FIPS 140-2 is a U.S. government encryption standard created by the National Institute of Standards and Technology (NIST), a division of the U.S. Department of Commerce. The FIPS 140-2 standard is used by federal agencies in the United States and Canada, as well as by regulated sectors such as finance, healthcare, legal, and utilities, in addition to the commercial sector.