Kingston Ironkey D500S 128GB Encrypted Flash Drive | Dual Hidden Partition | FIPS 140-3 Level 3 | XTS-AES 256-bit | BadUSB and Brute Force Protection | Multi-Pin Option / IKD500S/128GB

The Kingston IronKey D500S 128GB Secure Encrypted USB Flash Drive protects sensitive files with XTS-AES 256-bit encryption, so a lost or stolen drive stays unreadable without the correct password. A dual hidden partition setup keeps confidential material apart from everyday documents, and FIPS 140-3 Level 3 certification backs the security claims. Defences against BadUSB attacks and brute force attempts are built in, alongside a multi-pin security option.

The D500S carries 128GB in a pocket-sized body, enough for working document sets, archives and project files that should never live on a shared machine. It is aimed at anyone who needs secure data storage that travels, rather than general-purpose capacity. Every file written to it sits behind the drive's own password before it leaves your desk.

Certified to FIPS 140-3 Level 3 (Pending), the D500S combines XTS-AES 256-bit encryption with secure microprocessor enhancements. Built-in defences cover BadUSB and brute force threats, and the drive self-tests every time it powers up. If it detects overheating or a voltage anomaly, it shuts down automatically rather than continuing in an unverified state.

Three password roles are supported: Admin, User and One-Time Recovery. The Admin can reset the User password, and can issue a One-Time Recovery password so access is restored when a User forgets theirs. That structure means a forgotten password becomes an administrative task rather than the end of the data on the drive.

You can choose Complex mode or Passphrase mode when setting a password. Passphrase mode accepts anything from a single word to a full sentence, between 10 and 128 characters, which makes a long secret easier to remember than a random string. An Eye icon reveals what has been typed, so entry errors do not burn an attempt.

An Admin can establish Dual Hidden Partitions at sizes they choose, creating a Hidden File Store available to both Admins and Users. Data held there stays secure and undeclared unless it is accessed properly, which matters when the drive is plugged into an untrusted system or has to be shared with someone else.

The Crypto-Erase password is the fail-safe. Entering it wipes the encryption keys and erases all data on the drive permanently, which is the response you want if there is any risk of a breach. Because the keys go with the data, what remains on the flash is unrecoverable rather than merely deleted.

The D500S sits inside a durable zinc casing that is waterproof, dustproof and crush-resistant. The interior is filled with epoxy, which makes physical tampering far harder because the components cannot be reached without destroying them. It is the physical half of a design where the encryption handles everything else.

Drive features and profiles can be enabled, disabled and modified, so the D500S is configured to the way it will actually be used rather than left on defaults. An organisation issuing several drives can set them to a consistent standard, while an individual can switch off functions they will never need.

Both Admin and User can switch on a session-based Read-Only mode before plugging the drive into an untrusted system, which stops malware writing to it. An Admin can go further and set a Global Read-Only mode that holds the drive in Read-Only state until it is reset, so a shared drive cannot be altered in the field.