A pair of IronKey D500S USB flash drives sit on a black surface with lock icon graphics in blue
Military-grade FIPS 140-3 Level 3 (Pending) security to protect mobile data.
IKD500S
Buy

Kingston IronKey D500S Hardware-encrypted USB Flash Drive FIPS 140-3 Level 3 (Pending) Certified, XTS-AES 256-bit Hardware Encrypted, Rugged Zinc Casing

The Best-in-Class Kingston IronKey™ D500S/SM USB Flash drive features flagship military-grade security that makes IronKey the most trusted brand to safeguard classified information. It is FIPS 140-3 Level 3 (Pending) certified with new enhancements from NIST requiring secure microprocessor upgrades for stronger security and attack protections for government and military uses. Data is encrypted and decrypted on the D500S without any trace left on the host system. Along with hardware-based XTS-AES 256-bit encryption, it features a rugged zinc casing which is waterproof1, dustproof1, shock and vibration resistant to Military Standards2, crush-resistant and special epoxy-filled to protect internal components from penetration attacks.

IronKey D500S is an essential pillar to meeting Data Loss Protection (DLP) best practices with the toughest military-grade security for compliance with data encryption laws and regulations such as CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX and CCPA, along with TAA. D500S offers more features than any other drive in its class, making it an industry-leading security solution for high-value, confidential data protection.

D500S self-tests upon bootup and over-temperature or voltage conditions will lead to drive shutdown. For added peace of mind, D500S incorporates a digitally-signed firmware making it immune to BadUSB malware. Brute Force password attack protection is always on to guard against password guessing and will ultimately crypto-erase the drive if invalid password retries are exceeded.

It offers a Multi-Password option to access data which supports up to three passwords: Admin, User, and One-Time Recovery. Admin can reset a User password and also enable a One-Time Recovery password to restore access if the User password is forgotten.

D500S supports traditional Complex password or Passphrase mode3. Passphrases can be from 10-128 characters long. FBI recommends multi-word passphrases of 15 or more characters as stronger yet easier to remember than complex passwords.4

D500S includes an industry-first Dual Hidden Partition option where Admin can create two custom-sized secure partitions for Admin and User, thereby allowing for a Hidden File Store that can be used to provision files to the User partition as needed. When using untrusted systems or sharing the drive, the Hidden File Stores keep their data secure and invisible unless properly accessed.

With a special key sequence, Admin can enter a Crypto-Erase password that will crypto-erase the drive, destroy the data forever and reset it to prevent unauthorized access in compromising situations.

To assist users with keyboard issues, all password entry screens include an Eye symbol that will display the password entered to reduce typos. A Virtual Keyboard is also available in English5 to shield password entry from keyloggers and screenloggers.

D500S also supports two levels of Read-Only (Write-Protect) Modes. Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset.

It also delivers fast dual channel performance without compromising security. The drive includes a unique 8-digit serial number that is the same electronically as engraved on the casing, with a scannable bar code for drive deployment or auditing purposes.

D500S offers many customization options and is TAA/CMMC Compliant and Assembled in USA.

Managed Model

Kingston IronKey D500SM (M = Managed6) drives allow central management of drive access and usage across a fleet of drives for larger enterprises or governments.

  • FIPS 140-3 Level 3 (Pending) Certified for flagship military-grade security
  • Multi-Password option with Complex/Passphrase modes
  • Industry-first Dual Hidden Partition option
  • Crypto-Erase Password for compromising situations
  • Rugged zinc casing for penetration attack protection, Military Standards shock and vibration, IP67 waterproof/dustproof7
  • User-friendly interface
  • Fully customizable features
  • Available in a Managed model

Key Features

FIPS Level 3 140-3 Pending and TAA Compliant emblems with a lock graphic

Military-Grade Hardware-Encrypted USB Drive

FIPS 140-3 Level 3 (Pending) certified XTS-AES 256-bit encryption with secure microprocessor upgrades for stronger security. Built-in protections against BadUSB and Brute Force attacks. New drive self-testing upon bootup, thermal and voltage protection to automatically shut down drives when they reach certain thresholds.

FIPS Level 3 140-3 Pending and TAA Compliant emblems with a lock graphic

Screen shot of D500S login

Multi-Password Option for Data Recovery

Enable Admin, User, and One-Time Recovery passwords. Admin can reset a User password and enable a One-Time Recovery password to restore User’s access to data if the User password is forgotten.

Stylized graphic representing a passphrase filed with “My dog is 1 year old!” as the passphrase

Complex or Passphrase Mode

Select between Complex or Passphrase mode. Passphrases can be complete sentences, multiple words or even lyrics that only you remember - from 10 to 128 characters long. An Eye symbol for all entered passwords helps reduce typos.

Screen shot of Partition dialog box

Industry-first Dual Hidden Partition Option

Admin can create two custom-sized Dual Hidden Partitions for Admin and User for a Hidden File Store to keep data secure and invisible unless properly accessed. Dual Hidden Partitions can provide additional security on untrusted systems or when drive sharing is required.

Crypto-Erase Password for Compromising Situations

Crypto-Erase Password for Compromising Situations

The Crypto-Erase password will wipe encryption keys, delete all data forever and reset the drive.

Screen shot of D500S admin screen with the Read-Only Mode dialog box

Global and Session Read-Only (Write Protect) Modes

Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset.

Fully Customizable

Rugged Casing Built to IronKey Toughest Standards

Zinc casing that is crush-resistant and is epoxy-filled for physical tamper-resistant security. MIL-STD-810F certified for mechanical shock, vibration and drop tests. IP67 certified for waterproof1 and dustproof1.

Screen shot of the back of D500S and show the scan.

Unique 8-digit Serial Number and Scannable Barcode

Time saver, simply read or scan the barcode, when deploying, when it is returned as well as during any physical auditing.

Kingston D500S Encrypted USB Flash Drive

Fully Customizable

Enable, disable, modify drive features and profile. Co-logo.

Awards and Reviews

Your data is at risk from prying eyes. This USB drive will help keep it safe.

Read Full Review
    Capacity
    Model

        Specifications

        Key Certifications FIPS 140-3 Level 3 (Pending)
        MIL-STD-810F
        TAA/CMMC Compliant, Assembled in USA
        Interface USB 3.2 Gen 1
        Capacities* 8GB, 16GB, 32GB, 64GB, 128GB, 256GB, 512GB
        Connector Type-A
        Speed8 USB 3.2 Gen 1
        8GB – 128GB: 260MB/s read, 190MB/s write
        256GB: 240MB/s read, 170MB/s write
        512GB: 310MB/s read, 250MB/s write

        USB 2.0
        8GB – 512GB: 30MB/s read, 20MB/s write
        Dimensions 77.9 mm x 21.9 mm x 12.0 mm
        Waterproof/Dustproof9 IP67 certified
        Operating Temperature 0°C to 50°C
        Storage Temperature -20°C to 85°C
        Compatibility USB 3.0/USB 3.1/USB 3.2 Gen 1
        Customization Options D500S: Enable, disable, modify drive features and profile. Co-logo.
        D500SM: Modify drive profile. Co-logo.
        Warranty/support D500S: 5-year warranty, free technical support
        D500SM: 2-year warranty, free technical support
        Compatible with Windows® 11, 10, macOS® 11.x – 14.x, Linux10 Kernel 4.4+
        Why choose IronKey

        Why choose Kingston IronKey™?

        With the power and pedigree of Kingston Technology forged into every product, trust that your data is truly secure when it’s secured by IronKey.

        Learn More

        Related Videos

        Related articles