iStorage diskAshur PRO2 FIPS 140-2 Level 3 Hardware Encrypted Portable SSD

The iStorage diskAshur PRO2 SSD is a PIN-authenticated, hardware-encrypted portable solid state drive that protects your data to military-grade standards — without any software, drivers, or cloud accounts required. Simply plug in, enter your 7-15 digit PIN on the onboard keypad, and you're working on a fully encrypted drive. Unplug it and every byte is locked instantly with AES-XTS 256-bit encryption.

What sets the diskAshur PRO2 apart from every other encrypted drive on the market is its certification stack. It is the world's first and only portable drive to hold FIPS 140-2 Level 3, NCSC CPA, NLNCSA BSPA and NATO Restricted level certifications simultaneously — making it the go-to choice for government agencies, defence contractors, law firms, healthcare providers and any organisation that cannot afford a data breach. The drive is designed and assembled in the UK, adding supply chain confidence for public sector procurement.

The SSD version delivers significantly faster transfer speeds than the HDD variant — up to 361MB/s read and 362MB/s write — in the same rugged, compact body. The tamper-proof hardware design encases all internal components in super-tough epoxy resin — virtually impossible to remove without permanently destroying the drive. The IP56-rated enclosure keeps dust and water out, while the polymer-coated keypad hides key usage patterns to prevent wear-analysis attacks. If someone tries to brute-force the PIN, the drive progressively locks down after failed attempts and permanently destroys the encryption key after 15 consecutive wrong entries — taking all data with it.

Key Features

• World's first and only FIPS 140-2 Level 3, NCSC CPA, NLNCSA BSPA and NATO Restricted certified portable SSD
• AES-XTS 256-bit full-disk hardware encryption — no software, no drivers, no cloud
• Common Criteria EAL 5+ (hardware certified) secure microprocessor with true random number generation
• PIN authenticated — 7-15 digit PIN, alphanumeric keypad with wear-resistant polymer coating
• Brute force protection — drive self-destructs after 15 consecutive wrong PIN entries
• Tamper-proof and tamper-evident design with epoxy-covered internals
• IP56 rated — dust and water resistant
• Independent Admin and User PINs for corporate and government deployment
• Read-only (write protect) mode — configurable by Admin or User
• Auto-lock on removal or after a set idle time (5-99 minutes)
• USB 3.2 Gen 1 (up to 361MB/s read, 362MB/s write) — backwards compatible with USB 3.0/2.0/1.1
• OS and host independent — works with Windows, macOS, Linux, Android, Citrix, VMware and more
• Designed, developed and assembled in the UK
• GDPR, HIPAA, CCPA, SOX, DORA and TAA compliant

What's in the Box

• iStorage diskAshur PRO2 portable encrypted SSD with integrated USB cable
• Protective carry case
• Quick Start Guide
• 3-year manufacturer's warranty
• Free Nero BackItUp and iStorage DriveSecurity Antivirus software licences

Is this compatible with my Mac or PC?

Yes — the diskAshur PRO2 is completely OS and host independent. It works with MS Windows, macOS, Linux, Chrome OS, Android, Thin Clients, Zero Clients, Embedded Systems, Citrix and VMware. No software or drivers need to be installed on the host device. It will work on any machine with a USB port, including tablets and smartphones with USB OTG support.

What happens if I forget my PIN?

If you have set up an Admin PIN (recommended for corporate deployment), the Admin PIN can be used to unlock the drive and assign a new User PIN without accessing or erasing the data. If no Admin PIN was configured and all 15 PIN attempts are exhausted through brute-force protection, the drive will delete its encryption key and reset to factory default — all data will be permanently lost. Always keep a secure record of your Admin PIN.

How does the brute force protection work?

After 5 incorrect PIN entries the drive freezes and must be unplugged and reconnected. After a further 5 wrong attempts (10 total) the drive freezes again, and the Shift button must be held while reconnecting before entering an iStorage preset PIN for a final 5 attempts. After 15 consecutive incorrect entries, the drive assumes it is under attack — it permanently deletes the encryption key and all data, and resets to factory settings. The drive can then be redeployed with a new encryption key.

Can the drive be set to read-only mode?

Yes. Both the Admin and User can configure the diskAshur PRO2 as a read-only (write protect) drive. If set by the Admin, this cannot be overridden by the User — useful for pre-loading content that should not be modified, or for sharing files securely in a controlled environment.

Is the diskAshur PRO2 approved for government and defence use?

Yes. It holds NCSC CPA (UK government), NLNCSA BSPA (Netherlands government), FIPS 140-2 Level 3 (US/international), and NATO Restricted level certifications — making it one of the most highly accredited portable storage devices available. It is the only drive in the world to hold all four of these certifications simultaneously.

Specifications

Interface	USB 3.2 Gen 1 SuperSpeed (up to 5Gbps) — backwards compatible with USB 3.0/2.0/1.1
Capacities (SSD)	128GB, 256GB, 512GB, 1TB, 2TB, 4TB, 8TB
Speed (SSD)	Read: up to 361MB/s — Write: up to 362MB/s
Encryption	AES-XTS 256-bit full-disk hardware encryption (FIPS PUB 197 validated)
Authentication	PIN-authenticated — 7-15 digit alphanumeric PIN
Microprocessor	Common Criteria EAL 5+ (hardware certified) secure microprocessor
Certifications	FIPS 140-2 Level 3, NCSC CPA, NLNCSA BSPA, NATO Restricted, IP56, TAA
Compliance	GDPR, HIPAA, CCPA, SOX, DORA
Dimensions (all capacities)	124 x 84 x 19 mm
Weight (all capacities)	approx. 180g
Power Supply	Bus powered (USB)
IP Rating	IP56 — dust and water resistant
Auto-lock	On removal, or programmable after 5-99 minutes of inactivity
Warranty	3 years manufacturer's warranty
Origin	Designed, developed and assembled in the UK

Download iStorage diskAshur PRO2 Datasheet (PDF)

Compatibility

Windows	Windows 11, 10, 8, 7 and later
macOS	All versions (no drivers required)
Linux	Yes (kernel with USB mass storage support)
Chrome OS	Yes
Android	Yes (USB OTG supported devices)
Other	Thin Clients, Zero Clients, Embedded Systems, Citrix, VMware
Host Independent	Works on any device with a USB port — no software or drivers required

Product Videos