Validated to FIPS 140-3 Level 3 with XTS-AES 256-bit Hardware Encryption
Kingston® IronKey™ Keypad 200 series are OS-independent, hardware-encrypted USB drives with both USB-A and -C®* connectors and an alphanumeric keypad for PIN access. KP200 series is FIPS 140-3 Level 3 validated for military-grade security and features XTS-AES 256-bit hardware-based encryption. The circuits are covered with a special layer of epoxy, making it virtually impossible to remove components without damage. This epoxy prevents attacks on the semiconductor components.

The KP200 features XTS-AES 256-bit hardware encryption. It is also FIPS 140-3 Level 3 (pending) certified for military-grade security and features enhancements that raise the bar for data protection. The circuits are covered with a special layer of epoxy, making it virtually impossible to remove the components without damaging them; this resilient epoxy prevents attacks on the semiconductor components. The USB drive is designed to warn the owner of tampering. It also offers protection against brute-force password attacks and BadUSB protection with digitally signed firmware. The alphanumeric keypad is covered with a polymer layer that protects the keys and hides the use of the keys by analysing fingerprints on the keys.

The KP200 has a built-in rechargeable battery that allows the drive to be unlocked without software and then connected to any device that supports USB-A mass storage. This offers users maximum flexibility for various platform types and operating systems.
With the Multi-PIN option (Admin/User), an easy-to-remember but difficult-to-guess alphanumeric PIN can be set up for Admin or User via the keypad. The administrator can restore a user PIN and allow access to the drive if the user PIN has been forgotten or if the drive has been locked after reaching the maximum number of 10 user login attempts. If both the Admin and User PINs are enabled, the KP200 locks the User PIN after 10 failed login attempts. If the Admin PIN is entered incorrectly 10 times in a row, the brute-force attack protection cryptographically erases the drive, destroying the data forever and resetting it.

The drive also offers two levels of write-protection modes – a global mode that can be set by the administrator, and a session-only mode that can be set by the user. Read-only modes can protect the drive from malware on untrusted systems. In addition, the administrator can load content and set the global read-only mode, so that the user can access the data but cannot make any changes.

The KP200 drives with 512GB and the KP200C drives with capacities from 64GB to 512GB offer fast dual-channel performance.

FIPS 140-3 Level 3 Validation, Certificate #5133
The KP200 now meets the FIPS 140-3 Level 3 security specifications for military purposes published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further improves the security features and tamper protection of the USB drive. It includes XTS-AES 256-bit encryption as well as protection against brute-force and [BadUSB] attacks with digitally signed firmware. The circuits are covered with a special layer of epoxy, which makes it virtually impossible to remove the components without damaging them. This resilient epoxy prevents attacks on the semiconductor components.

OS and device independent
Since the KP200 is equipped with a rechargeable battery, the keypad can be used to unlock the USB drive without any software. It can then be connected to any system that supports USB-A or USB-C mass storage devices. This offers users maximum flexibility for various platform types and operating systems.

Multi-PIN option
Users have the option to set up a user or an admin/user mode. Admin can be used to restore a user PIN and allow access to the USB drive if the user PIN has been forgotten or if the USB drive has been locked after reaching the maximum number of 10 user login attempts.

Global and session-based read-only modes (write protection)
Both the administrator and the user can set a session-based read-only mode to protect the USB drive from malware on untrusted systems. The administrator can also set a global write-protection mode that puts the USB drive into read-only mode until it is reset.