It could be an accident, it could be theft: It's just too easy for the data on an unsecured external hard drive or SSD to fall into the wrong hands. To keep your data safe, consider an encrypted external drive. (In fact, some organizations mandate hardware-based encryption and other security criteria in drives they purchase.) Let us help you pick one: At PC Labs, we've been testing personal storage since the early days of PCs, and our analysts run drives through rigorous, repeatable tests to quantify speed. We also evaluate drives on design, usability, connectivity, bundled software, and (of course!) value. We've tested a wide variety of encrypted drives; our current top pick for most users is Crucial's X9 Pro. We've also selected a slate of others for different user scenarios and budgets. Below, check out our latest favorites and their specs, plus advice for understanding drive encryption and other important security features.
Overview
-
Jump To Details
![Crucial X9 Pro]()
Best Encrypted External SSD for Most UsersCrucial X9 Pro
-
Jump To Details
![Samsung Portable SSD T7 Shield]()
Best Ruggedized Encrypted External SSD for Most UsersSamsung Portable SSD T7 Shield
-
Jump To Details
![Apricorn Aegis NVX]()
Best Keypad-Secured External SSD for Most UsersApricorn Aegis NVX
-
Jump To Details
![iStorage DiskAshur M2]()
Best Compact, Ruggedized External SSDiStorage DiskAshur M2
-
Jump To Details
![DataLocker DL4 FE]()
Best Keypad-Secured External SSD for EnterprisesDataLocker DL4 FE
-
Jump To Details
![iStorage DiskAshur DT2]()
Best Encrypted Desktop Hard DriveiStorage DiskAshur DT2
-
Jump To Details
![WD My Passport, Works with USB-C (6TB)]()
Best Encrypted Portable Hard DriveWD My Passport, Works with USB-C (6TB)
You Can Trust Our Reviews
Deeper Dive: Our Top Tested Picks
-
![Crucial X9 Pro]()
Best Encrypted External SSD for Most UsersCrucial X9 Pro
Pros & Cons
Why We Picked It
A tiny yet highly capable external SSD, the Crucial X9 Pro scored well in our benchmark tests and comes in capacities up to 4TB. The X9 Pro’s 256-bit AES hardware-based encryption and basic ruggedization features protect it from tumbles, as well as both meteorological and human threats while you’re traveling. Its interface supports the USB 3.2 Gen 2 standard, which affords near-universal compatibility if your computer has a USB port (although you’ll need an adapter to connect to a Type-A port).
Who It’s For
Frequent travelers: The X9 Pro is small and lightweight, but it's also drop-proof and offers some protection from dirt and water ingress. Its AES 256-bit hardware-based encryption, the gold standard in conventional drive encryption, is essentially uncrackable using brute-force methods, so you can rest easy knowing that your data can't be accessed should the drive be stolen or go missing.
Mainstream users: The X9 Pro's USB 3.2 Gen 2 interface makes the SSD compatible with most systems that have a USB port, and it comes in at a lower price than speedier USB 3.2 Gen 2x2 drives. The X9 Pro's AES encryption is impermeable to brute-force attacks, and the drive offers some protection from sand, dust, and water. It performed very well in our PCMark 10 storage testing, which aggregates its scores from several trace tests to measure its performance on everyday storage tasks. It's available in capacities up to 4TB, with its lowest costs per gigabyte at the highest capacities.
Specs & Configurations
Bus Type PCI Express 3.0 x2 Capacity (Tested) 2 Interface (Computer Side) USB-C Internal or External External NAND Type TLC NVMe Support Rated Maximum Sequential Read 1050 Rated Maximum Sequential Write 1050 Warranty Length 5 Learn More Crucial X9 Pro Review -
-
![Samsung Portable SSD T7 Shield]()
Best Ruggedized Encrypted External SSD for Most UsersSamsung Portable SSD T7 Shield
Pros & Cons
Why We Picked It
The Samsung Portable SSD T7 Shield is a well-rounded external SSD with competitive speed, AES hardware-based encryption, and a rugged exterior that protects your data from drops, dust, and rain. The T7 Shield is more shockproof than the previous T7 drives, and unlike them is rated for dust and water resistance. Its security isn't quite as convenient as that of the Editors' Choice-honored Samsung T7 Touch with fingerprint reader, but it should keep your information safe, and it's better protected than the Touch. It's a good choice for travelers and outdoor workers who want a pocketable drive with ample capacity that can withstand the elements and won't cause its owner to lose sleep if it's lost or stolen.
Who It's For
Business travelers: The Samsung Portable SSD T7 Shield is a durable and secure choice for road warriors. It's lightweight and easy to travel with, though on the slow side compared with many non-rugged SSDs. The T7 Shield's effectively uncrackable AES hardware-based encryption keeps your data safe from prying eyes, and the drive is impervious to dust, water-resistant, and built to withstand tumbles.
Nature lovers: The T7 Shield is the perfect SSD companion for a wilderness trek. It is small, lightweight, water-resistant, impervious to dust, and cushioned against drops. The Shield is compatible with nearly any computer, but its AES hardware-based encryption ensures that your data remains safe even if the drive is lost or stolen.
Specs & Configurations
Bus Type PCI Express 3.0 x2 Capacity (Tested) 2 Interface (Computer Side) USB Type-A or Type-C Internal or External External NAND Type MLC NVMe Support Rated Maximum Sequential Read 1050 Rated Maximum Sequential Write 1000 Warranty Length 3 Learn More Samsung Portable SSD T7 Shield Review -
-
![Apricorn Aegis NVX]()
Best Keypad-Secured External SSD for Most UsersApricorn Aegis NVX
Pros & Cons
Why We Picked It
Thanks to its NVMe internals and USB 3.2 Gen 2 support, the Apricorn Aegis NVX has one thing that no other SSDs with its wealth of protective features can offer: the speed you’d expect from a typical consumer-level external SSD. This device, which has a built-in keypad for access, requires no software to run and can be used with any device with a USB-C or USB-A port. It’s easy to set up an administrator password, and you can add passwords for multiple users. The drive's AES-XTS 256-bit encryption is effectively impervious to brute-force attacks. The NVX is also shockproof, waterproof, and dustproof.
Who It’s For
Frequent travelers who carry sensitive data: The keypad-secured Aegis NVX is an excellent choice for travelers or outdoor enthusiasts. It is ruggedized with an IP67 rating, meaning it is impermeable to dust and highly water-resistant, and is also crushproof and shockproof. Its hyper-secure AES-XTS 256-bit encryption guards your data should the drive be lost or stolen.
Users who value both speed and security: Hyper-secure SSDs usually prove plodding in our benchmarking, but the NVX is proof positive that drive security needn't come at the expense of speed. To our delight, it tallied test scores typical of a USB 3.2 Gen 2 SSD. And along with speed and security, the NVX is rugged, able to withstand up to 6,500 pounds of pressure while being water-resistant and impervious to sand or dust.
Specs & Configurations
Bus Type PCI Express 3.0 x4 Capacity (Tested) 500 Interface (Computer Side) USB Type-A or Type-C Internal or External External NAND Type TLC NVMe Support Rated Maximum Sequential Read 1000 Rated Maximum Sequential Write 1000 Warranty Length 3 Learn More Apricorn Aegis NVX Review -
-
![iStorage DiskAshur M2]()
Best Compact, Ruggedized External SSDiStorage DiskAshur M2
Pros & Cons
Why We Picked It
Worried about your data falling into the wrong hands, falling onto a rocky trail, or dunking in a puddle or pond? The iStorage DiskAshur M2 is compact for an ultra-secure SSD, and it’s built to survive a half-hour bath in 1.5 meters of water or being run over by a 2.7-ton truck. Security highlights include FIPS 140-3 Level 3 compliance, AES-XTS 256-bit hardware-based encryption, and the encasement of its drive mechanism in epoxy resin—any attempt to pry inside to get to the chips will result in their destruction. It also features a built-in numeric keypad, ensuring that your files can only be accessed with the proper user or administrator PIN. You can configure the M2 as a read-only drive and create a self-destruct code that permanently erases the data, encryption key, and all PINs.
Who It's For
Outdoorsy types: Thanks to its IP68 ingress protection rating, making it as rugged as any SSD we've tested, you can take the DiskAshur M2 on a trip or hike with you and know that it will survive anything Mother Nature might throw its way. With AES-XTS 256-bit hardware-based encryption, your data will remain secure even if it is lost or stolen, as it will withstand any attempt by others to access it.
Security fiends: The FIPS 140-3 Level 3-compliant M2 is bristling with security features.This keypad-protected device is protected by essentially uncrackable AES-XTS 256-bit hardware-based encryption. Any attempt to breach the drive mechanism will result in its destruction, and you can create a self-destruct code that obliterates the data, encryption key, and all pins at your command.
Specs & Configurations
Bus Type Serial ATA Capacity (Tested) 1 Interface (Computer Side) USB Type-A Internal or External External NAND Type MLC Rated Maximum Sequential Read 370 Rated Maximum Sequential Write 370 Warranty Length 3 Learn More iStorage DiskAshur M2 Review -
-
![DataLocker DL4 FE]()
Best Keypad-Secured External SSD for EnterprisesDataLocker DL4 FE
Pros & Cons
Why We Picked It
The DataLocker DL4 FE external SSD features all the necessary security measures and certifications to meet rigorous standards of corporations and governments, ensuring the protection of sensitive or confidential data. Simply put, no unauthorized person will be able to breach its encryption and other safeguards. If it were to be lost or stolen, the drive can be remotely disabled and wiped clean.
As for protection from the elements, the DL4 FE has some ruggedness credentials, but it overall falls well short of some rugged drives in terms of liquid resistance. And speed-wise, the DL4 FE is plodding, even compared with other security-centric drives. It's all about the lockdown features here: The DL4 FE receives high marks for its comprehensive drive security, and it’s a great choice for organizations where data protection is paramount.
Who It's For
Organizations with strict security requirements: The DataLocker DL4 FE meets the stringent security requirements of most corporations, the military, and governmental agencies. Among its credentials are that it is FIPS 140-3 certified and provides 256-bit AES-XTS hardware encryption. Also, the drive's microprocessor is certified secure at the Common Criteria EAL 5+ level.
IT fleet managers: The DL4 FE is particularly well-suited for businesses or institutions that require multiple secure drives. They can be easily integrated into DataLocker’s SafeConsole fleet-management system.
Specs & Configurations
Bus Type Serial ATA Capacity (Tested) 1 Interface (Computer Side) USB-C Internal or External External Rated Maximum Sequential Read 150 Rated Maximum Sequential Write 100 Warranty Length 3 Learn More DataLocker DL4 FE Review -
-
![iStorage DiskAshur DT2]()
Best Encrypted Desktop Hard DriveiStorage DiskAshur DT2
Pros & Cons
Why We Picked It
With cavernous capacity and a minuscule cost per gigabyte compared with security-centric SSDs, the iStorage DiskAshur DT2—a desktop-style hard drive—is a formidable solution for corporations, institutions, and agencies needing to keep sensitive data safe. With a slew of protective features and boasting an impressive set of certifications, this PIN-authenticated external drive is easy for authorized users to access but impervious to unauthorized attempts to break in.
As a desktop hard drive, it is not USB-powered; instead, it must be plugged into its included AC adapter. As it will generally be used in an office or server room setting, it lacks any ruggedness features to speak of—the protection it offers is from human threats.
Who It's For
Users with a lot of data to secure: The DT2 isn't slim or particularly portable like many external drives—in form, it’s a classic desktop spinning hard drive. As such, it offers two main advantages: it's available in massive capacities (now up to 22TB), and at a relatively low cost per gigabyte.
Professionals: The DT2 is a good choice for deskbound employees who handle copious amounts of sensitive data, such as financial, medical, and personnel records. It is easy for an authorized user to unlock and access using its built-in keypad, and it has a slew of security features and certifications to ensure that it'll keep bad guys out.
Specs & Configurations
Cables Included USB-B to USB-A Capacity 14 Drive Type External Portable Spin Rate 7200 System-Side Interface USB 3.2 Warranty (Parts/Labor) 3 Learn More iStorage DiskAshur DT2 Review -
-
![WD My Passport, Works with USB-C (6TB)]()
Best Encrypted Portable Hard DriveWD My Passport, Works with USB-C (6TB)
Pros & Cons
Why We Picked It
The WD My Passport, Works with USB-C is now available at the highest capacity (6TB) of any pocketable, spinning hard drive on the market today. It includes Acronis True Image backup software, and its 256-bit AES hardware-based encryption is the gold standard in encryption for consumer drives, essentially uncrackable in the face of a brute-force attack. Despite its name, it packs a USB Micro-B port—its included cable is USB Micro-B-to-USB-A, plus an A-to-C dongle for connecting to a computer's USB-C port. Its speeds on our benchmarks were actually a little faster than the 6TB WD My Passport Ultra with its native USB-C port—though still far below portable SSD speeds—and it is priced a little lower.
Who It’s For
Bargain hunters: Spinning hard drives survive in this age of superfast portable SSDs due to their low cost per gigabyte, and the 6TB WD My Passport, Works with USB-C lists at a minuscule 3.2 cents per gig while bringing the highest capacity now available in a portable hard drive.
Travelers: Users who need to securely store and access large volumes of data while on the road will appreciate the 6TB WD My Passport.This drive is a winner for users who seek high capacity and good value in a platter hard drive, and appreciate its software and security features, including Acronis True Image backup software and 256-bit AES encryption.
Specs & Configurations
Backup Software Included? Cables Included USB Micro-B-to-A Cables Included USB-A-to-C adapter Capacity 6 Drive Type External Portable Spin Rate 5400 System-Side Interface USB 3.2 USB Powered? Warranty (Parts/Labor) 3 -
Compare Specs
Our Pick | ||||||||||
Rating |
4.5 Outstanding |
4.0 Excellent |
4.0 Excellent |
4.0 Excellent |
4.0 Excellent |
4.0 Excellent |
4.0 Excellent |
4.5 Outstanding |
4.0 Excellent |
4.0 Excellent |
Best For | Best Encrypted External SSD for Most Users | Best Ruggedized Encrypted External SSD for Most Users | Best Keypad-Secured External SSD for Most Users | Best Compact, Ruggedized External SSD | Best Keypad-Secured External SSD for Enterprises | Best Encrypted Desktop Hard Drive | Best Encrypted Portable Hard Drive | Best Encrypted External SSD for Most Users | Best Ruggedized Encrypted External SSD for Most Users | Best Keypad-Secured External SSD for Most Users |
Warranty Length | 5 | 3 | 3 | 3 | 3 | 5 | 3 | 3 | ||
Warranty (Parts/Labor) | 3 | 3 | ||||||||
USB Powered? | ||||||||||
System-Side Interface | USB 3.2 | USB 3.2 | ||||||||
Spin Rate | 7200 | 5400 | ||||||||
Rated Maximum Sequential Write | 1050 | 1000 | 1000 | 370 | 100 | 1050 | 1000 | 1000 | ||
Rated Maximum Sequential Read | 1050 | 1050 | 1000 | 370 | 150 | 1050 | 1050 | 1000 | ||
NVMe Support | ||||||||||
NAND Type | TLC | MLC | TLC | MLC | TLC | MLC | TLC | |||
Internal or External | External | External | External | External | External | External | External | External | ||
Interface (Computer Side) | USB-C | USB Type-A or Type-C | USB Type-A or Type-C | USB Type-A | USB-C | USB-C | USB Type-A or Type-C | USB Type-A or Type-C | ||
Drive Type | External Portable | External Portable | ||||||||
Capacity (Tested) | 2 | 2 | 500 | 1 | 1 | 2 | 2 | 500 | ||
Capacity | 14 | 6 | ||||||||
Cables Included | USB-B to USB-A | USB Micro-B-to-A, USB-A-to-C adapter | ||||||||
Bus Type | PCI Express 3.0 x2 | PCI Express 3.0 x2 | PCI Express 3.0 x4 | Serial ATA | Serial ATA | PCI Express 3.0 x2 | PCI Express 3.0 x2 | PCI Express 3.0 x4 | ||
Backup Software Included? |
Buying Guide: The Best Secure SSDs and Hard Drives for 2026
A Guide to Hardware-Based Drive Encryption
Encryption is the process of taking readable text or data and encoding it using a key—a random string of bits, generated by an encryption algorithm—so that only someone in possession of the key can decrypt it. Most mainstream encrypted SSDs and hard drives provide what's known as AES 256-bit hardware-based encryption, while most hyper-secure keypad-accessible drives utilize XTS-AES 256-bit hardware-based encryption.
For good reason, AES is considered the gold standard in drive encryption. Even the standard 256-bit AES encryption (which uses a 256-bit key) is essentially uncrackable. It takes the data through multiple permutation rounds in the encryption process. Using brute-force methods—say, a supercomputer trying one key after another in an effort to decrypt it—could take an average of many trillions of years to break it—far longer than the current age of the universe. That should give you an idea of how ironclad AES encryption is, at least in the face of a brute-force attack.
(Credit: Molly Flores)Encrypted mainstream external drives often let users create a password-protected vault into which they can drop files or folders to be encrypted (by AES or other methods). And even if your drive lacks native encryption, there are many encryption utilities you can install to make your files unreadable (and, in many cases, invisible) to others.
Physical Drive Security: Keypads, Fingerprint Scanners, and More
You can also find drives with a secure physical layer. Keypad-equipped drives, for one, are platform-independent, require no software to run, and can work with almost any computer as long as it has a USB port. When the drive is unattached to a computer, it is locked and generally secured with XTS-AES full-disk encryption. When you attach it and enter the password, you unlock the drive, and it operates as any other drive. (In most business situations, an administrator sets some access rules and creates an admin password for the drive, and one or more users, each with their own user-level password, can access the drive.) When you disconnect it, it locks, and can only be opened with the password. Such drives usually also have other security measures in addition to encryption, which we will discuss below.
(Credit: Joseph Maldonado)While some drives have press-button keypads, some are virtual pads, responding to either a finger or stylus. With virtual keypads, often the letters are scrambled each time you plug the drive in. This prevents an intruder from guessing the password from fingerprints left on the pad or by looking over your shoulder at your keystrokes.
A downside of full-disk encryption is that it can slow a drive's performance significantly compared with an equivalent non-encrypted drive. These hyper-secure SSDs and hard drives, chock-full of protective features, also tend to cost a lot more per gigabyte than non-encrypted or consumer-level encrypted drives. For many users, the security and peace of mind that such drives provide is well worth the extra cost, and hyper-secure storage features are required by many organizations in both the public and private sectors.
(Credit: Joseph Maldonado)Beyond traditional password and keypad protection, at least one drive maker has turned to biometrics. The Samsung Portable SSD T7 Touch has a built-in fingerprint reader. From the included software, you can set the drive to open at the touch of the right fingerprint.
Security Features Beyond Encryption: FIPS and Friends
Much of the market for hyper-secure keypad-enabled drives is made up of the military, government agencies, organizations, and corporations that tend to have exacting criteria when it comes to the security of the products they are permitted to purchase. Primarily, this means compliance with the Federal Information Processing Standards (FIPS), computer security and cryptography standards issued by the National Institute of Standards and Technology (NIST).
SSD makers often tout their keypad SSDs as meeting either the FIPS 140 Level 2 or 3 standards. The FIPS 140 standard covers the entire "cryptographic module"—encompassing the drive's full set of hardware, software, and firmware that implements approved security functions like cryptographic algorithms and key generation. A key aspect of FIPS 140 Level 3 is the protection of the module from physical attacks or tampering, by methods such as embedding it in epoxy. If the drive mechanism is breached, the chips will be damaged in the process, effectively destroying both the drive and the data it holds.
(Credit: Molly Flores)You will also hear of drives being FIPS 197-compliant. FIPS 197 covers only the encryption, and is today better known by the name of the algorithm that FIPS Publication 197 introduced: Advanced Encryption Standard, or AES. So a FIPS 197-compliant drive is simply one that uses AES hardware-based encryption.
Another feature that drive-makers tout and clients covet is the inclusion of a Common Criteria EAL5+ (hardware-certified) secure microprocessor. Such a device, through a combination of true random number generation and built-in cryptography, further protects against drive tampering.
Ruggedized Drive Features: Keeping Your Data High and Dry
While secure and encrypted drives can protect your data from falling into the hands of thieves, scam artists, and other bad actors, rugged drives provide protection from the elements (dust, sand, and water) as well as from tumbles or other accidents. A good percentage of secure drives are also ruggedized; we think of encryption and ruggedization as two sides of the same coin. We have a separate roundup of rugged drives at the preceding link.
Whether drive ruggedness is important depends entirely on your use case. If you seldom take your external drive outside of your home or office, it may not be a priority. But if you'll be using it, say on an oil rig or in a wilderness video shoot, you'll want some defense against water, sand, or soil getting into the drive.
(Credit: Joseph Maldonado)Sand-fast and water-fast drives usually carry a two-number ingress protection (IP) rating. The first number, ranging from 0 (no protection) to 6 (complete protection) rates the drive's imperviousness to dust and particulate matter. The second number rates protection from water ingress, with 8 indicating that the drive can survive being immersed in more than one meter of water. Some drives are also drop-proof (impervious to falls), shockproof, or crush-proof (able to survive being run over by, say, a two-ton truck). The manufacturer's description of a drive will specify an IP rating and other protections it offers. If no IP rating or other rating information is given, you can safely assume that the drive is not designed to be rugged.
Ready to Buy the Right Secure Drive for You?
Whether you want to encrypt a folder for personal or business files on your portable SSD, or you're tasked with requisitioning hyper-secure drives for the NSA, you'll find many options to choose from. At the minimum, all of the products here feature AES 256-bit hardware-based encryption. Some go no farther than encryption, while others add keypad or fingerprint access and a host of other protective features. Although it's not strictly a security feature, many encrypted drives are also rugged, shielding the physical drive from storms, tumbles, or mishaps in the wild or on the factory floor. For more on safeguarding your data, check out our guides to the best backup software and the best security suites.