DataLocker Sentry ONE FIPS 140-2 Level 3 Encrypted USB Flash Drive

USB flash drives are the one piece of kit that leaves the building and stays out of sight — in a pocket, a bag, handed off to a colleague, or simply forgotten in a jacket. Whatever is on them goes with them. The DataLocker Sentry ONE is the answer to that risk. FIPS 140-2 Level 3 certified hardware encryption means the data on this drive is protected by the same standard used in military and government deployments — and there are no software installs, no drivers, and no configuration required. Plug it in, enter the password, and you are working. The encryption is always on, and it runs entirely in hardware so there is no performance penalty and no way to bypass it.

The credentials that matter are baked in. FIPS 140-2 Level 3 certification covers the entire device — not just the controller — with AES 256-bit XTS mode encryption and hardened internals designed to resist physical tampering. CSPN certification from ANSSI (France) and BSI/BSZ recognition in Germany make the Sentry ONE one of the most comprehensively certified USB flash drives available anywhere. TAA compliance rounds it out for US government procurement requirements, and it satisfies HIPAA, CMMC, and GDPR obligations out of the box.

Key Features

• FIPS 140-2 Level 3 certified — entire device certified, not just the controller
• CSPN certified (ANSSI France) | BSI/BSZ recognised (Germany)
• AES 256-bit XTS mode hardware encryption — always on, no drivers required
• TAA compliant | Made in USA
• Waterproof to IPX8 — up to 4 feet (1.2m) water immersion
• Tamper-evident seal for physical security assurance
• USB 3.2 Gen 1 (USB-A) — backward compatible with USB 2.0 and 1.1
• Up to 250 MB/s read | Up to 85 MB/s write (32GB–128GB)
• Brute force password protection — configurable auto-wipe after failed attempts
• Optionally manageable with SafeConsole for fleet deployment and remote wipe
• Available in 8GB, 16GB, 32GB, 64GB, and 128GB
• Compatible with Windows, macOS, and Linux | 5-year limited warranty

The physical build is uncompromising. A tamper-evident seal gives you visible proof of any physical interference attempt, and the waterproof rating to IPX8 means the drive survives submersion — it does not just survive a splash. There are no moving parts and no exposed contacts to worry about. It is the kind of drive you can throw in a bag, forget about for a month, and still trust completely when you pull it out again.

For organisations managing multiple devices, the Sentry ONE has an optional SafeConsole-ready variant (Managed edition) that adds remote wipe, password reset, policy enforcement, audit logging, and on-board anti-malware scanning. The standard edition works as a fully standalone device — no management platform needed — making it the right choice for individuals and small teams who want enterprise-grade encryption without enterprise-grade complexity.

What's in the Box

• DataLocker Sentry ONE Encrypted USB Flash Drive
• Quick start guide

Product Q&A

Q: Does the Sentry ONE require any software to be installed?

A: No. The Sentry ONE is completely self-contained — the authentication interface runs directly on the drive and all encryption is handled in hardware. There are no drivers to install and no software required on the host computer. Plug it in, enter your password, and it mounts as a standard USB drive. Compatible with Windows, macOS, and Linux.

Q: What happens if I enter the wrong password too many times?

A: The Sentry ONE has configurable brute force protection. After a set number of failed authentication attempts (configured by the user or, in Managed mode, by an administrator), the drive performs a cryptographic self-destruct — destroying all data permanently. This ensures that a lost or stolen drive cannot be forced open by repeated guessing.

Q: Can this drive be managed centrally for fleet deployments?

A: The standard Sentry ONE operates as a standalone device with no management requirements. If you need centralised control across multiple drives — remote wipe, password reset, policy enforcement, audit logging, and geofencing — you need the Sentry ONE Managed edition (SONE[capacity]M SKUs), which requires a DataLocker SafeConsole licence. Contact us for SafeConsole licensing options.

Q: Is the Sentry ONE suitable for regulated industries?

A: Yes. FIPS 140-2 Level 3 certification, CSPN certification, and TAA compliance make the Sentry ONE suitable for government, defence, healthcare, legal, and financial deployments where compliance with HIPAA, CMMC, GDPR, and equivalent regulations is required. The drive is manufactured in the USA with a trusted supply chain — no components from compromised or restricted sources.

Q: Why does write speed vary between capacities?

A: Transfer speeds are limited by the flash memory chips used at each capacity tier. The 8GB and 16GB variants achieve up to 22 MB/s write, the 32GB steps up to 40 MB/s, and the 64GB and 128GB reach up to 85 MB/s write. Read speeds are up to 165 MB/s (8GB/16GB) and 250 MB/s (32GB–128GB) over USB 3.2 Gen 1.

Specifications

Specification	Detail
Encryption	AES 256-bit XTS mode hardware encryption
Certification	FIPS 140-2 Level 3 (Cert. #2929), CSPN-2022/074
Compliance	TAA compliant, FCC, CE, VCCI, KC, RoHS, WEEE
International Recognition	BSI/BSZ recognised (Germany), ANSSI certified (France)
Interface	USB 3.2 Gen 1 (USB-A) — backward compatible with USB 2.0 and 1.1
Read Speed (USB 3.2)	8GB & 16GB: up to 165 MB/s | 32GB–128GB: up to 250 MB/s
Write Speed (USB 3.2)	8GB & 16GB: up to 22 MB/s | 32GB: up to 40 MB/s | 64GB & 128GB: up to 85 MB/s
Read Speed (USB 2.0)	Up to 30 MB/s
Write Speed (USB 2.0)	Up to 20 MB/s
Capacities	8GB, 16GB, 32GB, 64GB, 128GB
Waterproof	IPX8 — up to 4 feet (1.2m) submersion
Physical Security	Tamper-evident seal, hardened enclosure
Security Features	Brute force protection with auto-wipe, read-only mode
Management	Standalone (standard) | SafeConsole-ready (Managed edition)
Operating Temperature	0°C to 60°C
Storage Temperature	-20°C to 85°C
Dimensions	79mm × 22mm × 12mm
Weight	54g
Country of Origin	USA
Warranty	5-year limited warranty

Download DataLocker Sentry ONE Datasheet (PDF)

Compatibility

System	Compatibility
Windows	Windows 10, 8.1, 8, 7 SP1 (requires two free drive letters)
macOS	macOS 10.9 and later
Linux	Linux kernel 2.6 and later (online management features not available)
Citrix	Citrix Ready — XenDesktop and XenApp compatible
Interface	USB-A port (USB 3.2 Gen 1 / USB 3.0 / USB 2.0 / USB 1.1)