Kingston IronKey Keypad 200 — 32GB Hardware-Encrypted USB Drive with Built-In Keypad
FIPS 140-3 Level 3 ValidatedXTS-AES 256-bit hardware encryptionNo software, no driversIP68 water and dust resistant
The Kingston IronKey Keypad 200 (IKKP200/32GB) is a 32GB USB Type-A flash drive that encrypts everything you put on it in hardware and unlocks from a keypad on the drive itself, so it never asks the computer for a password. Because the PIN is entered on the drive, there is nothing to install and no driver to load — it works the same on a Windows laptop, a Mac, a Linux box, a copier or a machine you are not allowed to install software on. Kingston builds it around XTS-AES 256-bit hardware encryption and it carries a NIST FIPS 140-3 Level 3 validation, which is the specific wording most public-sector and regulated tenders in Cyprus ask for.
Compatibility — check before buying:
This is the Type-A version. It plugs into standard USB-A ports; it will not fit a USB-C-only laptop or phone without an adapter. The drive has a rechargeable battery for the keypad: Kingston asks you to leave it in a powered USB port for 30 to 60 minutes before the first use. Set-up is done entirely on the keypad, so no admin rights are needed on the host machine. Kingston does not publish what is in the box beyond the drive and its protective sleeve — tell us if you need a specific quantity or packaging and we will confirm with Kingston before you order.
Best For
✓ Carrying client or patient files outside the office
✓ Tenders and contracts that specify FIPS 140-3
✓ Shared machines where you cannot install software
✓ Field engineers moving data between sites
✓ Handing a dataset to an auditor or lawyer
✓ Replacing an unencrypted drive after a security review
Key Features
Unlocks on the drive, not on the PC
A 13-button alphanumeric keypad sits on the drive body. You type an 8 to 15 character PIN before you plug it in, so the password never travels through the host computer and a keylogger on that computer has nothing to capture.
FIPS 140-3 Level 3, and this part number is on the certificate
XTS-AES 256-bit encryption runs on a dedicated controller. IKKP200/32GB is named in the hardware list of NIST CMVP certificate #5133, so if a tender asks for the part number on the certificate, this one is on it.
Wrong PINs wipe it, on purpose
Ten consecutive wrong User PINs erase the data. Ten consecutive wrong Admin PINs crypto-erase the entire drive, including the settings. An Admin PIN can also be set so an IT manager can recover a user who has forgotten theirs.
Built for a pocket and a keyring
Kingston rates the drive IP68 for dust and water and finishes the keys with a polymer coating so worn-down buttons do not give away which digits you use. The internals are covered in tamper-evident epoxy.
Technical Specifications
| Identification |
| Brand |
Kingston |
| Series |
IronKey Keypad 200 |
| Part Number |
IKKP200/32GB |
| EAN / GTIN |
0740617330083 |
| Product Type |
Hardware-encrypted USB flash drive |
| Capacity & Performance |
| Capacity |
32GB |
| Interface |
USB 3.2 Gen 1, Type-A |
| Sequential Read |
145 MB/s |
| Sequential Write |
115 MB/s |
| On a USB 2.0 port |
30 MB/s read, 20 MB/s write |
| Speed basis |
Kingston publishes 145/115 MB/s as the band covering this capacity, not a per-capacity measurement |
| Security & Certification |
| Encryption |
XTS-AES 256-bit, hardware-based |
| Certification |
FIPS 140-3 Level 3 Validated |
| NIST CMVP certificate |
#5133, firmware 2.00.0 — IKKP200/32GB is listed on the certificate |
| Firmware protection |
Digitally signed firmware, BadUSB protection |
| Physical protection |
Tamper-evident epoxy-filled internals, polymer-coated keys |
| Software required |
None — the drive is OS and host independent |
| Access Control |
| Keypad |
13 buttons, phone-style multi-tap, alphanumeric PINs |
| PIN length |
8 to 15 characters |
| Rejected PINs |
All-repeating (33333333) and all-sequential (12345678) are refused |
| PIN roles |
Admin PIN and User PIN |
| Failed User attempts |
10 in a row erase the data |
| Failed Admin attempts |
10 in a row crypto-erase the whole drive |
| Read-only mode |
Yes, indicated by a green LED every 2 seconds |
| Physical & Environmental |
| Dimensions with sleeve |
80 x 20 x 11 mm |
| Dimensions without sleeve |
78 x 18 x 8 mm |
| Weight |
Kingston does not publish a weight |
| Ingress protection |
IP68 |
| Operating temperature |
0 to 50 °C |
| Storage temperature |
-20 to 60 °C |
| Battery |
Rechargeable; charge 30 to 60 minutes in a powered USB port before first use |
| Warranty & Support |
| Warranty |
1-Year Warranty (Singular) |
| Manufacturer Term |
Kingston publishes a limited 3-year warranty with free technical support on this model. Singular’s direct warranty is 1 year; beyond that we assist you with the manufacturer’s warranty process for its full duration. |
Frequently Asked Questions
Is the 32GB Type-A version slower than the Type-C one?
At this capacity, no. Kingston rates both the Keypad 200 and the Keypad 200C at 145 MB/s read and 115 MB/s write for 16 GB and 32 GB. The two only diverge higher up the range: from 64 GB the Type-C model moves to 280/200 while the Type-A model stays at 145/115 until 512 GB. So at 32GB you should choose purely on which port you need.
Do I need to install anything, or ask IT for admin rights?
No. The PIN is typed on the drive before you plug it in, so the computer only ever sees an already-unlocked disk. That means it works on locked-down corporate machines, on Linux, on a Mac, and on equipment that has no software installation at all.
What happens if someone keeps guessing the PIN?
After ten consecutive wrong User PINs the data is erased. After ten consecutive wrong Admin PINs the drive crypto-erases itself completely, PINs and settings included. There is no back door and Kingston cannot recover the contents, so set an Admin PIN and record it somewhere safe if the drive holds anything you cannot lose.
Does the FIPS 140-3 certificate actually cover this exact part number?
Yes. NIST CMVP certificate #5133 lists IKKP200/32GB by name in its hardware version list. That matters because certificates cover named part numbers, not product families — if a tender asks you to show the certificate, this one names the drive you are buying.
Singular Expert Insight
Buy the Keypad 200 for the reason the keypad exists: the password never touches the host computer. That is the difference between this and a software-unlocked encrypted drive, and it is why it survives on machines you do not control. At 32GB it is priced as a document drive rather than a media drive, and that is the honest use case — contracts, HR files, scans, backups of a working folder. If you are moving large video or disk images, the 145 MB/s ceiling will feel slow and the 512 GB Keypad 200, at 280 MB/s, is the better fit. If you want a drive you unlock from software with a password manager style interface rather than a keypad, look at the IronKey Vault Privacy 50 instead — but note that the VP50 carries only FIPS 197 algorithm certification, not the FIPS 140-3 module validation this drive has. That distinction is exactly what auditors check.
Buyer’s Guide
Buy it if
You need encryption that works without installing software, on machines you do not control, and you need FIPS 140-3 Level 3 in writing with this part number on the certificate.
Skip it if
You are moving large video files or disk images — 145 MB/s read and 115 MB/s write make that slow, and an unencrypted or software-encrypted drive would be far quicker for non-sensitive data.
Also consider
The 512 GB Keypad 200 doubles the speed to 280/200 MB/s. If you want a keypad on a portable SSD instead, tell us the capacity you need and we will check what is available.