is still a solid drive, and its AES-XTS encryption did not get weaker on 21 September. What changed is the paperwork your auditor asks for.
How the drives were checked
We had none of these drives on hand, so no claim below comes from plugging one into a Linux box. What we did instead is the part most “best encrypted USB” lists skip. Each certificate number was looked up on its NIST CMVP page for the module name, standard, level, status and sunset date. Specs come from the vendor’s product page or datasheet, and prices and stock from Amazon’s catalog API on October 28, 2026, so expect them to drift.
A drive had to meet three conditions to make the list:
- The PIN is entered on the drive itself, because anything that needs a host app fails the any-OS test.
- The FIPS claim matches a certificate on NIST’s site, not the retailer’s title.
- The vendor lists Linux, or any USB mass storage host, among supported systems.
The certificate rule removed more drives than the others. One third-party Amazon listing calls the Apricorn 3NXC “FIPS 140-3 Level 3 Validated”. Apricorn and NIST both say certificate #4420, which is FIPS 140-2 and now Historical.
FIPS 140-2 certificates after September 2026
NIST’s Cryptographic Module Validation Program set September 21, 2026 as the last day FIPS 140-2 modules could be used in new systems. After that the certificates moved to the Historical list, and the individual certificate pages now say the modules “should not be included by Federal Agencies in new procurements”. Agencies may keep using them in systems that already have them.
For a buyer that splits the market in two. Drives validated under FIPS 140-3 (Kingston, iStorage’s datAshur PRO family, Apricorn’s new Secure Key 3.0, DataLocker’s Sentry K350) can go into new federal and contractor deployments. Long-running models such as the Apricorn 3NX, the iStorage datAshur PRO2 and the Apricorn Fortress L3 SSD cannot, even though their product pages still lead with “FIPS 140-2 Level 3”. If a contract or a policy names FIPS 140-3, check the certificate number on csrc.nist.gov before you order, because retail listings lag behind the database by months.
Kingston IronKey Keypad 200: best overall
The Keypad 200 is the drive to hand someone who will carry it in a pocket and plug it into whatever machine is in front of them. Kingston validated it under FIPS 140-3 Level 3 certificate #5133 in January 2026, and it is the only pick here sold and shipped by Amazon:
Its built-in rechargeable battery is the feature that matters most for the any-OS promise. You type the PIN on the drive before you insert it, so the host only ever sees an unlocked USB mass storage device. Kingston lists Windows, macOS, Linux, ChromeOS and Android, and adds “any system that supports a USB mass storage device”, which covers a headless server or a medical cart with no app store.
- Ten wrong User PINs lock the User PIN; ten wrong Admin PINs crypto-erase the drive.
- Read-only works globally (set by the admin) or per session (set by the user).
- The circuitry sits under epoxy, and the firmware is signed against BadUSB attacks.
- The 32GB model is rated at 145 MB/s read and 115 MB/s write; 64GB and larger USB-C models reach 280 and 200.
Skip it if you copy large VM images to it often. The USB-A models up to 256GB are rated at 145 MB/s read, so a 100GB copy is a long wait, and the faster 280 MB/s rating starts at 64GB on USB-C or 512GB on USB-A. Kingston also does not document an inactivity auto-lock in the datasheet, so pull the drive when you walk away. Expect about $130 for 32GB in either connector (the USB-C 32GB is here) and about $165 for 64GB on USB-A; check the live price, because Kingston’s encrypted line moves with flash costs.
iStorage datAshur PRO+C: best for USB-C laptops
The datAshur PRO+C is the drive for a team that has already gone USB-C, and it covers older ports too, with a USB-C to A adapter in the box. Its certificate #4918 is listed under the module name “datAshur PRO” and names both the PRO+C and PRO+A part numbers, so check for that name when an auditor asks:
iStorage rates it at up to 300 MB/s read and 280 MB/s write, the best on this list, and takes an 8 to 15 digit PIN. Its brute-force handling is gentler on the user than Kingston’s. Ten wrong user PINs delete only the user PIN and leave the data for the admin to recover, while ten wrong admin PINs wipe the PIN, the key and the data together.
The auto-lock timer is the control to set on day one. The drive locks when it is unplugged, and you can also program it to lock after a period of inactivity. That closes a real gap. An unlocked stick left in a server rack overnight is readable by anyone who walks past. iStorage’s support list includes Linux, thin and zero clients, Citrix and VMware, so it fits VDI rooms where you can’t install a vendor app on the endpoint.
Look elsewhere if you need it tomorrow from Amazon. The PRO+C 32GB is sold by iStorage’s own storefront at about $170 and showed only two units left on October 28. The USB-A twin, the datAshur PRO+A, was in stock at a similar price and sits on the same certificate.
Apricorn Aegis Secure Key 3.0: best for large data sets
Apricorn’s Secure Key 3.0 is the first Apricorn product validated under FIPS 140-3, and the only keypad stick here sold in 1TB, 2TB and 4TB sizes. NIST issued certificate #5517 on September 9, 2026, with a sunset date in 2031, the longest runway of any drive here:
Apricorn rates it at 220 MB/s read and 210 MB/s write over USB 3.2, with an IP68 rating and a three-year warranty. The admin decides how many wrong PINs (4 to 20) trigger a crypto-erase, and recovery PINs let a helpdesk get a locked-out user back in without wiping. NIST’s listing describes 8 to 16 digit PINs, one admin and one user, auto-lock and read-only modes.
Read the certificate’s caveat before you deploy it in a regulated setting: the validation applies “when utilizing a Trusted Channel as specified in the Security Policy”. That points to the drive’s own security policy document, so pull it from the NIST page and follow its setup rules rather than assuming the factory state is the validated one.
It’s the wrong pick if you only buy through Amazon. The new model had no Amazon US listing when we searched, and the only Apricorn Secure Key that came up was an older FIPS 140-2 model. Buy it from Apricorn’s own store or an authorised reseller, and confirm the quote names the Secure Key 3.0, not an older Secure Key model.
Apricorn Aegis Secure Key 3NX: best for shared team drives
The 3NX earns its place on features, not on its certificate. It supports an admin PIN plus up to four user PINs, so a small security team can share one evidence drive without sharing one secret, and removing a person means deleting their PIN rather than re-keying everyone:
The rest of its spec sheet is close to the Secure Key 3.0. It takes a 7 to 16 digit PIN, the admin sets the brute-force threshold between 4 and 20 attempts, and it has recovery PINs, read-only modes and Linux on the supported list. It is rated at 171 MB/s read and 160 MB/s write, and IP67 rather than IP68.
Skip it if anyone in your chain of approval says “FIPS 140-3”. Certificate #4420 moved to the Historical list with the rest of FIPS 140-2, and the Amazon listings are third-party sellers at about $150 for 32GB. The USB-C 3NXC sits on the same certificate, whatever its Amazon title claims.
Encrypted drives that fail the any-OS test
Most encrypted USB drives on Amazon fail one of the two rules, and the product titles rarely say which. The table below lists what each one protects and where it lets you down:
| Drive | How it unlocks | What it stops | What it lets through |
|---|---|---|---|
| Kingston IronKey Vault Privacy 50, Locker+ 50 G2 | Password typed into an app on the host | A finder reading a lost drive | Kingston’s chart lists Windows and macOS only and leaves Linux blank; FIPS 197 only |
| Kingston IronKey Vault Privacy 80 External SSD | Touchscreen on the drive | Lost-drive reads on any OS, Linux included | FIPS 197 only, no FIPS 140-3 certificate |
| iStorage diskAshur3 | Keypad on the drive | Lost-drive reads on any OS | Marketed as “FIPS ready”; the diskAshur PRO3 and DT3 modules were still in NIST’s queue on October 28 |
| Apricorn Fortress L3, iStorage datAshur PRO2 | Keypad on the drive | Lost-drive reads on any OS | Certificates #4529 and #3793 are FIPS 140-2 and Historical |
| DataLocker Sentry K350 | Keypad with OLED screen | Lost-drive reads; FIPS 140-3 L3 certificate #5092 is Active | About $274 for 64GB from a third-party seller |
“FIPS 197” on a listing only means the AES implementation was tested. It says nothing about the drive as a whole: how keys are stored, whether the case shows tampering, or how the PIN is checked. That is what a FIPS 140-3 module validation covers. The Vault Privacy 80 is still a good large drive for a Linux user who wants a touchscreen and 1.92TB, as long as nobody needs a 140-3 certificate. The K350 is a fine drive too, with an active certificate and an OLED screen; it simply costs about $110 more than a 64GB Keypad 200 and came only from a marketplace seller when we checked.
What Linux sees after the PIN
Once a keypad drive is unlocked, every vendor here describes it the same way: a plain USB mass storage device. On Linux that means the kernel’s own USB storage drivers handle it, there is no package to install, and the drive mounts like any stick. The encryption happens inside the drive, so the host never holds the key and has nothing to leak if it is compromised later.
That design is why these drives work on hosts where software encryption doesn’t. You cannot install a vendor app on an immutable distro image, an air-gapped jump host or a vendor appliance, and you shouldn’t have to. The same property makes the read-only mode useful for incident response, because you can carry tools onto a suspect machine without that machine being able to write back to the drive.
Choose the filesystem by who reads the drive, not by habit. These are the choices that hold up:
- Drives used only on Linux get ext4, so permissions and ownership survive the trip.
- Drives shared with Windows and macOS get exFAT, which every current OS reads and writes.
- Drives that must stay unreadable even if the PIN leaks get a LUKS volume inside the hardware encryption, unlocked with a separate passphrase.
The LUKS layer is a second lock with a different owner. The keypad protects against a lost drive; LUKS protects against someone who watched you type the PIN. If you already use LUKS on laptops, the setup is the same one covered in our Arch Linux LUKS install, minus the boot loader. Skip it on a drive that has to open on Windows too, because Windows has no native LUKS support.
The threats a keypad drive does not stop
Hardware encryption protects data at rest on a drive that is locked. Once you type the PIN, the drive trusts the host completely, and every risk on that host becomes a risk to the drive’s contents. A keylogger on the host cannot capture the PIN, which is the real advantage over software drives, though a camera or someone behind you still can. Malware on an unlocked session can copy every file in seconds.
Physical wear is the other leak. On a drive used daily with the same PIN, the keys you press can wear faster than the others. That can narrow the guessing space for whoever finds it. Longer PINs help, and so does the brute-force wipe. The threshold matters more than the encryption mode printed on the box. For identity rather than storage, a YubiKey or FIDO2 key for SSH solves a different problem and pairs well with a keypad drive in the same kit. If you’re building a lab to practise incident response, the cybersecurity home lab builds cover the hosts these drives plug into. The encryption books list explains XTS-AES and key handling in more depth than a buyer guide can.
A keypad drive is also an expensive way to carry ISO files. At about $130 for 32GB it costs many times what a plain stick does per gigabyte, and an installer image holds nothing secret. Keep a plain, fast stick for that job; our guide to USB drives for Ventoy and Linux installers ranks those by write speed.
Checks before a keypad drive carries real data
Do these in order on the day the drive arrives, before anything sensitive goes on it. Each one is a condition you can confirm in a minute:
- The certificate number printed on the box or datasheet opens an Active FIPS 140-3 page on csrc.nist.gov, with the same module name.
- The admin PIN is set, written down offline and different from every user PIN.
- The brute-force threshold is set to a number you chose, not left at the factory value.
- On models that support an inactivity timeout, the drive locks on its own once that timeout passes, tested by leaving it plugged in.
- The drive opens on a Linux host and on every other OS your team uses, with no software installed.
- Read-only mode refuses a write when enabled, checked with a test file before you rely on it.
- A copy of everything on the drive lives somewhere else, because a crypto-erase after ten wrong guesses is final.
The last check is the one people skip. A keypad drive that wipes itself is doing its job, and the only defence against that job is a backup you made before the drive left your desk.
