Microsoft retires SMS and voice MFA on 1 February 2027. What actually qualifies

IronSightsStore
Apricorn Aegis NVX 500GB, product photo

Apricorn

Apricorn Aegis NVX 500GB

USB-C

Hardware-encrypted 500GB portable SSD with an onboard keypad: 256-bit AES-XTS, FIPS 140-2 Level 3, no software, works on any OS.

$876.95incl. GST
On back order, ships in about 7 business days

On back order — ships in about 7 business days

We order it in from our distributor as soon as you buy. We charge today and confirm your order straight away; if that timing ever slips we will tell you, and you can cancel for a full refund any time before it ships.

Need it urgently? Get in touch and we will chase priority stock.

Postage
$9.95, free over $1,000
Delivery
2 to 6 business days
Returns
30 days, plus ACL rights
Invoice
Tax invoice on dispatch

“We engaged IronSights to help secure our Microsoft 365 environment, and the results have been outstanding. From start to finish, the process was handled with professionalism, clear communication, and deep technical expertise. The assessment gave us clarity on our risks and a practical path forward.”

Andrew, Technical Architect & CTOTechnology ConsultancyA client whose Microsoft 365 we secure

Buying for a team? We advise on which key fits and run the rollout, enrolment and Conditional Access included. Talk to us.

Good fit if

  • Teams moving large, sensitive data between sites or offline systems
  • Regulated and government buyers who need encryption on the media itself
  • Field work where you can't trust the host machine
  • Anyone who wants access control kept off the host and on the drive

Look elsewhere if

  • Data that already lives in Microsoft 365 or a managed cloud
  • Occasional transfers of small files (the flash 3NX is cheaper)
  • Anyone treating it as a backup or archive on its own

The Aegis NVX is a portable SSD that encrypts everything written to it in hardware, in real time, using 256-bit AES-XTS. You unlock it by entering a PIN on the keypad built into the drive itself, then plug it into whatever you're using. There's no app, driver or client to install and nothing to set up on the host, so it behaves the same on Windows, macOS or Linux, on anything with a USB-C port.

Because the PIN goes into the drive and the encryption runs on the drive, the host computer never sees your credential. A keylogger or a compromised machine has nothing to capture, and the keys and authentication stay inside the unit.

For whoever manages the fleet, the NVX supports separate admin and user PINs, read-only modes and forced enrolment, so you can issue a drive to staff without handing over full control. A brute-force defence wipes the encryption key after a set number of wrong attempts, which turns a lost or stolen drive into dead weight rather than an incident. The Aegis line is FIPS 140-2 Level 3 validated. That matters most when you're moving data that would be painful to disclose under the Notifiable Data Breaches scheme.

The NVX is the quick member of the family. It's an SSD rather than the flash-based 3NX, so it's built to shift larger encrypted data sets fast over USB 3.2, with the same integrated keypad and no-software approach.

Our take: buy it if you regularly move sizeable, sensitive data between sites, machines or air-gapped environments and you want the protection to travel with the media rather than depend on the endpoint. It suits regulated buyers and field work where you can't assume the host is clean. Skip it if your files live in Microsoft 365 or another managed cloud where encryption at rest is already handled, or if you only shuttle the odd small document; the 3NX flash drive covers that. It's secure transport and a working drive, not a backup system on its own.

Specifications

Encryption
256-bit AES-XTS, hardware-based, real time
Authentication
PIN entered on the drive's onboard keypad (no host software)
Validation
FIPS 140-2 Level 3 (Aegis line)
Drive type
Portable SSD (faster than the flash 3NX line)
Capacity
500GB
Interface
USB-C (USB 3.2)
Access controls
Separate admin and user PINs, read-only mode, forced enrolment
Tamper defence
Brute-force key wipe after a set number of wrong PINs

In the Apricorn Aegis encrypted storage

Same firmware and the same protocols across the range. What changes is the connector and whether it taps a phone.