Nitrokey Storage 2 is a hardware device designed to provide encrypted mass storage and cryptographic key management. It features up to 64 GB of hardware-encrypted storage capacity, accessible via a PIN, ensuring all encryption and decryption processes are executed entirely within the device. The device operates independently of the host operating system and utilizes a tamper-resistant smart card to securely store cryptographic keys, generating and retaining them locally to prevent external access or extraction.
The device supports the creation of unprovable hidden storage volumes, protected by secondary passwords, to provide plausible deniability. In addition to mass storage, Nitrokey Storage 2 functions as an authenticator by generating One-Time Passwords (OTP) and operating as a local password manager. It natively supports OpenPGP standards for email and file encryption, utilizing RSA keys up to 4096 bits and ECC keys up to 521 bits across standard elliptic curves.