Kingston Technology IronKey Locker Plus 50 User manual

User Manual
IronKey Locker Plus 50
Find the language and latest documentation here.
IKLP50 User Manual
Simplied Chinese .....简体中文说明书
Traditional Chinese ....繁體中文說明
............For instructions in English
. . . . . . . . . . . . . . . . . . Para instrucciones en Español
.........Für Anleitungen in Deutsch
. . . . . . . . . . . . . . . . . . Pour des instructions en Français
. . . . . . . . . . . . . . . . . . Per le istruzioni in Italiano
............Por as instruções em Português
. . . . . . . . . . . . . . . . . . Instrukcje w jezyku Polskim
. . . . . . . . . . . . . . . . . .日本語マニュアル用

1
IRONKEY™Locker+ 50 (LP50)
SECURE USB 3.2 Gen 1 FLASH DRIVE
User Guide

Contents
Introduction ................................................................................................................................................... 3
Locker+ 50 Features .................................................................................................................................................... 4
About this Manual........................................................................................................................................................ 4
System Requirements .................................................................................................................................................. 4
Recommendations........................................................................................................................................................ 5
Using the Correct File System ...................................................................................................................................... 5
Usage Reminders.......................................................................................................................................................... 5
Best Practices for Password Setup ............................................................................................................................... 6
Setting Up My Device...................................................................................................................................... 7
Device Access (Windows Environment).......................................................................................................................... 7
Device Access (macOS Environment).............................................................................................................................. 7
Device Initialization (Windows & macOS Environment).................................................................................... 8
Password Selection........................................................................................................................................................ 9
Virtual Keyboard ........................................................................................................................................................ 11
Password Visibility Toggle ......................................................................................................................................... 12
Admin & User Passwords............................................................................................................................................. 13
Contact Information .................................................................................................................................................... 14
USBtoCloud ...................................................................................................................................................16
USBtoCloud Initialization & Usage (Windows Environment)..................................................................................... 16
USBtoCloud Initialization & Usage (macOS Environment)......................................................................................... 18
Device Usage (Windows & macOS Environment).............................................................................................20
Login for Admin & User (Admin Enabled)..................................................................................................................... 20
Login for User-Only mode (Admin not enabled)........................................................................................................... 20
Brute-Force Attack protection .................................................................................................................................... 21
Accessing my secure Files ........................................................................................................................................... 21
Device Options ........................................................................................................................................................... 22
LP50 Settings .............................................................................................................................................................. 24
Admin Settings ............................................................................................................................................................ 24
User Settings: Admin Enabled...................................................................................................................................... 25
User Settings: Admin Not Enabled ............................................................................................................................... 26
Changing and Saving LP50 Settings .............................................................................................................................. 27
Admin Features .......................................................................................................................................................... 28
User Password Reset ................................................................................................................................................... 28
Help And Troubleshooting ......................................................................................................................................... 29
LP50 Lockout ............................................................................................................................................................... 29
LP50 Device Reset........................................................................................................................................................ 31
Drive Letter Conflict (Windows Operating Systems)..................................................................................................... 32

3
Figure 1: IronKey LP50
Introduction
Kingston IronKey Locker+ 50 USB Flash drives provide consumer-grade security with AES hardware-encryption in
XTS mode, including safeguards against BadUSB with digitally-signed firmware and Brute Force password attacks.
LP50 is also TAA compliant.
LP50 now supports multi-password (Admin and User) option with Complex or Passphrase modes. Complex mode
allows for passwords from 6-16 characters using 3 out of 4 character sets. New passphrase mode allows for a
numeric PIN, sentence, list of words, or even lyrics from 10 to 64 characters long. Admin can enable a User
password or reset the User password to restore access to data. To aid in password entry, the “eye” symbol can be
enabled to reveal the typed in password, reducing typos leading to failed login attempts. Brute Force attack
protection locks out User upon 10 invalid password entries in a row and crypto-erases the drive if the Admin
password is entered incorrectly 10 times in a row. Additionally, a built-in virtual keyboard shields passwords from
keyloggers or screenloggers.
Locker+ 50 is designed for convenience with a small metal casing and built-in key loop to take data anywhere.
LP50 also features optional USBtoCloud (by ClevX®) backup to access data on the drive from your personal cloud
storage through Google Drive™, OneDrive (Microsoft®), Amazon Cloud Drive, Dropbox™or Box. LP50 is easy for
anyone to setup and use, with no application installation required; all the software and security needed is already
on the drive. Works on both Windows® and macOS® so users can access files from multiple systems.
LP50 is backed by a limited 5-year warranty with free Kingston technical support.

4
IronKey Locker+ 50 Features
•XTS-AES hardware encryption (encryption can never be turned off)
•Brute Force and BadUSB attack protection
•Multi-Password options
•Complex or Passphrase password modes
•Eye button to display entered passwords to reduce failed login attempts
•Virtual keyboard to help protect against keyloggers and screenloggers
•Windows or macOS compatible (consult datasheet for details)
About This Manual
This user manual covers the IronKey Locker+ 50 (LP50).
System Requirements
PC Platform
•Intel, AMD & Apple M1 SOC
•15MB free disk space
•Available USB 2.0 - 3.2 port
•Two consecutive drive letters after the last
physical drive*
*Note: See ‘Drive Letter Conflict’ on page 32.
PC Operating System Support
•Windows 11
•Windows 10
•Windows 8.1
Mac Platform
•15MB free disk space
•USB 2.0 - 3.2 Port
Mac Operating System Support
•macOS X (v. 10.13.x –12.x.x)
Note: A free 5-year subscription to USB-to-Cloud is included with every drive upon activation. Continued activation options
available for purchase by ClevX beyond includedtimeframe.

5
Recommendations
To ensure there is ample power provided to the LP50 device, insert it directly into a USB port on your notebook or
desktop, as seen in Figure 1.1. Avoid connecting the LP50 to any peripheral device(s) that may feature a USB port,
such as a keyboard or USB-powered hub, as seen in Figure 1.2.
Figure 1.1- Recommended Usage
Figure 1.2- Not recommended
Using the Correct File System
The IronKey LP50 comes preformatted with the FAT32 file system. It will work on Windows and macOS systems.
However, there could be some other options that could be used to format the drive with manually, such as NTFS for
Windows and exFAT. You can reformat the data partition if needed but data is lost when the drive is reformatted.
Usage Reminders
To keep your data safe, Kingston recommends that you:
•Perform a virus scan on your computer before setting up and using the LP50 on a target system
•When using the drive on a public, or unfamiliar system, you may wish to set the Read-Only mode on the device
to help protect the drive from Malware
•Lock the device when not in use
•Eject the drive before unplugging it
•Never unplug the device when the LED is lit. This may damage the drive and require a reformat, which will erase
your data
•Never share your device password with anyone
Find the Latest Updates and Information
Go to kingston.com/support for the latest drive updates, FAQs, Documentation, and additional information.
NOTE: Only the latest drive updates (when available) should be applied to the drive. Downgrading the drive to an
older software version is not supported and can potentially cause a loss of stored data or impair other drive
functionality. Please contact Kingston Technical Support if you have questions or issues.

6
Best Practices for Password Setup
Your LP50 comes with strong security countermeasures. This includes protection against Brute Force attacks that will
stop an attacker guessing passwords by limiting each password attempt to 10 retries. When the drive’s limit is
reached, LP50 will automatically wipe out the encrypted data –formatting itself back to a factory state.
Multi-Password
LP50 supports Multi-Passwords as a major feature to help protect against data loss if one or more passwords are
forgotten. When all password options are enabled, the LP50 can support two different passwords you may use to
recover data –Admin and User Password roles
LP50 allows you to select two main passwords –an Administrator password (referred to as Admin password) and a
User password. Admin can access the drive at any time and set up options for User –Admin is like a Super User. In
addition, Admin can set up the One-Time Recovery password for User to provide a way for User to log in and reset
the User password.
User can access the drive as well but compared to Admin has limited privileges. If one of the two passwords is
forgotten, the other password can be used to access and retrieve the data. The drive can then be set back up to have
two passwords. It is important to set up BOTH passwords and save the Admin password in a safe location while using
the User password. User can use the One-Time Recovery password in order to reset the User password when needed.
If all passwords are forgotten or lost, there is no other way to access the data. Kingston will not be able to retrieve
the data as the security has no back doors. Kingston recommends that you have the data also saved on other media.
The LP50 can be Reset and reused, but the prior data will be erased forever.
Password Modes
The LP50 also supports two different password modes:
Complex
A complex password requires to meet a minimum of 6-16 characters using at least 3 of the following characters:
•Upper case alphabet characters
•Lower case alphabet characters
•Numbers
•Special characters
Passphrase
LP50 supports Passphrases from 10 to 64 characters. A Passphrase follows no additional rules, but if used properly,
can provide very high levels of password protection.
A Passphrase is basically any combination of characters, including characters from other languages. Like the LP50
drive, the password language can match the language selected for the drive. This allows you to select multiple words,
a phrase, lyrics from a song, a line from poetry, etc. Good passphrases are among the most difficult password types
to guess for an attacker yet may be easier to remember for users.

7
Setting Up My Device
To ensure there is ample power provided to the IronKey encrypted USB drive, insert it directly into a USB 2.0/3.0 port
on a notebook or desktop. Avoid connecting it to any peripheral devices that may feature a USB port, such as a
keyboard or USB-powered hub. Initial setup of the device must be done on a supported Windows or macOS based
operating system.
Device Access (Windows Environment)
Plug the IronKey encrypted USB drive into an available USB port on the notebook or desktop and wait for Windows to
detect it.
•Windows 8.1/10/11 users will receive a
device driver notification. (Figure 3.1)
Figure 3.1 –Device Driver Notification
•Once the new hardware detection is
complete, select the option IronKey.exe
inside of the Unlocker partition that can be
found in File Explorer. (Figure 3.2)
•Please note that the partition letter will vary
based on the next free drive letter. The drive
letter may change depending on what
devices are connected. In the image to the
right, the drive letter is (E:).
Figure 3.2 –File Explorer Window/IronKey.exe
Device Access (macOS Environment)
Insert the LP50 into an available USB port on your notebook or desktop and wait for the Mac operating system to
detect it. When it does, you will see the ‘IRONKEY’volume appear on the desktop. (Figure 3.3)
•Double-click the IronKey CD-ROM icon.
•Then, double-click the IronKey.app
application icon found in the window
displayed in Figure 3.3. This will start the
initialization process.
Figure 3.3 –IKLP Volume

8
Device Initialization (Windows & macOS Environment)
Language and EULA
•
•Select your language preference from the drop-
down menu and click Next. (See Figure 4.1)
Figure 4.1 –Language Selection
•
Review the license agreement and click Next.
Note: You must accept the license agreement
before continuing; otherwise, the Next button
will remain disabled. (Figure 4.2)
Figure 4.2 –License Agreement

9
Device Initialization
Password Selection
On the Password prompt screen, you will be able to create a password to protect your data on the LP50 using either
the Complex or Passphrase password modes (Figures 4.3- 4.4). Additionally, the Multi-password Admin/User options
can also be enabled on this screen. Before proceeding with Password Selection, please review Enabling Admin / User
Passwords below for a better understand of these features.
Note: Once either Complex or Passphrase mode is chosen, the mode cannot be changed unless a device is Reset.
To begin with password selection, create your password in the ‘Password’ field, then re-enter it in the ‘Confirm
Password’ fields. The password you create must meet the following criteria before the initialization process will allow
you to continue:
Complex Password
•Must contain 6 characters or more (up to
16 characters).
•Must contain three (3) of the following
criteria:
oUpper Case
oLower Case
oNumerical Digit
oSpecial characters (!,$,&, etc..)
Figure 4.3 –Complex Password
Passphrase Password
•Must contain:
o10 characters minimum
o64 characters maximum
Figure 4.4 –Passphrase Password
Password Hint (Optional)
A password hint can be useful for providing a
clue as to what the password is, should the
password ever be forgotten.
Note: The hint CANNOT be an exact match to
the password.
Figure 4.5 –Password Hint Field

10
Device Initialization
Valid and Invalid Passwords
For valid passwords, the Password Criteria Boxes will highlight green when the criteria are met. (See Figures 4.6a-b)
Note: Once the minimum of three password criteria are met, the fourth criteria box will become gray, indicating that
this criterion is optional (Figure 4.6b)
Figure 4.6a –Complex Password Condition Met
Figure 4.6b –Complex Password Condition Optional
For invalid passwords, the Password Criteria Boxes
will highlight red and the Next button will be disabled
until the minimum requirements are met.
This applies to both Complex and Passphrase
Passwords.
Figure 4.7 –Password Conditions Not Met

11
Device Initialization
Virtual Keyboard
The LP50 features a Virtual Keyboard that can be used for Keylogger protection.
•To utilize the Virtual Keyboard, locate the
keyboard button on the upper-right side of the
Device Initialization screen and select it.
Figure 4.8 –Activating the Virtual Keyboard
•Once the virtual keyboard appears, you may also
enable Screenlogger Protection. When using this
feature, all the keys will briefly go blank. This is
expected behavior, as it prevents screenloggers
from capturing what you’ve clicked.
•To make this feature more robust, you may also
choose to randomize the virtual keyboard by
selecting randomize [(randomize)] in the lower-
right of the keyboard. Randomize will arrange the
keyboard in a random order.
Figure 4.9 –Screenlogger Protection / Randomize

12
Device Initialization
Password Visibility Toggle
By default, when you create a password, the password string will be shown in the field as you type it in. If you wish
to ‘hide’ the password string as you type, you can do so by toggling the password ‘eye’ located on the upper-
righthand side of the Device Initialization window.
Note: After the device has been initialized, the password field will default to ‘hidden’.
To hide the password string, click the gray icon.
Figure 4.10 –Toggle ‘hide’ Password
To show the hidden password, click the blue icon.
Figure 4.11 –Toggle ‘show’ Password

13
Device Initialization
Admin and User Passwords
By enabling Admin and User Passwords, you can leverage multi-password functionality, in which the Admin Role can
manage both accounts. Selecting ‘Enable Admin and User passwords’ allows for an alternative method of drive
access in case one of the passwords is forgotten.
With Admin and User passwords enabled, you can also access:
•User Password reset
To learn more about the User Password reset feature, navigate to page 28 within this user guide.
•To Enable Admin and User passwords click
on the box next to ‘Enable Admin and User
Passwords’ and select Next once a valid
password has been chosen. (Figure 4.12)
•If this feature is enabled, then the chosen
Password at this screen will be the Admin
Password. Click Next to proceed to the User
Password screen where a password is
chosen for the User.
Figure 4.12 –Enabling Admin and User Passwords
Note: Enabling Admin and User passwords is optional.
If the drive is set up with this feature NOT enabled (box unchecked), then the drive will be configured as a Single
User, Single Password drive without any Admin features. This configuration will be referred to User-Only mode
throughout this manual.
To proceed with a Single User, Single password setup, keep Enable Admin and User Passwords unchecked, and click
Next after creating a valid password.

14
Device Initialization
Admin and User Passwords
If Admin Role was enabled in the previous
screen, the following screen will prompt for
the User Password (Figure 4.13) The User
Password will have limited capabilities
compared to Admin and will be discussed
in further detail Moving forward. Note:
‘Admin and User Passwords’ will be
referred to as ‘Admin Role’ throughout this
manual for the remainder of this
document.
Figure 4.13 - User Password (Admin and User Enabled)
Note: The chosen Password Option (Complex or Passphrase) criteria will carry over to the User Password, One-Time
Password Recovery and to any password resets that are needed after the drive is set up. The chosen password option
may only be changed after a full device reset.

15
Device Initialization
Contact Information
Enter your contact information into the text boxes provided. (See Figure 4.14)
Note: The information you enter in these fields may NOT contain the password string you created in Step 3.
However, these fields are optional and can be left blank, if so desired.
The ‘Name’field may contain up to 32
characters, but cannot contain the
exact password.
The ‘Company’field may contain up to
32 characters, but cannot contain the
exact password.
The ‘Details’field may contain up to
156 characters, but cannot contain the
exact password.
Figure 4.14 - Contact information
Note: Clicking ‘OK’ will complete the initialization process and proceed to unlock, then mount the secure partition
where your data can be securely stored. Proceed to Unplug the drive and plug it back into the system to see the
reflected changes.

16
USB  → Cloud Initialization (Windows Environment)
Once the device has been initialized in Windows, the USB-to-Cloud application will appear as seen in Figure 5.1 on
the right. Please make sure you have a working Internet connection before you continue.
•To proceed with the installation, click the green ‘Accept’
button in the bottom right-hand corner of the clevX window.
•To decline the installation, click the red ‘Decline’ button in
the bottom left-hand corner of the clevX window.
•(Note: If you click the red ‘Decline’ button, it will cancel the
USB-to-Cloud installation. In doing so, a special text file
named ‘USBtoCloudInstallDeclined.txt’ is created on the
data partition. The presence of this file will prevent the
application from prompting you for the installation in the
future.)
Figure 5.1 –USBtoCloud Windows EULA
•If the following Windows Security Alert window pops up
during the initialization process, please click “Allow access”
to continue (or create a Windows Firewall Exception) in
order for the USB-to-Cloud application to continue.
Figure 5.2 –Windows security alert

17
USB  → Cloud Initialization (Windows Environment)
•Once the installation has completed, you will see an
application box with a list of options to choose from (for
syncing your LP50 data.)
•Select the cloud option you wish to use as your backup
application and provide the necessary credentials required
for authentication.
•(Note: If you currently do not have an account set up with
any of the cloud options listed, you may create one at this
time, using your favorite Internet browser, and then
completing this option afterwards.)
•Once you’ve chosen a cloud option and authenticated to the
corresponding service, the USB-to-Cloud program will
perform an initial comparison of the data partition against
what is stored in the Cloud. As long as the USB-to-Cloud
service is running in Task Manager, content written to the
data partition will automatically back up (sync) to the Cloud.
Figure 5.3 –Cloud Selection
USB  → Cloud Usage (Windows Environment)
The USB-to-Cloud application provides the following
additional services:
•Pause Backup (Pauses a data backup).
•Restore (Restores data from the cloud to the device).
•Settings (Additional options for your data backup).
•Exit (Exits the USB-to-Cloud service).
In the ‘Settings’ menu, you can:
•Change which cloud service app you are currently
using for backups.
•Change the language you are currently using,
•Select which files and/or folders you are backing up
to the cloud.
•Check for software updates.
(Note: If you reset (or format) the LP50 device, all data
on the device will be lost. However, whatever data is
stored in the cloud remains safe and intact.)
Figure 5.4- Services Figure 5.5- Settings

18
USB  → Cloud Initialization (macOS Environment)
•Once the device has been initialized, the USB-to-Cloud
application will appear as seen in Figure 5.6 to the right.
Please make sure you have a working Internet connection
before you continue.
•To proceed with the installation, click the ‘Accept’ button in
the bottom right-hand corner of the clevX window.
(Note: On macOS 10.15.x + will be prompted to allow access
to files on a removable volume. Select OK.) (See Figure 5.7)
•To decline the installation, click the ‘Decline’ button in the
bottom left-hand corner of the clevX window.
Figure 5.6 –USBtoCloud macOS EULA
(Note: If you click the ‘Decline’ button, it will cancel the USB-
to-Cloud installation. In doing so, a special file named
‘DontInstallUSBtoCloud’ is created on the data partition. The
presence of this file will prevent the application from
prompting you for the installation in the future.)
•Once the installation has completed, you will see an
application box with a list of options to choose from (for
syncing your LP50 data.) (Figure 5.8)
Figure 5.7- macOS access
•Select the cloud option you wish to use as your backup
application and provide the necessary credentials required for
authentication.
(Note: If you currently do not have an account set up with any
of the cloud options listed, you may create one at this time,
using your favorite Internet browser, and then completing
this option afterwards.)
•Once you’ve chosen a cloud option and authenticated to the
corresponding service, the USB-to-Cloud program will
perform an initial comparison of the data partition against
what is stored in the Cloud. As long as the USB-to-Cloud
service is running in Task Manager, content written to the
data partition will automatically back up (sync) to theCloud.
Figure 5.8- Cloud Selection

19
USB → Cloud Usage (macOS Environment)
The USB-to-Cloud application provides the following
additional services (Figure 5.9):
•Pause Backup (Pauses a databackup)
•Restore (Restores data from the cloud to the device)
•Backup (Opens Cloud Options) See Figure 5.9
•Exit (Exits the USB-to-Cloudservice)
Figure 5.9- Services
In the ‘Preferences’ menu, you can:
•Change the language you are currently using
•Enable/disable sound notifications
•Enable/disable unmount drive if app is quit
•Enable/disable logging for troubleshooting
•Enable/disable automatic software updates
and to check for updates now
Figure 5.10- USBtoCloud Preferences