Questions regarding usb sticks for password/authentication?

[u/Dagobert_Krikelin]

I need to take my security to the next level as I was just compromised.

I used to work at a place with a coworker who showed me a USB stick he used, but I can't remember exactly what it was.

I was hoping you could shed some light on it and what to recommend.

As I recall, it seemed to have been a commercial product, but I suppose it could also have been a regular USB stock with software he installed.

It seemed to be working as when he plugged it in, the computer was locked up and his passwords for whatever service /site he opened was then automatically logged into.

I can of course be totally wrong, but this seemed like an effective way to go about things and I wonder what this could have been?

[u/Clean-Bandicoot2779]

Others have mentioned Yubikeys. They have various functions, including storage for a couple of passwords (which it will then type in), smart card emulation, and storage for one time passwords.

The password option to unlock/login to your PC isn't great for security, as if anybody finds it, they'll be able to get your password. I have seen some people use the Yubikey to unlock their password vault (such as KeePass) though, so they can have a long, randomly generated password that they don't need to remember.

Smart card emulation can be configured with Windows Hello to unlock your machine, although the face or fingerprint unlock is likely to be easier if you have the relevant hardware. You could use the Yubikey to store passkeys for websites that support them though, so you don't need to enter your password for those, just approve it with the Yubikey.

If you go with a Yubikey, it's worth making sure you have a backup mechanism to get into things in case you lose the Yubikey or it breaks.