External data encryption module iStorage cloudAshur, 256 GB, USB Type-A, USB 3.2 Gen 1, password protection, silver

The iStorage cloudAshur is an external data encryption module with 256 GB capacity designed to protect data stored locally or in the cloud. It connects via USB Type-A using USB 3.2 Gen 1 for file transfer and provides password and PIN-based access control. The device is compact and portable (37 g) in a silver housing and uses hardware encryption to secure data both in transit and at rest. cloudAshur is intended for users who need a dedicated hardware security module to safeguard sensitive files, share encrypted content, and manage devices centrally when combined with iStorage software tools.

Advantages

cloudAshur performs real-time hardware encryption using AES 256-bit algorithms, protecting files without relying on host system software. It implements a PIN-authenticated hardware security module with a dedicated secure microprocessor, providing tamper-evident and tamper-resistant design elements. The device supports multiple authentication factors including a configurable Admin/User PIN and credentials for client and cloud accounts, enabling layered access control. Additional protections include a brute-force defense mechanism, inactivity auto-lock and options for user recovery PINs.

Suitable for

• Secure storage and transport of confidential files for business or personal use
• Encrypting data before uploading to cloud storage providers
• Sharing encrypted files with authorised recipients when using compatible key management tools
• Use with Windows or macOS client applications for controlled access

Key specifications

• Capacity: 256 GB
• Interface: USB Type-A, USB 3.2 Gen 1 transfer speeds
• Encryption: Hardware AES 256-bit (AES-XTS or AES-ECB modes available)
• Authentication: PIN-authenticated hardware security module with 7–15 digit configurable Admin/User PINs
• Security: Dedicated secure microprocessor with Common Criteria EAL4+ readiness and FIPS-certified encryption controller
• Physical: Portable silver housing, weight approximately 37 g
• Protection features: Brute-force defense, inactivity auto-lock, user recovery PIN support

How to use

Connect the cloudAshur device to a USB Type-A port on a compatible computer. Follow the on-screen prompts from the iStorage client application for Windows or macOS to register a username and set an Admin or User PIN within the 7–15 digit range. Once authenticated, files written to the device are encrypted in real time by the hardware module. To share encrypted data, use iStorage Keywriter or other supported key management tools and authorize recipients per the vendor workflow. When the device is inactive, it will auto-lock to prevent unauthorised access.

Usage recommendations

Store administrative PINs and recovery PINs separately from the device and use multi-factor authentication by combining the hardware module with client credentials and cloud account protections. Keep the device firmware and client software up to date and use the Remote Management Console for centralized control in organizational deployments.