[Note: This article refers to an earlier review of LOK-IT Secure Flash Drive. Since that review, LOK-IT has undergone some changes. It now includes instructions for setting an Admin PIN, it's no longer limited to six changes of encryption key, and a new pricing model makes it slightly less expensive than Aegis Secure Key.]

When you need to transport highly sensitive data, sending it in email or over the Internet may not be such a great idea. Transporting a physical drive holding the encrypted data significantly reduces points of possible exposure. Even so, a determined hacker could attack the decryption software, possibly compromising the data. The fully self-contained Aegis Secure Key ($65 direct) uses an onboard PIN pad rather than relying on software. That $65 price gets you a 4GB unit; 8GB and 16GB devices can be had for $95 and $125 respectively.

Since no software is needed, you can use the drive with any USB-capable device, regardless of the operating system. Windows, Mac OS, Linux—even a proprietary device with a proprietary operating system would be fine as long as it supports USB.

Button-based Configuration
In many ways Aegis Secure Key resembles LOK-IT Secure Flash Drive ($76.25 direct, 4 stars). That's only natural, as both license some basic technology from the same source. Both work with any USB-capable operating system, both use an onboard PIN pad for access, both destroy the stored data after ten bad guesses, and so on. However, there are some significant differences.

The Aegis Secure Key comes with a quick start card that explains how to unlock the key and set your own PIN code; you'll find the full manual stored on the key itself. Red, green, and blue LED lights (powered by a rechargeable battery) turn steadily on or blink in various combinations that reflect the key's status. For example, after you enter the unlock code the green light blinks until you plug the key into a USB port, which you must do within 30 seconds of entering the code.

Where LOK-IT comes without a PIN, Aegis has a default PIN installed at the factory. Before doing anything else with the device, use the quick start card's instructions to unlock the device with that default PIN. Copy the manual PDF from the secure key to local storage on your computer and give it a quick read.

Both devices require a PIN from 7 to 15 digits long without continuous runs of numbers or strings of repeated digits. The buttons on Aegis include letters, like buttons on a phone, allowing users to create alphabetic mnemonics for the PIN.

The unlock process is the same for Aegis and LOK-IT; press the Key button, enter the PIN, press the Key button again. The button sequence for setting a new PIN is also the same.

A rather complex series of button combinations completely resets the drive, wiping out all data and generating a new encryption key. After a reset, you'll have to create a new PIN and format the drive. LOK-IT has no similar feature, though you can force a wipe by entering the wrong PIN ten times. Note that LOK-IT has only six encryption keys; once they've been used up the device is kaput. Aegis can generate any number of encryption keys.

Another advanced Aegis feature is the option to create an Admin PIN. In a business setting the Admin PIN lets management reset a user's lost PIN without losing the data, or recover data after an employee leaves.

There are physical differences too. Aegis comes with a protective sleeve; LOK-IT does not. Aegis is smaller, so it doesn't block a USB port above or below the way LOK-IT can. The membrane keys of the LOK-IT can get marked up by fingernails, leaving clues as to which numbers get pressed during PIN entry; the Aegis's keys are hard and offer click feedback. Aegis is just a bit better all around, yet it costs less.