Kingston IronKey Keypad 200C — 32GB Encrypted USB-C Drive
32GB, 145/115 MB/sAlphanumeric keypadFIPS 140-3 Level 3IP68, no software
The Kingston IronKey Keypad 200C is a 32GB encrypted USB drive that you unlock on the drive itself, with an alphanumeric keypad and a rechargeable battery, before it is ever plugged in. Because authentication happens on the device, it needs no software, no drivers and no host operating system — it works on Windows, macOS, Linux, ChromeOS, Android and on embedded equipment with nothing but a USB port. Encryption is hardware XTS-AES 256-bit, always on, and the series is FIPS 140-3 Level 3 Validated. This 32GB model reads at up to 145 MB/s and writes at up to 115 MB/s over USB 3.2 Gen 1.
Compatibility — check before buying:
Ten wrong entries destroy the data. Ten consecutive incorrect User PIN entries delete the User PIN, the encryption key and the data; ten consecutive incorrect Admin PIN entries crypto-erase the whole drive. There is no Kingston recovery path — that is the point of the design, but it means the PIN must be recorded somewhere safe. PINs are 8 to 15 characters and cannot be all-repeating (33333333) or all-consecutive (12345678). Charge before first use: plug the drive into a powered USB port for 30 to 60 minutes. On a USB 2.0 host every capacity drops to 30 MB/s read and 20 MB/s write regardless of the rating above. Kingston publishes no statement about using the USB-C connector through an adapter, so we do not promise adapter operation — tell us the machines it has to work with and we will check.
Best For
✓ Carrying regulated or client data outside the office
✓ Machines where you cannot install software of any kind
✓ Mixed fleets of Windows, macOS, Linux and Chromebooks
✓ Embedded, medical and industrial equipment with only a USB port
✓ Auditable handling of personal or financial records
✓ Field work where the drive may get wet or dusty
Key Features
The PIN is entered on the drive, not the computer
A keypad drive is immune to keyloggers and to hosts you do not trust, because the password never touches the machine. It also means no installer, no admin rights and no operating system dependency: Kingston states the drive requires no software and is OS and host independent. Buttons are polymer-coated so wear patterns do not reveal the PIN.
Hardware encryption, and a certificate to prove it
XTS-AES 256-bit runs on a dedicated controller, always on, with DataLock Secured Technology licensed from ClevX. The series is FIPS 140-3 Level 3 Validated under NIST CMVP certificate #5133 — a real module validation, not just an algorithm certificate. Firmware is digitally signed, which is what closes the BadUSB attack.
Built to be carried
IP68 rated against water and dust, with the internal circuitry under a tamper-evident epoxy coating. It measures 80 × 20 × 11 mm with its sleeve on and the sleeve unscrews to take a keyring. Admin and User PINs are separate, and a global read-only mode lets you hand a drive over without risking what is on it.
Technical Specifications
| Identification |
| Brand |
Kingston |
| Series |
IronKey Keypad 200 series |
| Model |
IronKey Keypad 200C |
| Part Number |
IKKP200C/32GB |
| EAN / GTIN |
0740617336634 |
| Capacity and performance |
| Capacity |
32GB |
| Sequential read |
Up to 145 MB/s |
| Sequential write |
Up to 115 MB/s |
| On a USB 2.0 host |
30 MB/s read, 20 MB/s write |
| Interface |
USB 3.2 Gen 1 |
| Connector |
USB-C — USB Type-C |
| Security |
| Encryption |
XTS-AES 256-bit, hardware based, always on |
| Certification |
FIPS 140-3 Level 3 Validated |
| NIST CMVP certificate |
#5133 |
| Authentication |
Alphanumeric keypad on the device, 13 buttons, phone-style multi-tap |
| PIN length |
8 to 15 characters; all-repeating and all-consecutive PINs are rejected |
| Multi-PIN |
Separate Admin and User PINs |
| Brute-force protection |
10 consecutive wrong User PINs delete the data; 10 wrong Admin PINs crypto-erase the drive |
| Read-only mode |
Global write-protect, indicated by a slow green LED blink |
| BadUSB protection |
Digitally signed firmware |
| Software required |
None — OS and host independent |
| Power |
| Battery |
Built-in rechargeable battery |
| Charging |
30 to 60 minutes in a powered USB port; charge before first use |
| Battery life |
Not published by Kingston |
| Physical |
| Dimensions with sleeve |
80 × 20 × 11 mm |
| Dimensions without sleeve |
74 × 18 × 8 mm |
| Ingress protection |
IP68 certified, waterproof and dustproof |
| Operating temperature |
0 °C to 50 °C |
| Storage temperature |
−20 °C to 60 °C |
| Construction |
Tamper-evident epoxy-coated circuitry, polymer-coated keypad |
| Keyring |
Sleeve unscrews to take a keyring |
| In the box |
| Package contents |
Kingston does not publish a formal contents list; the drive ships with its protective sleeve |
| Not included |
USB extension cable, adapter, charger, software media — none is needed |
| Warranty |
| Warranty |
1-Year Warranty (Singular) |
| Manufacturer Term |
Kingston publishes a limited 3-year warranty with free technical support on this series, and terms vary by region. Singular’s direct warranty is 1 year; beyond that we assist you with the manufacturer’s warranty process for its full duration. |
Frequently Asked Questions
What happens if I forget the PIN?
The data is gone. Ten consecutive wrong User PIN entries delete the User PIN, the key and the data; ten wrong Admin PIN entries crypto-erase the drive entirely. Kingston has no back door and neither do we — that is exactly why the drive is certified. Set an Admin PIN as well as a User PIN and record it somewhere safe before you put data on the drive.
Does it need any software?
No. The PIN is entered on the keypad before the drive is plugged in, so the computer only ever sees an already-unlocked USB drive. There is nothing to install, no admin rights needed, and it works the same on Windows, macOS, Linux, ChromeOS and Android, and on embedded equipment with just a USB port.
Is the speed the same on every capacity?
No, and this catches people out. On the USB C model, the 32 GB runs at 145/115 MB/s while 64 GB and above reach 280/200 MB/s. This 32GB model is rated 145/115 MB/s. On a USB 2.0 port every capacity falls to 30/20 MB/s.
How is this different from the IronKey Vault Privacy 50?
The Vault Privacy 50 is unlocked by typing a password into software on the host computer; this one is unlocked on its own keypad before it is plugged in. If the machines are locked down, not yours, or not running Windows or macOS, only the keypad drive will work. The VP50 is also FIPS 197 only, not a FIPS 140-3 validated module.
Singular Expert Insight
The reason to buy a keypad drive rather than a software-unlocked one is not convenience — it is that the password never reaches the computer. That matters when the machine belongs to a client, a hospital, a factory or a customs desk, and it matters when the machine is a piece of equipment with no operating system to install anything on. The trade is a battery to keep charged and a PIN that genuinely cannot be recovered. Decide the PIN policy before you deploy these, not after. If your requirement is encryption rather than host independence, our
USB flash drives range includes software-unlocked encrypted models at lower cost, and for larger volumes of protected data the
external SSDs section covers encrypted portable drives.
Buyer’s Guide
Buy it if
You need to move regulated or confidential data on removable media, the drive must work on machines where you cannot install anything, and you want a FIPS 140-3 Level 3 validated module rather than a marketing claim.
Skip it if
You need central management or remote wipe — the Keypad 200 has none. You cannot guarantee the PIN will be recorded safely. Or you only need bulk capacity, where an ordinary drive costs a fraction of this.
Also consider
Kingston IronKey Keypad 200 in USB-A if the machines have no USB-C port, or the IronKey D500S if you want a FIPS 140-3 Level 3 drive without a keypad.