iStorage datAshur Pro review: encrypted USB with PIN pad
The iStorage datAshur Pro offers AES-256 hardware encryption with a built-in PIN pad. No software required, works on any operating system.
iStorage datAshur Pro review: encrypted USB with PIN pad
An encrypted USB drive without software is rare. The iStorage datAshur Pro does it: PIN code on the device itself, hardware encryption, and compatible with any system that recognises a USB drive.
Specifications
| Property | Value |
|---|---|
| Encryption | AES-256-bit XTS hardware encryption |
| PIN pad | Built-in, 11-button |
| Capacity | 4 GB to 128 GB |
| Interface | USB 3.2 Gen 1 |
| Operating system | OS-independent |
| Certifications | FIPS 140-2 Level 3 |
| Price | €60–100 depending on capacity |
How it works
The datAshur Pro has a built-in keypad. Before use, you enter the PIN on the device itself — not on your computer. Then you plug it in and it appears as a normal USB drive.
After a configured number of incorrect attempts (default: ten), the device wipes itself completely. Brute-force attacks are therefore practically useless.
The encryption key is generated on the device and never leaves it. No software is required on the host computer — no driver either.
Use with GrapheneOS
The datAshur Pro works via USB-C OTG adapter directly with the Pixel. Enter the PIN on the device, plug it in, and it appears as USB storage in GrapheneOS.
This is useful for transporting files between devices without the contents being readable if the device is lost or seized.
FIPS 140-2 Level 3
The FIPS 140-2 Level 3 certification is a US security standard for cryptographic modules. Level 3 requires physical tamper-resistance and a verifiable response to intrusion attempts.
This is not a marketing term — it is a standardised audit by a third party. Government agencies and companies with strict compliance requirements use devices with this certification.
Caveats
Speed: USB 3.2 Gen 1 is fast enough for most use cases (read: 100–120 MB/s, write: 40–60 MB/s), but not the fastest USB drive you can buy. That is a deliberate trade-off for the additional security layers.
Forgotten PIN: If you forget the PIN, the data is gone. There is no recovery option — that is part of the security design.
Price: More expensive than a regular USB drive. That is justified — you are paying for hardware encryption and certifications.
When do you use this?
- Transporting sensitive files between systems
- Storing backup of keys or password manager export
- Taking files to locations where you do not want to bring your laptop
- Professional situations where you need demonstrably secure storage
For home storage of backups, encrypted cloud storage (Proton Drive, Nextcloud) or an encrypted external drive is simpler for most people. The datAshur Pro is for portability and situations where software encryption does not provide sufficient trust.
Conclusion
The iStorage datAshur Pro does what it promises: hardware encryption without software, on any system, with a built-in PIN code. The price is high but justified for the specifications and certifications.
If you want to carry sensitive data portably without depending on software on the host system: this is the right choice.