USBHawk

USBHawk turns a standard USB flash drive into a physical authentication key for a Windows PC. The behavior is exactly as simple as it sounds. Plug the drive in and Windows unlocks. Pull it out and Windows locks. It is the workflow of a hardware security key, except the hardware is any spare flash drive you already own rather than a purpose-built dongle you have to buy and carry. The idea is old, physical presence as authentication, but the execution here targets ordinary Windows users rather than enterprises with smartcard budgets. Locking your machine stops being a habit you have to remember and becomes a side effect of standing up.

Under the hood it is doing real cryptography rather than storing your password on a stick. Authentication uses ECDSA P-256 signatures to verify the drive, and every unlock performs a fresh signature verification instead of replaying stored credentials. The private key material is encrypted through Windows DPAPI and bound to the specific enrolled machine, so the secret is tied to your PC rather than sitting portable on the drive. Everything runs locally. The maker's wording is blunt about it, no servers, no account, no telemetry. For a login tool, that posture matters, because the last thing you want between you and your desktop is somebody else's cloud. It also shrinks the attack surface in an obvious way. There is no account to phish, no sync service to breach, and no vendor database of customers to leak, because none of those things exist.

Setup is a guided wizard. You install the software, pick a USB drive, and confirm your Windows password twice. Enrollment adds one small file to the drive and does not touch anything else on it, so the drive keeps working as ordinary storage. By default your normal Windows password keeps working alongside the key, which means a lost or forgotten drive is an inconvenience rather than a lockout. You sign in with your password and re-enroll a new drive whenever you are ready, and the maker recommends keeping a backup drive enrolled. If you change your Windows password, you re-run the enrollment wizard from the Start Menu to update what is stored, with manual sign-in available as the fallback until you do. None of this requires the drive to be anything special. A cheap drive from a drawer works the same as an expensive one, because the security comes from the cryptography and the machine binding, not the hardware.

For people who want to go further, there is an optional Lockdown Mode that removes the password fallback entirely, so the USB key becomes the only way in. USBHawk gates that behind sensible friction. It requires two proven successful USB unlocks on your machine before it will even offer the mode, and the documentation strongly recommends having a recovery plan before turning it on. That is the right instinct for a feature that can genuinely lock you out of your own computer. For most people the default configuration, key plus password fallback, is the sensible place to stay, with Lockdown reserved for machines where convenience genuinely takes a back seat to control.

It fits Windows users who want the convenience of walk-up-and-plug-in login plus the discipline of automatic locking when they walk away. Think shared households, small offices, or anyone who keeps forgetting to hit Win+L before leaving a desk. What makes it different from enterprise smartcard setups or FIDO hardware keys is the total absence of infrastructure, no directory integration, no account, no vendor cloud, and no special hardware, just local crypto and whatever flash drive is in your drawer. It supports Windows 10 and 11 on x64 and x86, comes from RAWDESK SOFTWARE, and is a small, single-purpose utility rather than a security suite. That narrowness is arguably its best quality. It does one thing, does it locally, and explains exactly how, which is more than can be said for a lot of security software aimed at consumers.

Pricing is a one-time purchase of $19.99 through Gumroad, which buys a perpetual license for up to 3 personal PCs and includes a year of feature and compatibility updates. After the first year, continued updates are an optional $9.99 per year, and the software keeps working either way since the license is perpetual. There is no free version or trial mentioned, so the twenty dollars is the price of finding out, though for a tool this narrow the site explains its behavior thoroughly enough that you know what you are buying. The update subscription is genuinely optional, a way to keep pace with Windows compatibility changes rather than a disguised rental, and because the license is perpetual, skipping it leaves you with working software rather than a countdown.