# Encryption Guide

### Hardware Model Comparison

The IODD provides robust hardware-based encryption. The following table summarizes the encryption capabilities by model:

| Feature                  |                     ST400 / MINI PRO                     |                           LK100                          | IODD MINI |
| ------------------------ | :------------------------------------------------------: | :------------------------------------------------------: | :-------: |
| **Max Password Length**  |                         38 Digits                        |                         38 Digits                        | 16 Digits |
| **2nd Password Support** |                             O                            |                             O                            |     X     |
| **Admin Mode**           |                             O                            |                             O                            |     X     |
| **Random Keypad**        |                             O                            |                             O                            |     O     |
| **Keep 2 Min. PW**       | [O](https://help.iodd.kr/various-functions/keep-2min.pw) | [O](https://help.iodd.kr/various-functions/keep-2min.pw) |     X     |

{% hint style="info" %}
**ST300 Notice** The **ST300** model does not support hardware encryption features. For encryption support, please use the ST400, LK100, or MINI/MINI PRO series.
{% endhint %}

***

### Core Encryption Features

IODD employs **Full Disk Encryption (FDE)** on a hardware basis. This ensures that the entire disk is protected, and no data can be accessed or recovered without the correct password.

{% hint style="info" %}
**Random Keypad Security** For enhanced security, all encryption-related inputs utilize a **Random Keypad** system where the number positions change every time the screen is activated. This prevents fingerprint tracing on specific keys. **Always verify the keypad layout on the screen carefully** before entering or setting your password.
{% endhint %}

{% hint style="danger" %}
**Data Initialization Warning** Enabling or disabling the encryption feature will **completely initialize (erase) all data** on the disk. You **must back up** all critical data to a separate storage device before making any changes to encryption settings.
{% endhint %}

{% hint style="warning" %}
**Incompatibility & Conflicts**

* Encryption formats between **IODD 2541** and **ST400/LK100** are **not compatible**.
* Do not use IODD hardware encryption simultaneously with third-party software encryption solutions (e.g., **BitLocker**, VeraCrypt). Doing so may cause system instability or data corruption.
  {% endhint %}

***

### Getting Started

To use the encryption features safely, set up the **2nd Password** first. It is the administrator key used during encryption initialization and when moving an encrypted disk to another ST400/LK100/MINI PRO enclosure.

* [**2nd Password Setup Guide**](https://help.iodd.kr/aes256-encryption-mini-pro-st-lk/admin/2nd-password)

***

### Terminal Tips for Advanced Users

If you are managing drive paths or checking mount points on a Mac, you can use the following command:

```bash
    # List all connected disks to identify your IODD
    $ diskutil list
```