Microsoft retires SMS and voice MFA on 1 February 2027. What actually qualifies

IronSightsStore
Apricorn Aegis Secure Key 3NXC 256GB, product photo

Apricorn

Apricorn Aegis Secure Key 3NXC 256GB

USB-C

Hardware-encrypted USB-C flash drive with an on-board keypad and 256-bit AES. FIPS 140-2 Level 3, no software to install. 256GB.

$876.95incl. GST
On back order, ships in about 7 business days

On back order — ships in about 7 business days

We order it in from our distributor as soon as you buy. We charge today and confirm your order straight away; if that timing ever slips we will tell you, and you can cancel for a full refund any time before it ships.

Need it urgently? Get in touch and we will chase priority stock.

Postage
$9.95, free over $1,000
Delivery
2 to 6 business days
Returns
30 days, plus ACL rights
Invoice
Tax invoice on dispatch

“We engaged IronSights to help secure our Microsoft 365 environment, and the results have been outstanding. From start to finish, the process was handled with professionalism, clear communication, and deep technical expertise. The assessment gave us clarity on our risks and a practical path forward.”

Andrew, Technical Architect & CTOTechnology ConsultancyA client whose Microsoft 365 we secure

Buying for a team? We advise on which key fits and run the rollout, enrolment and Conditional Access included. Talk to us.

Good fit if

  • Staff carrying regulated or sensitive files off-site
  • Laptops and tablets that are USB-C only, no USB-A
  • Locked-down environments where you can't install software
  • Buyers who want PIN-based, on-device encryption

Look elsewhere if

  • Teams needing central key management or remote wipe
  • Bulk backup or imaging whole machines (256GB, single drive)
  • Anyone likely to forget the PIN, since wrong tries wipe the key

The Aegis Secure Key 3NXC is a hardware-encrypted USB flash drive. Encryption happens on the drive itself, in real time, using 256-bit AES-XTS. You unlock it by entering a PIN on the keypad built into the device, so nothing is ever typed on the host computer. There is no software, app or driver to install.

Because authentication and encryption live on the drive rather than the host, it is genuinely OS- and platform-independent. It behaves the same whether you plug it into a managed Windows laptop, a Mac or a Linux machine. No admin rights, no agent, nothing for your IT team to package or maintain.

The security controls are the reason to buy one. You can set separate admin and user PINs, switch the drive to read-only mode, and use forced enrolment so a new user must set their own PIN before first use. If someone keeps guessing wrong, the brute-force defence wipes the encryption key after a set number of failed attempts, leaving the contents unrecoverable. The Aegis line is FIPS 140-2 Level 3 validated.

The 3NXC is the USB-C version of the 3NX. If your laptops and tablets have dropped USB-A, this plugs straight in without an adapter. At 256GB it is sized for documents, keys and copies of sensitive material you carry off-site, not for imaging whole machines.

Our take: this suits anyone who carries regulated or sensitive data outside the office, such as client records or files that would trigger the Notifiable Data Breaches scheme if they went missing. It is a poor fit if you need central key management, remote wipe or fleet reporting, because each drive is self-contained. It is also unforgiving by design: lose the PIN past the retry limit and the data is gone. Treat it as one encrypted device you control, not a managed backup system.

Specifications

Encryption
256-bit AES-XTS, performed on the device in real time
Unlock method
On-board PIN keypad (nothing typed on the host)
Validation
FIPS 140-2 Level 3 (Aegis line)
Access controls
Separate admin and user PINs, read-only mode, forced enrolment
Brute-force defence
Wipes the encryption key after a set number of wrong PINs
Capacity
256GB
Connector
USB-C
Form factor
Rugged flash drive with integrated keypad

In the Apricorn Aegis encrypted storage

Same firmware and the same protocols across the range. What changes is the connector and whether it taps a phone.