Our readers keep the lights on and the coffee maker working hard! As an Amazon Associate, I earn from qualifying purchases.
Specs are compiled from manufacturer listings and verified buyer reviews and can change over time — please confirm the key details on the product page before buying.
Losing a portable drive is bad enough — losing one packed with tax returns, client files, or family photos without a lock on the data is a whole other level of stress. An encrypted external hard drive solves that exact worry, scrambling your files so only your password can open up them. The trick is picking one that pairs real security with a transfer speed you can actually live with.
I’m Mohammad Maruf — the founder and writer behind Gardening Beyond. This guide is built by comparing the manufacturers’ published specifications and the patterns across verified customer reviews, so you get each pick’s real strengths and trade-offs instead of marketing spin.
Whether you carry sensitive client data or just want to keep your personal archive from prying eyes, choosing the right encrypted external hard drive depends on balancing hardware encryption, durability, and everyday speed.
Our Picks at a Glance



How To Choose The Best Encrypted External Hard Drive
The market is split between two very different approaches: software encryption (a program on your PC locks the data) and hardware encryption (the drive itself does the scrambling). Software encryption works in a pinch, but it ties you to a specific computer and can slow down transfers. Hardware encryption runs on a dedicated chip inside the drive, so the encryption happens in the background with zero performance hit and no software installation needed — the drive works on any machine you plug it into, as long as you have the password.
Hardware vs. Software Encryption
Hardware encryption is faster, more portable, and generally more secure because the encryption key never leaves the drive. Software encryption, like what WD’s built-in utility provides, is still effective but requires the software to be installed on each new computer you use — and it can be bypassed if someone connects the drive to a system that doesn’t run that software. For sensitive data, hardware encryption with a physical keypad (like the Apricorn Aegis Padlock) is the gold standard; for everyday personal use, software encryption on a well-known brand like WD My Passport is plenty.
Speed: HDD vs. SSD
Traditional hard drives (HDDs) top out around 120-140 MB/s over USB 3.0 — fast enough for backups and media storage. Solid-state drives (SSDs) like the SanDisk Extreme or Lexar ES3 hit 1000+ MB/s, which makes a real difference when you are editing video directly from the drive or moving large RAW photo libraries. The speed gap is significant: SSDs reach over 1000 MB/s while HDDs max out around 120 MB/s, so if you work professional file sizes, an SSD is worth the premium.
Durability and Portability
An encrypted drive is only secure if it also survives daily life. Look for drop protection ratings (2-meter or 3-meter for SSDs) and water/dust resistance like an IP65 rating. Rugged SSDs handle being tossed in a bag; traditional HDDs are more sensitive to bumps and need careful handling. Physical keypads (Apricorn) add another layer of toughness but also a slight bulk trade-off.
Quick Comparison
| Model | Best For | Capacity | Max Speed | Encryption Type | Amazon |
|---|---|---|---|---|---|
| SANDISK 1TB Extreme Portable SSD★ Best Overall | Best Overall Speed | 1 TB | 1050 MB/s | Hardware AES 256-bit | Amazon |
| Lexar ES3 1TB SSDSlim Speed | Ultra-Slim SSD | 1 TB | 1050 MB/s | Software AES 256-bit | Amazon |
| WD 5TB My Passport (Black)Mass Vault | Mass Storage | 5 TB | 5 Gbps | Hardware Encryption | Amazon |
| WD 2TB My Passport | Best Value Capacity | 2 TB | 5 Gbps | Hardware Encryption | Amazon |
| Seagate One Touch 2TB | Budget HDD with Encryption | 2 TB | USB 3.0 | Hardware Encryption | Amazon |
| Apricorn Aegis Padlock 1TB | Maximum Security | 1 TB | Up to 100 MB/s | Hardware AES 256-bit XTS | Amazon |
| WD 5TB My Passport (Blue) | Colorful 5TB Backup | 5 TB | 5 Gbps | Hardware Encryption | Amazon |
| Seagate One Touch 5TB | Premium Capacity HDD | 5 TB | USB 3.0 | Hardware Encryption | Amazon |
In‑Depth Reviews
1. SanDisk 1TB Extreme Portable SSD (Old Model)
Our pick — over 4.5★ from 91,000+ verified ratings; the strongest balance of quality and price.
The rugged SSD that marries pocket-friendly speed with proper hardware encryption.
This is the drive for anyone who moves large files between machines and wants the encryption to happen silently without any software installs — the included password protection uses 256-bit AES hardware encryption, so the drive locks on every disconnect without slowing down your workflow. The NVMe solid state performance reaches up to 1050MB/s read and 1000MB/s write, which means huge RAW photo libraries or 4K video clips transfer in seconds rather than minutes. Buyers report it is “still working great after a year” of heavy use, calling it fast, reliable, and perfectly sized for backing up photos and video.
Durability is a defining strength here. The drive is rated for up to 3-meter drop protection and carries an IP65 water and dust resistance rating, so a splash or a tumble off a desk is not a crisis. A handy carabiner loop on the corner lets you clip it to a backpack strap. At 1050MB/s read versus typical HDD encrypted drive speeds around 120 MB/s, this SanDisk is much faster and shrugs off shock that would kill a spinning-platter drive.
What owners come to appreciate most is the compact size — it slips into a pocket easily — and the universal USB-C connection that includes a USB-A adapter for older laptops. The drive does get warm during extended transfers, which is normal for high-speed SSDs and not a performance concern.
Where it shines
- Hardware AES 256-bit encryption with zero speed penalty
- 1050MB/s read speed — edit video directly from the drive
- Rugged: 3-meter drop + IP65 water/dust resistance
- Includes USB-C cable and USB-A adapter
Worth noting
- Gets warm during long file transfers
- 1TB capacity is smaller than HDD alternatives at this price point
- Requires USB 3.2 Gen 2 for full speed
Grab it if: you need a portable, drop-proof drive with hardware encryption that keeps up with a creative pro’s transfer speeds.
Consider the HDD instead if: you need 2TB+ of encrypted storage on a tighter budget and do not work with large video files.
2. Lexar ES3 1TB External SSD
A card-sized SSD that races at 1050MB/s while tucking your files behind 256-bit AES encryption.
The Lexar ES3 is first and foremost a pocket drive — it weighs just 42g and is only 10.5mm thick, making it smaller than a credit card and easy to forget in a jeans pocket. Despite the tiny frame, it delivers the same blistering USB 3.2 Gen 2 speeds as the SanDisk, hitting up to 1050MB/s read and 1000MB/s write. Data protection here comes via Lexar DataShield, a software-based 256-bit AES encryption utility. Since it is software, you do need to install the utility to lock and open up the drive, but the upside is that the drive itself remains lightweight and inexpensive.
Reliability is the aspect owners praise most — far and away the top positive thread in the feedback — with speed and quality running close behind. Buyers find it works instantly with a MacBook without any formatting, serves as a great Time Machine backup, and handles high-end games with zero latency. One owner sums it up: “Great external SSD. Works perfectly with my laptop. Pricey, but the very small size is worth the extra cost.”
Compatibility gets mixed marks — some users mention that not every device recognizes it immediately — but for standard PC, Mac, PS5, and Xbox use, it is plug-and-play. The all-aluminum build looks sleek in silver and feels more premium than the price suggests.
The standout spec: at 42g and 10.5mm, it is among the most portable encrypted SSDs you can buy while still matching the speed of drives that cost more.
Reach for this if: you value extreme portability and do not mind installing a software utility for encryption.
Look at the SanDisk instead if: you want hardware-based encryption that works on any computer without installing anything.
3. WD 5TB My Passport (Black)
Five terabytes of hardware-encrypted storage in a slim shell — the definition of a set-and-forget backup vault.
This is the 5TB version of the same My Passport formula that makes the 2TB model a bestseller, and it shares all the same DNA: a slim 2.5-inch form factor, built-in hardware encryption with password protection, and included device management software that adds a layer of defense against ransomware. Where it breaks away is sheer capacity — 5TB is enough to store years of photos, the full movie collection, and a complete document archive without juggling drives. The USB 3.1 interface delivers decent real-world transfers for large backups, though expect HDD-typical speeds around 130 MB/s rather than the SSD-tier numbers above.
The device management software is a point of debate among owners. Some find the auto-backup convenient and the password protection smooth; others run into issues with the software installation hanging or the WD Security utility failing updates on Windows 10. The broad consensus: the hardware itself is rock-solid — one loyalist with over 30 years of WD use calls it a “powerhouse external drive” — and the software is best treated as optional. You can ignore it and use the drive with your own backup tool while keeping the hardware encryption active.
At 5TB in a case that is actually slightly smaller than older 4TB models, it is impressively space-efficient. The build quality feels durable, the 3-year limited warranty adds confidence, and the slim profile slides into a laptop bag side pocket easily.
The honest trade-off: the encryption and backup software can be finicky, so plan to use the drive’s hardware lock only and handle backups with your preferred tool.
Best for: anyone who needs a single, huge, hardware-encrypted archive and does not rely on the bundled software.
skip it if: you edit video or RAW files directly from the drive — an SSD will be dramatically faster.
4. WD 2TB My Passport
The encrypted HDD that owners trust for the long haul — two terabytes, hardware lock, and zero drama.
This 2TB My Passport hits the balance where price per gigabyte meets hardware encryption without gimmicks. The drive uses WD’s onboard hardware encryption tied to a user-set password, and the included device management software adds a ransomware-defence layer as a bonus. For backups, photo archives, or offloading completed projects, 2TB goes a long way — about 500,000 high-resolution photos or 100 full-length movies. The USB 3.1 connection reaches up to 5Gbps, though real-world transfers on this mechanical hard disk hover around 120-130 MB/s, steady and predictable. Owners mention “no issues after a year in service,” and one owner uses two of them as a paired backup-and-mirror system, noting they cost “a fraction of the price of the Samsung T7 and twice the capacity.”
The most-discussed aspect is reliability — the drive just works, year after year, which is exactly what you want from an encrypted backup drive. A few owners hit a snag if they bought it for a Mac without checking compatibility (the drive ships NTFS-formatted for Windows, so a quick reformat to exFAT or Mac OS Extended is needed). The 3-year limited warranty is a solid backstop. Two minor omissions: no protective carrying case in the box, and the drive is not rated for drops like the SanDisk SSD — handle it with normal care.
If the 2TB seems tight, the 5TB and 6TB versions of the same drive are available and use the same proven hardware-encryption platform.
What owners love
- Hardware encryption with password protection included
- 2TB of reliable storage on a slim 2.5-inch chassis
- 3-year warranty and ransomware-defense software
- Great price per gigabyte vs. SSD encrypted drives
A couple of notes
- Formatted for Windows — requires reformatting for Time Machine on Mac
- No protective carrying case or drop-rating; treat it gently
Perfect for: a cost-conscious backup setup where 2TB is plenty and hardware encryption is non-negotiable.
Upgrade to 5TB if: you fill a terabyte faster than expected and want the same proven hardware encryption in a larger package.
5. Seagate One Touch 2TB
A brushed aluminum HDD with password-activated hardware encryption and a clean desk aesthetic.
Seagate’s One Touch line pairs the visual appeal of a polished aluminum enclosure with the same password-activated hardware encryption found on pricier business drives. The 2TB capacity is ideal for daily backups and media storage, and the USB 3.0 connection keeps transfer speeds adequate for a mechanical hard disk — expect around 120 MB/s, which owners find “a bit slow compared to SSD but work like a champ.” The real draw is the combination of looks and security: the minimalist metal shell looks at home on a modern desk, while the firmware-level password protection means the drive is locked the moment it is unplugged, with no software to install on the host computer. The drive works with Windows, Mac, and Chromebook laptops right from the start. It also bundles a one-year complimentary subscription to Mylio Create and a four-month membership to Adobe Creative Cloud Photography plan — a nice bonus if you edit photos. Seagate backs it with a limited warranty and includes Rescue Data Recovery Services, which can be a lifesaver if the drive ever fails. Owners note it works flawlessly on Windows 11 and call Seagate drives reliably tested over time. The main complaint is the lack of a disk activity LED — you have to listen for the spin to know it is working.
The key feature: a polished aluminum build that looks more like a premium accessory than a backup drive, with hardware encryption baked in.
Best for: anyone who wants an attractive, hardware-locked backup drive for a desk setup and does not need SSD-like speed.
Think twice if: you regularly move huge files — the HDD speed will feel slow compared to any SSD on this list.
6. Apricorn Aegis Padlock 1TB
The drive that asks for a PIN on its built-in keypad before the computer even sees it — no software, no compromises.
This is the most secure drive on the list by a clear margin. The Apricorn Aegis Padlock is a software-free, hardware-encrypted HDD with a wear-resistant alphanumeric keypad on the front. You set your own PIN directly on the keypad, and the drive is completely invisible to any computer until that PIN is entered. It uses a Military Grade FIPS PUB 197 Validated Encryption Algorithm in 256-bit AES XTS mode — the XTS variant adds extra protection against data tampering. The drive case is sealed from physical attacks by a tough epoxy coating, and it includes a brute-force self-destruct feature: after a configurable number of incorrect PIN attempts, the drive wipes itself. There is no software to install, no admin rights needed, so it works on Windows, Mac, and Linux instantly. Transfer speeds through USB 3.0 hit a steady 62 MB/s sustained, with bursts up to 100 MB/s — slower than an SSD but fast enough for documents and encrypted backups.
Reliability is the most-praised aspect by a wide margin, with ease of use close behind. Owners running HIPAA-compliant practices trust it for transporting confidential client files, and the customer support team is noted as responsive when issues like auto-lock on Windows 11 arise. The drive comes with a fitted carry case and an extra power cable for older USB ports that cannot deliver enough power. The honest trade-off: the drive locks itself if the computer goes into sleep mode, which requires re-entering the PIN — a minor friction in exchange for military-grade security. On a modern laptop with USB power saving, you may need to disable that setting to avoid frustrating re-locks during long transfers.
For anyone under regulatory compliance (HIPAA, GDPR, internal finance) or handling genuinely sensitive material, this Apricorn drive is the standard.
What makes it special
- 256-bit AES XTS hardware encryption with FIPS PUB 197 validation
- Physical PIN keypad — no software needed, works on any OS
- Brute force self-destruct and epoxy-sealed internals
- Includes carry case and power cable for legacy USB ports
The convenience cost
- Re-locks when computer sleeps — must re-enter PIN
- Transfer speeds (62 MB/s steady) are lower than SSDs
- Physical keypad adds slight bulk vs. a bare SSD
Choose this if: you need the highest level of physical and data security — no computer can access the drive without the keypad PIN.
Consider the WD My Passport instead if: your security needs are everyday privacy, not compliance-grade, and you prefer faster transfer speeds.
7. Seagate One Touch 5TB
Five terabytes of brushed metal storage with password-activated hardware encryption and a two-year data recovery plan.
The 5TB version of the Seagate One Touch takes the same polished aluminum design and password-activated hardware encryption from the 2TB model and scales the capacity for serious archivists. At 5TB, you can back up an entire family’s worth of computers or store a substantial media library in one slim, lockable package. It uses USB 3.0 for connectivity, which is fine for scheduled backups and media streaming, but the mechanical hard disk inside means real-world transfer speeds settle around 130 MB/s — noticeably slower than any SSD. Seagate includes a two-year Rescue Data Recovery Service plan with this model, which is a meaningful safety net if the drive ever fails physically; having that recovery service built into the price is a real advantage over competitors that charge separately. The minimalist brushed metal enclosure (Space Gray here) looks refined on a desk, and the drive works across Windows and Mac (reformatting needed for Time Machine).
The crowd-sourced feedback is largely positive — owners call it a good investment for secure, large-scale storage with password protection — but a few reports of the drive failing after roughly two years of use surface in the reviews. No drive is bulletproof, and the Rescue plan is the appropriate hedge here. As with any HDD, handle it gently and keep a second backup of irreplaceable files.
The practical edge: a two-year Rescue Data Recovery plan included in the box gives this drive a safety net that few others match.
Ideal for: large-scale encrypted backups where capacity and built-in data recovery outweigh the need for SSD transfer speed.
Pass if: you edit video or work with huge files daily — the HDD speed will be a bottleneck.
8. WD 5TB My Passport (Blue)
The same 5TB hardware-encrypted powerhouse as the black version, now wearing a blue aluminum jacket.
This is functionally identical to the black WD 5TB My Passport — same 2.5-inch mechanical hard disk, same hardware encryption with password protection, same ransomware defense software, same 5TB capacity — but in a blue aluminum enclosure that stands out on a shelf or beside a light-colored laptop. The hardware encryption is baked into the drive’s controller, so the lock works regardless of the operating system or whether you have the WD software installed. At 5TB, the value per gigabyte is strong, and the slim profile (a 2.5-inch form factor) slides into most bags easily. Long-term customers note it lasts 4 to 5 years of continuous use with no failure, treating it as a replaceable backup that cycles every few years. It works great for storing video libraries that you play through a Blu-ray player’s USB port — a use case several owners mention. The main caution is the same as the 2TB My Passport: the included backup and password software can be hit-or-miss on some Windows configurations, so budget for using the drive as a pure hardware-encrypted storage device with your own backup tool.
The honest take: identical internals to the better-known black model — the color is the only difference, so pick the one that matches your setup.
Go for it if: you want a large hardware-encrypted drive and prefer the blue finish over black.
Stick with the black version if: color does not matter and you want the model with the most reviews and market support.
Understanding the Specs
Hardware vs. Software Encryption
Hardware encryption uses a dedicated chip inside the drive to scramble and unscramble data on the fly — no software install, no OS dependency, and the encryption key never leaves the drive. Software encryption (like Lexar DataShield) installs a utility on your computer to handle the same AES process, which works fine but leaves the drive vulnerable if someone plugs it into a machine without that software installed. For maximum portability and security, hardware encryption is the better choice.
AES 256-bit and XTS Mode
AES 256-bit is the industry-standard encryption cipher — it would take a supercomputer billions of years to brute-force a single key. XTS mode (used by the Apricorn Aegis Padlock) adds an extra layer by using two separate AES keys, making it even harder for an attacker to tamper with or copy the encrypted data block by block. For everyday use, standard AES 256-bit is more than secure; for compliance-level data, look for XTS mode.
FAQ
Can an encrypted external hard drive be used on both Windows and Mac?
What happens if I forget my password on a hardware-encrypted drive?
Is an SSD encrypted drive worth the extra cost over an HDD?
How do I know if a drive uses hardware or software encryption?
Can encryption slow down my file transfers?
What does “FIPS PUB 197 Validated” mean for a hard drive?
Does the Seagate One Touch work with Chromebooks?
How long does a hardware-encrypted external HDD typically last?
Can I use an encrypted external drive with my PlayStation or Xbox?
Are there any legal restrictions on owning an encrypted external hard drive?
Final Thoughts: The Verdict
If you want one dependable pick, the encrypted external hard drive winner is the SanDisk 1TB Extreme Portable SSD because it combines hardware-based AES 256-bit encryption with rugged drop-and-water protection and real 1050MB/s transfer speeds — a true set-and-forget secure drive for creative pros and everyday backups alike. If you need maximum capacity on a budget, the WD 2TB My Passport is the go-to for archival storage. And for absolute military-grade security with a physical PIN keypad, the Apricorn Aegis Padlock 1TB is the drive that satisfies HIPAA-level compliance without needing any software at all.
How We Picked
We do not accept paid placement. Every pick is matched to a real buyer and a real use-case; we do not hands-on test units.
Sources & Methodology
Specifications: manufacturer listings and product documentation. Review insights: verified customer reviews, as of July 2026. Pricing: not shown on this page (it changes often); check the current price via the retailer link.
As an Amazon Associate, Gardening Beyond earns from qualifying purchases. This does not affect which products we feature.





