Category Guide

Security Keys and Dongles

Hardware authentication keys, encrypted storage dongles, and software protection keys explained – what they are and when you need them.

Hardware authentication keys

A hardware security key is a physical device used for two-factor authentication (2FA). Instead of entering a code sent to your phone, you plug in or tap the key. This is significantly more secure than SMS or app-based 2FA because the key cannot be phished – it verifies the domain it is authenticating against and will not respond to a fake login page.

The dominant standard is FIDO2/WebAuthn, supported by Google, Microsoft, Apple, and most major services. Hardware keys that implement FIDO2 work as passkeys and can replace passwords entirely on supported services.

YubiKey and alternatives

YubiKey (made by Yubico) is the best-known hardware security key brand. The YubiKey 5 series supports FIDO2, U2F, TOTP, PGP, and PIV – covering almost every authentication use case. The YubiKey 5C NFC is the most versatile for 2026: USB-C connection for laptops, NFC for phones.

Alternatives include the Google Titan Security Key (competitive on price, limited to FIDO2), the OnlyKey (open source, stores multiple credentials), and Token2 keys (competitively priced, FIDO2 compliant).

Who needs one: Anyone with a high-value account – email, banking, crypto, business systems. IT administrators. Anyone who has been phished before. Remote workers accessing corporate systems. Security keys are not expensive insurance against account takeover.

Encrypted storage dongles

Encrypted USB drives (also called secure storage dongles) contain hardware-based AES encryption. Unlike software-encrypted drives, the encryption happens in dedicated hardware – meaning the drive is protected even if the encryption software is bypassed. Kingston IronKey and Apricorn Aegis are the established brands. PIN entry is typically done on a physical keypad on the device itself, keeping credentials off the computer entirely.

Software licence dongles

Software protection dongles (HASP keys, Sentinel keys) are required to run certain professional applications – CAD software, audio production suites, broadcast systems, and specialist engineering tools. The application checks for the dongle at launch and refuses to run without it. These are issued by the software vendor and are not available separately – they come with the software licence.

If you lose a software licence dongle, contact the software vendor immediately. Replacement is possible but typically requires proof of purchase and a fee. These dongles cannot be replaced by a third-party device.