# Encryption Guide

### Hardware Model Comparison

The IODD provides robust hardware-based encryption. The following table summarizes the encryption capabilities by model:

| Feature                  |             ST400 / MINI PRO            |                  LK100                  | IODD MINI |
| ------------------------ | :-------------------------------------: | :-------------------------------------: | :-------: |
| **Max Password Length**  |                38 Digits                |                38 Digits                | 16 Digits |
| **2nd Password Support** |                    O                    |                    O                    |     X     |
| **Admin Mode**           |                    O                    |                    O                    |     X     |
| **Random Keypad**        |                    O                    |                    O                    |     O     |
| **Keep 2 Min. PW**       | [O](/various-functions/keep-2min.pw.md) | [O](/various-functions/keep-2min.pw.md) |     X     |

{% hint style="info" %}
**ST300 Notice** The **ST300** model does not support hardware encryption features. For encryption support, please use the ST400, LK100, or MINI/MINI PRO series.
{% endhint %}

***

### Core Encryption Features

IODD employs **Full Disk Encryption (FDE)** on a hardware basis. This ensures that the entire disk is protected, and no data can be accessed or recovered without the correct password.

{% hint style="info" %}
**Random Keypad Security** For enhanced security, all encryption-related inputs utilize a **Random Keypad** system where the number positions change every time the screen is activated. This prevents fingerprint tracing on specific keys. **Always verify the keypad layout on the screen carefully** before entering or setting your password.
{% endhint %}

{% hint style="danger" %}
**Data Initialization Warning** Enabling or disabling the encryption feature will **completely initialize (erase) all data** on the disk. You **must back up** all critical data to a separate storage device before making any changes to encryption settings.
{% endhint %}

{% hint style="warning" %}
**Incompatibility & Conflicts**

* Encryption formats between **IODD 2541** and **ST400/LK100** are **not compatible**.
* Do not use IODD hardware encryption simultaneously with third-party software encryption solutions (e.g., **BitLocker**, VeraCrypt). Doing so may cause system instability or data corruption.
  {% endhint %}

***

### Getting Started

To use the encryption features safely, set up the **2nd Password** first. It is the administrator key used during encryption initialization and when moving an encrypted disk to another ST400/LK100/MINI PRO enclosure.

* [**2nd Password Setup Guide**](/aes256-encryption-mini-pro-st-lk/admin/2nd-password.md)

***

### Terminal Tips for Advanced Users

If you are managing drive paths or checking mount points on a Mac, you can use the following command:

```bash
    # List all connected disks to identify your IODD
    $ diskutil list
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.iodd.kr/aes256-encryption-mini-pro-st-lk/encryption-guide.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.