Zymbit Zymkey 4i: Security Module for Raspberry Pi | Root File Encryption | Secure Key Storage | Physical Tamper Detection

Zymbit has gone out of their way with great software support for this device. There are C and Python library that work out of the box after the one-step software install. Compared to other raspberry pi hardware products i've bought, where the software experience is basically half-baked, the zymkey has excellent support. If you're a security professional like me that needs hardware secret key support and rock solid encryption this is a great device.

Documentation needs "hello world" style examples to get users up and running with the device. Otherwise, it's harder than it needs to be and you'll waste time.

Follow the instructions carefully and everything just works but make sure to RTFM!

I consider these a must have for Raspberry Pis, especially ones in the field and are in danger of being taken. The good is that they perform well. Downside is that there isn't any real way to add a recovery key to LUKS, so make sure all data is backed up, or have the data on a secondary volume where a keyfile is stored on the OS partition and there is a secondary password that can open it.These are instrumental in turning a would-be major data loss into "just" a hardware loss... although with the shortage of Raspberry Pis, it can be a while before one can get a replacement.They are also useful for storing keys in hardware. Definitely a must have security addition.