USB-flashstation Apricorn 64 GB USB Type-A 3.2 Gen 2 ASK3-NX-64GB

The Apricorn Aegis Secure Key 3NX (ASK3-NX-64GB) is a hardware-encrypted USB flash drive with 64 GB capacity, USB Type-A 3.2 Gen 2 interface and onboard keypad authentication. It provides 256-bit AES XTS encryption performed on-device with no software required, protecting data at rest and during transfer. The drive is cross-platform compatible (Windows, macOS, Linux, Android, Chrome and embedded systems), features a polymer-coated wear-resistant keypad, tamper-evident aluminum housing with IP67 rating, and hardened internal component protection.

Advantages

The device implements software-free, 100% hardware-based AES-256 XTS encryption and onboard keypad PIN authentication, preventing host-based keylogging and reducing exposure to malware such as BadUSB. It supports separate Admin and User PINs, programmable PIN lengths (7–16 characters), configurable brute-force defense (4–20 attempts), unattended auto-lock and lock override for re-enumeration. The Aegis Configurator app enables mass provisioning and profile deployment. The drive’s rugged, epoxy-protected internals and crush-resistant aluminum case provide physical durability and tamper resistance.

Suitable for

• Secure transport of sensitive files between systems
• Field use and travel where water/dust resistance and ruggedness are needed
• Organizations requiring hardware-based encryption and centralized provisioning
• Use with Windows, macOS, Linux, Android, Chrome and embedded equipment

Key specifications

• Model: Apricorn Aegis Secure Key 3NX (ASK3-NX-64GB)
• Capacity: 64 GB
• Interface: USB Type-A, USB 3.2 Gen 2 (3.1 Gen 2)
• Encryption: Onboard 256-bit AES XTS (hardware)
• Authentication: Onboard keypad PIN (polymer-coated buttons)
• Read/Write speeds: approx. 77 MB/s read, 72 MB/s write
• Weight: 0.022 kg
• Color: Black
• Ingress protection: IP67 (dust and water resistant)

How to use

Power the drive from a host USB port and unlock it using the onboard keypad by entering the configured PIN. Admins enroll the device during initial setup by creating an Admin PIN; optionally enable User Forced Enrollment to require each user to set a unique User PIN. Use the Aegis Configurator (Windows app) to mass configure profiles and settings. When locked or disconnected the device remains invisible to the host. To reset or redeploy the drive, use the device reset feature which clears PINs and generates a new encryption key.

Recommendations

Set a minimum PIN length appropriate for your security policy (longer PINs increase resistance to brute-force), enable recovery PINs if organizational access recovery is required, and use the Aegis Configurator for bulk provisioning. Configure brute-force attempt limits conservatively and consider Admin-enforced read-only modes when data must remain unaltered.