Microsoft retires SMS and voice MFA on 1 February 2027. What actually qualifies

IronSightsStore
Apricorn Aegis NVX 2TB, product photo

Apricorn

Apricorn Aegis NVX 2TB

USB-C

Portable 2TB SSD that encrypts itself: a 256-bit AES key, an on-board PIN pad, and no software to install on the host.

$2,498.95incl. GST
On back order, ships in about 7 business days

On back order — ships in about 7 business days

We order it in from our distributor as soon as you buy. We charge today and confirm your order straight away; if that timing ever slips we will tell you, and you can cancel for a full refund any time before it ships.

Need it urgently? Get in touch and we will chase priority stock.

Postage
$9.95, free over $1,000
Delivery
2 to 6 business days
Returns
30 days, plus ACL rights
Invoice
Tax invoice on dispatch

“We engaged IronSights to help secure our Microsoft 365 environment, and the results have been outstanding. From start to finish, the process was handled with professionalism, clear communication, and deep technical expertise. The assessment gave us clarity on our risks and a practical path forward.”

Andrew, Technical Architect & CTOTechnology ConsultancyA client whose Microsoft 365 we secure

Buying for a team? We advise on which key fits and run the rollout, enrolment and Conditional Access included. Talk to us.

Good fit if

  • Regulated and government teams that need FIPS 140-2 Level 3 storage
  • Staff on locked-down SOEs who cannot install encryption software
  • Field backups and sensitive working sets that travel between sites
  • Moving large data across mixed Windows, macOS and Linux machines

Look elsewhere if

  • Buyers who just want cheap bulk storage
  • Teams that want cloud-synced collaboration
  • People who won't keep PIN discipline, since a lost PIN wipes the data
  • Anyone who needs far less than 2TB (smaller NVX sizes exist)

The Aegis NVX is a portable SSD that handles its own encryption. A 256-bit AES-XTS key lives on the drive, and every read and write passes through it in real time. You unlock it by typing a PIN on the drive's own keypad, not on the computer, so no password touches the host and there is nothing to install: no app, no driver, no agent. Once unlocked, it behaves like ordinary storage on anything with a USB-C port.

Because the encryption is self-contained, the drive does not care what it is plugged into. That helps if your fleet runs a locked-down standard operating environment where staff cannot install software, or if you move data between Windows, macOS, Linux and equipment that has little more than a USB port. There is no management console to stand up and no per-machine setup to keep in step.

For regulated and government buyers, the Aegis line is FIPS 140-2 Level 3 validated, and the controls target real handling risk. You can set separate admin and user PINs, force a fresh PIN on first use, and switch the drive to read-only. If someone tries to guess their way in, the brute-force defence wipes the key after a set number of wrong attempts, which leaves the contents as noise rather than recoverable data.

That last point matters. A drive of client records that goes missing is a very different conversation under the Notifiable Data Breaches scheme when the data was hardware-encrypted and the key is gone. Our take: buy this where data genuinely needs to travel and genuinely needs protecting, such as offsite backups, incident evidence or sensitive project files.

At 2TB this is the largest NVX, so it suits sizeable working sets rather than a handful of documents. It is not a cheap bulk drive, and it is not built for cloud collaboration. Treat the PIN with respect, too: the wipe that stops a thief will also erase your own data if the PIN is lost, so record admin credentials somewhere sensible before you hand drives out.

Specifications

Capacity
2TB (largest NVX)
Form factor
Portable SSD with on-board PIN keypad
Interface
USB-C
Encryption
Real-time 256-bit AES-XTS, performed on-device
Validation
FIPS 140-2 Level 3 (Aegis line)
Authentication
On-drive PIN; separate admin and user PINs
Brute-force defence
Encryption key wiped after a set number of wrong PINs
Access controls
Read-only mode and forced enrolment; no software or drivers required

In the Apricorn Aegis encrypted storage

Same firmware and the same protocols across the range. What changes is the connector and whether it taps a phone.