Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Western Digital ArmorLock encrypted NVMe SSD offers ultimate protection without a password

Western Digital's 2TB ArmorLock encrypted NVMe SSD allows users to ditch complicated or easily compromised passwords without compromising security.

ArmorLock encrypted NVMe SSD boasts read and write speeds of up to 1000MB/s via a SuperSpeed USB 10Gbps port. It supports both USB-C and USB-A connections and includes both cables in the box.

Additionally, it is rated with an IP67 dust and water resistance rating, up to nine feet of drop protection, and 1,000 pounds of crush resistance, making it safe to ship or take to job sites without fear of losing data.

The drive includes high-grade 255-bit AES-XTS hardware encryption and allows for a one-step erase and reformat to your preferred file system.

Users will no longer need to keep track of complicated passwords, either. The drive works with the ArmorLock app, allowing users to quickly lock and unlock the device wirelessly via their iPhone — including support for both Touch ID and Face ID. The app also allows users to track the drive's last known location on a map.

For enterprise users, ArmorLock mobile and desktop apps allow fleet managers to configure and manage multiple drives. Managers will be able to easily grant and revoke access and set user permissions remotely, as well. This is especially useful for businesses that need to ship drives from one location to another.

The ArmorLock apps also receive regular updates for continued security, support, improvements, and new features, ensuring that the drive will continue to be as secure as the day it was purchased.

The ArmorLock encrypted NVMe SSD is available today for $599 and comes in a 2 terabyte configuration. The ArmorLock app for iOS and macOS is available for free and does not require a subscription.



7 Comments

rob53 13 Years · 3312 comments

255-bit AES-XTS encryption? It uses an app so it has passwords of some kind wherever they may be. I have to wonder if this app will work under Big Sur without extensions. I saw VMWare mentioned their latest update Fusion update won't work with Big Sur because of its lack of extension ability by developers. 

I'll stick with encrypted APFS (configured using FileVault) instead of using a third-party encryption tool to manage its hardware encryption.

rotateleftbyte 12 Years · 1630 comments

Using a phone as the key is still a single point of failure. Not good.

muaddib 15 Years · 82 comments

I wonder if you can use both types of encryption at the same time.

rob53 13 Years · 3312 comments

muaddib said:
I wonder if you can use both types of encryption at the same time.

Both types? This device uses hardware encryption so either you have it turned on or turned off. You could probably use APFS encryption on top of hardware encryption but I don't see any benefit in doing this.

APFS encryption (FileVault) encrypts and decrypts when accessing the data. As long as the user is logged on, the data is accessible. When the user logs off or when the Mac is turned off, the data is not accessible. This encryption/decryption is handled by the Mac CPU (maybe T2 chip for external drives in the future?) and is extremely fast. I don't know how fast the hardware encryption/decryption is on the ArmorLock device but they limit the bus speed to USB-3 speeds. I know many NVMe blades can run significantly faster than this drive.

This drive is from G-Technology, hosted on the WD store. I presume WD builds the NVMe blade and G-Technology builds the enclosure.

"The ArmorLock encrypted NVMe SSD comes completely locked out of the box, shutting out access until the drive is unlocked with the app. Ejecting the drive automatically locks it - rendering all content inaccessible. ArmorLock is built with 256-bit AES-XTS hardware encryption and NIST P-256 elliptic curve-based key management for powerful data protection without compromising on speed." So the drive is only locked when you unlock it by the app and it stays unlocked while in use. I presume it automatically locks itself when it loses power.