USB key

A USB key is a small hardware device that plugs into a computer's USB port to verify the identity of a user or authorize access to restricted systems and data. Unlike a software password, it is a physical object that must be present to grant entry, making it far harder to compromise through remote attack. In industrial settings, USB keys authenticate technicians accessing control systems, engineering workstations, and restricted networks where a single unauthorized session could disrupt production or compromise safety.

Most USB keys store encrypted credentials or cryptographic certificates on a small flash memory chip, protected by a PIN or biometric check. The host system reads the key's unique identifier and verifies it against a database of authorized users. Some keys generate one-time passwords (OTPs) that expire after seconds, adding a second factor of authentication. Others hold digital certificates signed by a trusted authority, used to establish secure connections to industrial control systems and supervisory software without transmitting passwords over the network.

Physical form and durability

Industrial USB keys are typically molded from reinforced polycarbonate or rubber-coated plastic, built to survive oil, dust, and mechanical shock on factory floors. They are compact, often around 65 millimeters long and 20 millimeters wide, with a retractable or rigid connector. The USB connector itself may be shielded to reduce electromagnetic interference in environments with high-frequency switching equipment. Battery-free operation and passive data storage mean they do not degrade over years of occasional use, though the flash memory can fail after millions of write cycles if used for dynamic logs rather than static credentials.

USB keys have largely replaced hardware tokens with display screens and dedicated buttons in many industries because they integrate with standard PC infrastructure without additional readers or drivers. However, they remain vulnerable if a computer is compromised by malware that captures credentials during use. For this reason, they are most effective in conjunction with locked-down workstations, air-gapped networks, or multi-factor authentication where the key alone is insufficient to grant access.

In manufacturing and utility sectors, USB keys are provisioned by IT departments and managed through centralized identity systems. Loss or theft of a key triggers immediate revocation through the authentication server. The term 'USB key' is sometimes confused with 'USB drive' or 'USB stick', which are data storage devices without authentication features. The distinction matters: a plain USB drive left on a bench is a data breach waiting to happen, whereas a properly implemented USB key with revocation capability can be safely recovered from loss.