Recently, I was looking to get a FIDO2 Authentication USB security key to handle securing my work accounts on my Windows 11 PC.
Of course, you can always use Windows key + L to automatically lock my PC when I, but I wanted a more robust security method to lock and unlock my PC.
After I set up Microsoft Authenticator, I discovered that you could create a security key as your verification method on Windows.
I am intrigued by popular brands such as the YubiKey 5 Series, but USB security keys seem really expensive. On the other hand, a USB security key might be the most advanced method of login authentication on Windows 11.
Create your own USB security key
Of course, if you don’t want to buy a security key from the YubiKey Store, you might wonder what your options are. Windows Hello is one of the most convenient features on Windows 11 (and Windows 10), but not all laptops and PCs come with an IR camera or fingerprint reader to support it.
The ability to add an extra level of security with the convenience of Windows Hello secure authentication while you are away from your PC is indispensable.
If you have a spare USB drive laying around, this is a perfect opportunity to repurpose it by creating an USB security key on Windows 11.
Here’s what you need to do to get started.
Use BitLocker for encryption
Bitlocker is a built-in full disk encryption tool available on Windows 11, that was first introduced in Windows 7. You can create a USB security key using BitLocker on Windows 11.
However, it’s important to note that this BitLocker method will only work for Windows 11 Professional and Windows 11 Enterprise versions. Windows Home does not come with BitLocker, it uses a different security feature called Device Encryption.
Here’s how to use BitLocker on Windows 11 Pro to create a USB security key from scratch.
1. Open File Explorer, right click your PC’s system drive (where Windows is installed) and click Turn on BitLocker. In my case, it’s the C: drive.
2. Once the BitLocker process completes, open Local Group Policy Editor. Go to the following path: Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
3. Find and open Require additional authentication at startup and double-click to configure it.
4. A new window will open, allowing you to configure the settings, be sure to change the toggle to Enabled and choose Require startup key with TPM from the dropdown menu under Configure TPM startup key. Click Apply to apply your changes and click OK to close the window when finished. Close Local
5. The final step is to open and run Command Prompt as an administrator. Copy and paste the following command and press Enter to run it:
manage-bde -protectors -add C: -TPMAndStartupKey E:The C: is the drive where Windows 11 is installed (where BitLocker is enabled) and the E: is the drive where the USB drive is plugged in. Be sure that you indicate the correct drive letters for your system and USB drives.
That’s it, you are finished! Now your PC will not start up unless you have the USB inserted.
Alternative apps
Just because Windows 11 Home users don’t have BitLocker doesn’t mean they can’t create a USB security key. There are several third-party applications and tools to create your own USB security key. Here’s a quick look at some I found:
1. USB Raptor
USB Raptor is a free program, that once you download and install, can turn any USB flash drive into a security key to lock and unlock your PC at will. As long as USB Raptor is running on your PC, no one will be able to use your PC without your USB security key.
When your PC is locked with USB Raptor, a brown screensaver appears with the time and valid ways to unlock your PC, by using a typed password, USB security key, or a . The only downside of this free app is that USB Raptor has to be running and enabled on your PC to function correctly.
2. Predator
Predator protects your computer by creating and is another popular and low-cost option to use a USB drive to lock and unlock your PC when you aren’t using it. As soon as you use Predator to create your own USB security key, no one can use your PC and if they do, they’ll be met with an “Access Denied” error message and be unable to access your device.
3. Rohos Logon Key
Rohos Logon Key is a USB security key maker that uses two-factor authentication to unlock both Windows 11 and macOS. Although Rohos Logon Key is technically considered “freeware,” you will need to pay up to $59.00 for a license, if you want to use the “free” version past its 15-day trial period.
Do you use a USB security key to lock and unlock your PC? Tell us why or why not in the comments!
