Nitrokey Storage 2
Hardware-encrypted storage (16-64 GB)
Description
Hardware-encrypted storage (16-64 GB)
Automatically encrypt your data with secure hardware encryption. Your files are protected against unauthorized access whether you are at home, in the office or on the road, regardless of your operating system and computer.
Hidden storage of highly sensitive data
Establish hidden volumes to reliably deny the existence of additional encrypted data, for example during border checks. Hidden data is encrypted with a second, separate password and cannot be distinguished from empty disk space. By default, no hidden volumes are used. This means that without a password it is impossible to detect whether a hidden volume has been created.
One-time passwords to protect your accounts from identity theft
Protect your accounts against identity theft. One-time passwords (OTPs) are generated in Nitrokey and act as an additional authentication factor (2FA) for logins (in addition to the normal password). This will ensure that your accounts remain safe, even if your passwords are stolen.
Secure storage of cryptographic keys
Securely store your private keys for encrypting emails, hard drives or individual files in Nitrokey. They are thus protected against loss, theft and malware and can be kept with you at all times. Key backups protect against loss.
Secure firmware updates
Stay up to date with security and technology with firmware updates. Protect yourself against firmware tampering by self-verifying the authenticity and integrity of installed firmware.
Password manager
Store your encrypted passwords securely in the integrated password manager. Thanks to this, you can always have your passwords with you and protect them even if you lose your Nitrokey.
Integrity verification/tamper detection
Check the integrity of your computer's BIOS using Verified Boot. The Nitrokey color LED indicates whether BIOS integrity is intact (green) or tampering has been detected (red). Supported computers must have a Coreboot-based BIOS and heads (e.g. Purism Librem, Insurgo PrivacyBeast, Nitrokey NitroPad).
klucz bezpieczeństwa, klucz sprzętowy, klucz zabezpieczający komputer, dwuetapowe uwierzytelnianie, zabezpieczenia kont w portalach internetowych, potwierdzenie tożsamości podczas logowania, klucz unikalny, security key, hardware key, computer security key, two-step authentication, security of accounts on Internet portals, identity confirmation when logging in, unique key, Sicherheitsschlüssel, Hardwareschlüssel, Computer-Sicherheitsschlüssel, Zwei-Faktor-Authentifizierung, Sicherheit von Konten auf Internetportalen, Identitätsbestätigung beim Anmelden, eindeutiger Schlüssel,
Technical Data
| Supported Systems and Interfaces | |
|---|---|
| Windows, Mozilla Thunderbird, MS Outlook, GnuPG, SSH, TrueCrypt/VeraCrypt, OpenSC | |
| CSP, OpenPGP, S/MIME, X.509, PKCS#11 | |
| One-time passwords are compatible with the two-factor authentication of most websites (e.g. Google, Facebook, Dropbox). An overview of OTP-compatible websites can be found at Dongleauth | |
| Windows, macOS, Linux, BSD | |
| Technical Details | |
| Storage capacity | 16-64GB depending on the model |
| Storage encryption | AES-256, CBC mode |
| Secure key storage | 3 key slots, RSA 2048-4096 bit, ECC 256-512 bit |
| Elliptic curves | NIST P-256, P-384, P-521 (secp256r1/prime256v1, secp384r1/prime384v1, secp521r1/prime521v1), brainpoolP256r1, brainpoolP384r1, brainpoolP512r1 |
| External hash algorithms | SHA-256, SHA-384, SHA-512 |
| One-time passwords | 3 x HOTP (RFC 4226), 15 x TOTP (RFC 6238), 1 x HOTP validation |
| Password manager | 16 entries |
| True random number generator (TRNG) | 40 kbit/s |
| Tamper-resistant smart card, OpenPGP Card 3.3 | |
| Life expectancy (MTBF, MTTF) | > 100,000 PIN entries |
| Storage time | > 20 years |
| Activity indicator | two-colored LED |
| Hardware interface | USB 2.0, type A |
| Maximum supply current | 170 mA |
| Maximum power consumption | 850 mW |
| Size | 69 x 20 x 8 mm |
| Weight | 11 g |
| Compliance | FCC, CE, RoHS, WEEE, OSHwA |
