Versatile, portable, and built to go anywhere: the Aegis Padlock 3.0.

Pocket-sized to securely carry your most sensitive data wherever you go, the Aegis Padlock 3 comes in a huge variety of storage capacities in both HDD and high-speed SSD. Software-Free, 100% hardware-based 256-bit AES XTS encrypted, onboard keypad usb drive is PIN authenticated, and ultra-fast USB 3.1 (3.0) data transfer speeds. All Data in this hardware encrypted hard drive is encrypted on the fly and the PINs and Data remain encrypted while the drive is at rest. Completely cross-platform compatible and OS agnostic; the Padlock 3 thrives with Windows, Linux, Mac, Android, Chrome. It also thrives where software-based encrypted drives won't even function such as embedded systems, machinery, and any equipment in possession of a powered USB port and storage file system. All internal componentry of this keypad USB drive is protected from physical tampering with a layer of hardened epoxy, and the firmware is locked down which prevents any modifications making it immune to malware attacks such as BadUSB.

Featuring AegisWare™

The heart and soul of every Apricorn Secure Device, AegisWare is our patent-protected firmware combined with the industry’s most advanced feature set.

Military-grade FIPS PUB 197 Validated Encryption

Featuring AES-XTS 256-bit hardware encryption, the Aegis Padlock 3.0 seamlessly encrypts all data on the drive on-the-fly, keeping all encryption keys, PINs, and data at rest safe even if the hard drive is extracted from its enclosure.

Polymer-Coated Wear-Resistant Onboard Membrane Type Keypad

Drive is unlocked by entering a PIN on keypad and not the host computer’s keyboard. Until the device is unlocked via its keypad, it remains invisible to the host. The embedded keypad circumvents all hardware and software key logging attempts to capture passwords by excluding the host system from the authentication process. Polymer-coated membrane-style keypad is wear-resistant to prevent revealing the drive's most commonly used button.

Separate Admin and User Mode

Admin (Device Configuration) Mode and User Access Mode. The Aegis Fortress supports one independent Admin and up to three User PINs. The Admin mode controls the universal programmable settings of the device and can only be accessed with the Admin PIN. The User mode is limited to basic external drive functions like read /write, unlock / lock, etc. The data on the drive can also be accessed with the admin PIN in the User mode.

Admin Forced Enrollment

Unique PIN must be established at time of setup. Eliminates factory default PIN vulnerability. Out of the box, there are no factory pre-set default PINs. In order to set up and use the drive, a unique PIN must first be established by the Admin, from within the Admin mode.

User Forced Enrollment

Admin can program device at setup requiring User to establish a unique PIN. Once a device is configured by the Admin, it can then be deployed in a state of USER FORCED ENROLLMENT in which the User must first establish his or her own User PIN before the drive can be accessed or used.

Data Recovery PINs

Creates state of user forced enrollment that restores access to drive. In the event that a User PIN is forgotten, recovery PINs can be programmed into the device to permit access to the drive’s data by creating a new state of User Forced Enrollment while the Admin PIN and the drive’s data remain intact. Once a replacement User PIN is generated, access to the drive is restored for the user.

Two Read-Only Modes

Global, all access settings controlled by Admin, and User mode controlling individual settings. Employed in situations that require the drive’s contents to be kept intact and unaltered for later examination. The two Read-Only modes are as follows: Universal Read Only is set by the admin from within the admin mode and can’t be modified or disabled by anyone but the admin. The second read-only mode can be set and disabled by a user but can also be enabled or disabled by the admin as well.

Programmable PIN Lengths

Admin designates minimum and maximum PIN lengths (between 7 and 16 characters). The longer the PIN, the more secure the data on the device becomes. For example, the odds of brute force success go from 1/10,000,000 with a 7-digit PIN to 1/100,000,000 with an 8 digit PIN. In cases where the User sets up his or her own PIN from User Forced Enrollment, the Admin can set an enhanced User password length requirement as part of the overall security policy.

Brute-Force Defense 

Select the number of consecutive invalid PIN attempts permitted (4-20) before crypto-erase. All Aegis Secure Drives are unlocked (authenticated) by entering a PIN on their own onboard keypad. Since the PIN is not entered using the host computer’s keyboard, they are not vulnerable to software or hardware-based key-loggers or software-based brute force attacks. However, if the device comes under a physical brute force attack, your data is protected with a programmable “Brute Force Hack Defense Mechanism” which, if the programmed number (between 4 and 20) of consecutive incorrect password entries has been attempted, the device will delete its own encryption key and destroy the ability to decrypt its stored data.

Unattended Auto Lock

Programmable length of time of inactivity permitted before drive locks itself. All Aegis Secure Drives will automatically lock once disconnected from a computer’s USB port or the power to that USB port is interrupted, or after a pre-programmed period of inactivity.

Lock Override

Allows drive to remain unlocked during USB port re-enumeration (Virtual Machine, Remote Boot). Designated for specific cases in which the drive needs to remain unlocked through USB port re-enumeration such as during reboot, or passing through a virtual machine.

Drive Reset Feature

All Apricorn devices can be reset and redeployed over and over. Drive reset clears both the User and Admin PINs, destroys the data, creates a new randomly generated encryption key and allows the drive to be reused repeatedly, with an infinite number of randomly generated encryption keys, allowing the admn and or user to reset the drive as often as is needed.

Self-Destruct PIN

When programmed and activated, performs a crypto-erase and becomes new access PIN. The last line of defense for data security when the device’s physical security is at risk. The Self-Destruct PIN defends against these physically compromising situations by erasing the drive’s contents, leaving it in normal working order appearing yet to be deployed.

LED Key Press Indicator

Visually confirms successful button presses via the device’s LEDs.