🛠 Use case: Create a portable encrypted storage with PlugMate

Objectives

This tutorial aims to understand how PlugMate uses its encrypted internal storage to create an isolated and secure workspace. Unlike a standard USB drive, PlugMate runs a hardened operating system (PlugOS) that isolates your data from the host operating system. We will configure access to internal files and understand the security mechanism linked to the duress PIN.

Required Equipment

• A PlugMate unit (MediaTek Helio G80 SoC, 4 GB RAM, 128 GB eMMC).
• A compatible host computer (Windows, macOS, Linux, or recent Android/iOS).
• The PlugMate client installed on the host.
• A high-quality USB-C cable (provided or certified).

Steps

1. Host Preparation: Ensure the PlugMate client is installed and up to date. Note that Intel Macs and Windows ARM devices are not supported. Launch the client application.
2. Physical Connection: Insert the PlugMate into a USB-C port on your computer. System boot takes approximately 24 seconds. A secure graphical interface will appear on your host screen, borrowing display and keyboard via the encrypted USB-C channel.
3. Access Internal Storage: In the PlugOS interface, open the file manager. You will see the 128 GB encrypted storage. This storage is strictly isolated: internal applications do not see host data, and vice versa.
4. File Transfer: To transfer files from the host to PlugMate, use drag-and-drop or the integrated file explorer if available in the client version. Data travels through the encrypted channel.
5. Security Configuration: Go to security settings. Set a standard unlock code. Also configure the « Duress PIN »: this specific code instantly erases encryption keys if you are forced to unlock the device under threat.
6. Secure Disconnection: Before removing the PlugMate, shut down the system properly via the PlugOS menu to ensure the integrity of encrypted data.

Verification

Restart PlugMate after a complete shutdown. Verify that file access is protected by the defined code. Test the Duress PIN in a controlled environment (warning: this will permanently erase keys, requiring a factory reset) to understand its impact. Verify that the system firewall blocks unauthorized connections.

Going Further

Explore device virtualization. PlugMate can simulate a GPS or camera without using the host's physical sensors, ensuring total privacy. You can also configure multiple user profiles to separate professional and personal usage.