By Kavita Mistry 
Accessing a Windows 11 PC is so easy for anyone with a PIN. It might put your data at risk if your PC is prone to unauthorized access. Changing the PIN or password regularly is one option to prevent unwanted access. Selectively disclosing the password to people whom you trust completely is another option.
We have some good news for you if you are going through the same instance. Now, you can add a layer of security to your Windows PC with a USB drive. In this guide, we show you how to create a security key for your Windows 11 PC on a USB drive and use it to access your PC.
Benefits of USB Security Key on Windows 11
It is a known fact that data plays a crucial role in these times. We create many accounts online where the platforms ask us to secure our accounts with two-factor authentication. Even when the passwords are compromised, the additional security we add in the form of 2FA secures the accounts and protects the data.
Similarly, Windows 11 is secured by a PIN or a password, which we set up after installing the operating system. A PC is generally considered our personal space where we store a lot of personal data, including documents, images, videos, and everything related to our personal lives.
In addition to the personal data, we sign in to many services we use, like email accounts, social media accounts, etc. Since we believe our PC is exclusive to personal use, most of the time we overlook logging out of the services after using them.
A compromised Windows 11 PIN or password puts our data, as well as our online accounts, at risk. Here arises a need for additional security to access the PC. A USB security key helps protect the PC. Only those who know the PIN or password and have access to the USB security key can access the PC.
Another important benefit of a USB security key is that it always stays offline and can never be compromised unless we lose the USB drive. To sum up, it protects the PC, the data, and the accounts we use on it.
How to Create a USB Security Key on Windows 11
There are two ways, using which you can create a USB security key on your Windows 11 PC. One method involves using a physical security key, and the other involves using third-party software to convert an existing USB drive into a security key and use it to access Windows 11.
Coming to physical security keys, you can purchase keys from well-known brands like Thetis, Yubico, Apricorn, and other brands you might come across. We have suggested a few physical security keys below that work with most of the logins as a two-factor authentication method. Any of the following can help you set a USB security key on Windows 11.
Yubico – YubiKey 5C NFC
YubiKey 5C comes with USB-C and NFC features to use as a security key for your Windows 11 and online accounts. It is securely manufactured in the USA and Sweden with all the features to resist any kind of tampering and physical damage. If you choose YubiKey as your security key, it is recommended to purchase at least two to have a backup in case you lose a key, the second one comes in handy to access the secured accounts.
Apricorn 16GB Aegis Secure Key
Apricorn Aegis Security Key is a 256-bit encrypted USB 3.0 key. This is one of the highly secured physical security keys that have separate admin and user modes. You can even program brute-force defense on this key.
Thetis Pro FIDO2 Security Key
Thetis Pro FIDO 2 Security Key comes with USB-A and USB-C ports as well as NFC for easy connectivity. You can use it to get multi-layered protection for Windows, Mac, Linux, and your online accounts like Gmail, Facebook, etc. This security key only works with Windows Enterprise editions that support Entra ID. It is a highly dependable security due to its metal cover, tamper, crush, and water-resistant features.
Though the physical security keys are expensive, they provide ultimate protection to your Windows PC as well as your online accounts. If your budget does not permit purchasing a security key, you can purchase a USB drive and convert it into a security key. Just remember that they are not as secure as the dedicated physical security keys.
Ideally, a USB drive from a known brand should have sufficient storage for future uses. It is also better to select a drive that supports the latest USB technologies, such as USB 3.0 and USB 3.2.
You can choose to get any of the below and create a security key. We suggested a USB with a Type-C port and another with USB 3.0. You can hook them to your keychain or something so as not to misplace them and lose access to your PC. It is important to select a USB drive from a reputable brand, as a cheaper drive can fail at any time.
Transcend 16GB JetFlash 700 USB 3.1 Flash Drive
SanDisk 32GB Ultra Dual Drive Go USB Type-C Flash Drive
When you have physical security keys or a USB drive, you can follow the processes below based on the key you have. Make sure you are an administrator or have administrator access to your Windows 11 PC to set up USB security keys.
Using the Settings App and a Physical Security Key
Creating a Windows 11 security key using the Settings app is the easiest way that does not require any third-party software. Though the options are limited compared to other programs, you can just create a working key and secure your PC. All you need is a physical security key to use this method.
To get started, open the Settings app on your PC using the Win+I keyboard shortcut. Select the Accounts tab on the left side panel and go to Sign-in options.
In the Sign-in options, under Ways to sign in, click on Security key to expand it. Then, click on the Manage button.
Now, insert the physical security key you have purchased to proceed with creating the security key.
Configure the key following the on-screen instructions. After the successful configuration, you will always need the physical security key to log in to your Windows PC.
Alternatively, you can use the software provided by the physical security keys manufacturer to configure the keys, their backup, and the recovery methods in case you lose the physical security keys.
Create a Security Key With a Normal USB Drive
If you only have a USB drive and want to create a security key, you can do it easily with USB Raptor, an open-source tool for configuring security keys. Download and install the USB Raptor on your PC.
To get started, plug the USB drive you have into one of the ports and run the USB Raptor program installed on your PC. When you run the USB Raptor program for the first time, you need to agree to the terms and conditions to use it.
Under Encryption, create a strong password of your choice by removing the default password under the Password. Make sure your USB drive is selected in the Select USB drive options under Unlock file creation. After the correct drive is selected, click Create k3y file to create a security key on the drive.
Then, check the button beside Enable USB Raptor to enable it. Remember that, after enabling USB Raptor, you cannot remove the USB drive from your PC as it will lock your PC as a part of the security. The USB drive always needs to be plugged into the PC.
For better security and to use the USB security, you need to run the USB Raptor always on your PC. It is recommended to run the program at Windows startup. To configure these and create a recovery key, check the button beside Advanced configuration at the top right of the USB Raptor screen.
Check the buttons beside Run USB Raptor at Windows startup, Start in system tray, and USB Raptor always starts armed in the Startup options. To make the security measures even more robust, check the button beside Password protect USB Raptor’s interface under Interface security to prevent any changes to the security settings by others who access your PC.
Now, to generate the recovery key, select the Lock features tab in the Advanced Configuration and click Generate RUID file in the Backdoor access settings.
A RUID.dat file will be saved on your desktop. Open it with Notepad and make sure you back up the key on your password manager or somewhere secure environment which you can access easily, in case you lose your key.
To remove the security key, just uncheck the button beside Enable USB Raptor, uninstall the USB Raptor program from your PC, and format your USB drive.
Are USB security keys worth it?
USB security key makes it hard for unauthorized access as they provide an additional layer of security. Just like how we use authenticator apps for additional security for our online accounts, USB security keys protect our devices as well as online accounts without connecting to the internet, as the keys are stored on the USB device. They are surely worth it if you can handle them safely without losing or misplacing them.
Protect Windows 11 With USB Security Keys
It is now very easy to protect a Windows 11 PC from unauthorized access using the physical security keys or a USB drive used with the USB Raptor program. They enhance the security to the highest level and make it impossible for anyone, including you, to access the PC with the security keys or recovery keys.