Microsoft retires SMS and voice MFA on 1 February 2027. What actually qualifies

IronSightsStore
Apricorn Aegis Padlock DT 10TB, product photo

Apricorn

Apricorn Aegis Padlock DT 10TB

USB-A

A hardware-encrypted 3.5-inch desktop drive with its own PIN keypad and 256-bit AES-XTS, sized for large on-site backups and archives.

$1,620.95incl. GST
On back order, ships in about 7 business days

On back order — ships in about 7 business days

We order it in from our distributor as soon as you buy. We charge today and confirm your order straight away; if that timing ever slips we will tell you, and you can cancel for a full refund any time before it ships.

Need it urgently? Get in touch and we will chase priority stock.

Postage
$9.95, free over $1,000
Delivery
2 to 6 business days
Returns
30 days, plus ACL rights
Invoice
Tax invoice on dispatch

“We engaged IronSights to help secure our Microsoft 365 environment, and the results have been outstanding. From start to finish, the process was handled with professionalism, clear communication, and deep technical expertise. The assessment gave us clarity on our risks and a practical path forward.”

Andrew, Technical Architect & CTOTechnology ConsultancyA client whose Microsoft 365 we secure

Buying for a team? We advise on which key fits and run the rollout, enrolment and Conditional Access included. Talk to us.

Good fit if

  • On-site backups and archives that must stay encrypted at rest
  • Regulated buyers who need FIPS 140-2 Level 3 encryption
  • Sites that want no software, app or driver on the host
  • A fixed, high-capacity drive where storage beats portability

Look elsewhere if

  • Staff who need a pocketable, portable drive
  • Setups with no mains power at the point of use
  • Anyone needing central key management or remote PIN reset
  • Cloud-only backup with no local storage target

The Aegis Padlock DT is a 3.5-inch desktop hard drive that encrypts everything written to it in real time with 256-bit AES-XTS. The encryption runs on the drive itself, not on your computer. You unlock it with a PIN on the keypad built into the case, so nothing is typed into the host and there is no software, app or driver to install. That makes it OS- and platform-independent: plug it into Windows, macOS or Linux and it works as a standard drive.

Because the PIN never touches the host, a keylogger or compromised workstation has nothing to capture. Guess the PIN too many times and the brute-force defence wipes the encryption key, so the data becomes unrecoverable rather than merely locked. You can set separate admin and user PINs, force the drive into read-only mode, and use forced enrolment so a user sets their own PIN before first use.

The Aegis line is FIPS 140-2 Level 3 validated, which helps if you handle regulated data or need a defensible control for encryption at rest. For an Australian business weighing its Notifiable Data Breaches exposure, an archive whose contents are cryptographically useless once the key is wiped is a practical way to keep it off the breach ledger.

This is the desktop model, so it is mains-powered rather than bus-powered and connects over USB. It is built to sit on a shelf or under a desk, not to travel. At 10TB it suits on-site backups and archives where capacity matters more than being able to carry it around.

Our take: buy it as a fixed backup or archive target you want encrypted without relying on host software or the cloud. It is not for staff who need something pocketable, and it does no key management for you. There is no console, no directory integration and no remote reset, so a lost PIN means lost data. Record the admin PIN somewhere safe and treat recovery as your responsibility.

Specifications

Form factor
3.5-inch desktop external hard drive with integrated keypad
Capacity
10TB
Encryption
Real-time 256-bit AES-XTS, performed on the device
Authentication
PIN entered on the drive's on-board keypad
Certification
FIPS 140-2 Level 3 validated (Aegis line)
Access controls
Separate admin and user PINs, read-only mode, forced enrolment
Brute-force defence
Wipes the encryption key after a set number of wrong PINs
Power and interface
Mains-powered (not bus-powered), USB

In the Apricorn Aegis encrypted storage

Same firmware and the same protocols across the range. What changes is the connector and whether it taps a phone.