June 2, 2026
From Setup to Secure Erase: A Full Look at What Opal Lock Covers
Drive security is not a set-and-forget problem, and Opal Lock is built with that in mind. With each release, it adds features that make…
Opal Lock by Fidelity Height
2 min read
Drive security is not a set-and-forget problem, and Opal Lock is built with that in mind. With each release, it adds features that make managing self-encrypting drives (SEDs) more reliable, more intuitive, and easier to prove for compliance purposes. Here is where things stand today.
What Opal Lock Does
Opal Lock is a Windows application for managing TCG Opal self-encrypting drives. It does not turn a regular drive into an SED. Instead, it gives you full control over the encryption that is already built into compatible drives, covering setup, locking, password management, auditing, and secure erasure.
It supports Opal 1.0, 2.0 and Pyrite 1.0, 2.0, and works with SATA, NVMe, and USB drives on Windows 10, Windows 11, and Windows Server 2019/2022. There is also a free version, Opal Lock Lite, for users who need to unlock compatible USB drives without a paid license.
Security and Setup
Restricted setup for system drives
If a system drive does not support writing a pre-boot image to its Shadow MBR, Opal Lock blocks the setup entirely. This stops you from ending up in a situation where a locked drive cannot be booted.
Battery level protection
Before any setup begins, Opal Lock checks the battery level. Setup is blocked at 10% or below, and a warning appears between 10% and 20%. A mid-setup power cut on an encrypting drive is the kind of problem you really do not want to deal with.
Reliable drive scanning
Opal Lock now uses modern Microsoft WMI PowerShell cmdlets instead of legacy system commands for all drive scanning, identification, and management tasks. The result is faster, more accurate detection across all supported drive types.
Auto detection
A background service picks up drive insert and removal events automatically, so the interface always reflects what is actually connected without needing a manual rescan.
Locking, Unlocking and Passwords
Lock without a power cycle
You can lock a drive directly from the app by entering the admin or user password. No need to shut down or restart.
Auto unlock
If the password is saved on the system drive or a USB flash drive, Opal Lock will unlock a connected SED automatically on insert.
Encrypted password to a custom location
Passwords can be saved to any folder you choose, including one that syncs to a cloud drive, giving you a flexible backup option.
Pre-boot authentication
Standard and Premium editions support a pre-boot image on the Shadow MBR or a recovery USB, so a locked system drive can be unlocked before Windows loads.
Erasure and Compliance
Instant Secure Erase
Wipe a drive completely using either an admin password or PSID. The data is cryptographically erased and unrecoverable instantly.
Certificate of Sanitization
A verified certificate is generated automatically after a successful erase. It now logs every action taken during the process, including the date, time, system and the method used and the drive's setup status at the time, making it a genuinely useful compliance document rather than just a formality.
Multi-Drive Management
Premium users can set up, change passwords, and lock or unlock multiple drives at once with a single click. If you are managing a fleet of devices, this alone saves a meaningful amount of time.
Opal Lock keeps getting more capable without getting more complicated. Whether you are an individual protecting a single laptop or an IT team managing dozens of drives, the features above give you the control and the paper trail that good drive security actually requires.
Download Opal Lock and start protecting your drives today.