USB-flashdrive Apricorn 128 GB USB Type-A 3.2 Gen 1 Aegis Secure Key 3z

The Apricorn Aegis Secure Key 3z is a 128 GB USB Type-A 3.2 Gen 1 flash drive that combines on-the-fly 256-bit AES XTS hardware encryption with FIPS 140-2 Level 3 validation, an onboard alphanumeric keypad and a rugged, water- and dust-resistant aluminium housing. The device operates without software or admin rights, supports cross-platform use, and is compatible with the Aegis Configurator for mass provisioning. It is designed for secure portable storage and administrative control in corporate, government and field deployments.

Advantages

The Secure Key 3z provides hardware-based 256-bit AES XTS encryption and meets FIPS 140-2 Level 3 requirements for physical tamper resistance and identity-based authentication. An onboard rechargeable keypad lets users enter a 7–16 digit PIN before connecting to a host, preventing software and hardware keyloggers from capturing credentials. Additional features include independent User and Admin PINs, user forced enrolment, one-time data recovery PINs, a drive reset that generates a new encryption key, programmable brute-force self-destruct, unattended auto-locking and two read-only modes for controlled access. The durable extruded aluminium casing with epoxy-sealed internals and IP57 resistance protects the device in travel and field conditions.

Suitable for

• Secure transport of sensitive files for corporate and government users
• Field and travel use where physical durability and water/dust resistance are required
• Mass deployment and provisioning using Aegis Configurator
• Forensic or public-read scenarios requiring read-only or controlled access

Key specifications

• Capacity: 128 GB
• Interface: USB Type-A, USB 3.2 Gen 1 (3.1 Gen 1)
• Encryption: 256-bit AES XTS hardware encryption
• Security validation: FIPS 140-2 Level 3
• Authentication: Onboard alphanumeric keypad (7–16 digit PIN), independent User/Admin PINs, optional recovery PINs
• Physical protection: Extruded aluminium housing, epoxy-sealed internals, IP57 dust and water resistance
• Weight: 0.022 kg
• Color: Black

How to use

Set up the device by assigning an Admin PIN and, if required, enabling User Forced Enrollment so that each user must create their own User PIN. Unlock the drive at the device by entering the PIN on the onboard keypad before inserting the drive into the host's USB port. Use the Admin PIN to recover or clear forgotten User PINs, program one-time recovery PINs, reset the drive to destroy data and generate a new encryption key, or configure read-only modes. For bulk configuration, connect multiple Secure Keys to the Aegis Configurator and apply custom profiles.

Recommendations

Store the Admin PIN securely and provision recovery PINs where appropriate; enable User Forced Enrollment for deployed devices to ensure each user creates a unique PIN. Regularly back up critical data elsewhere before using drive reset or brute-force protection features that destroy stored data.