A USB stick is the only storage most people hand to another human being. That single fact drives everything below: you want the drive to be boring when it leaves your hand, unreadable if it never comes back, and easy to wipe when it does.
Give each drive one job and one label
Buy two cheap 32 GB drives instead of one 128 GB drive. The first is the lend stick: formatted exFAT so it mounts read-write on Windows, macOS, Android and most TVs, holding nothing but the files you are handing over. The second stays home and holds your own archives.
The format choice is not cosmetic. FAT32 refuses any single file over 4 GB, which kills a 6 GB video export. NTFS carries Windows permissions that macOS mounts read-only without extra software, so a colleague on a Mac will copy your footage but cannot save edits back. exFAT has neither limit and is the sane default for a shared stick. Name the volume something obvious — LEND-32 — and write it on the casing with a paint marker, because “which one is the wedding photos” is a question you do not want to answer at 11 pm.
Encrypt the drive before it holds anything private
On Windows 11 Pro or Enterprise, plug in the drive, open File Explorer, right-click it and choose Turn on BitLocker. BitLocker To Go encrypts the whole volume, offers AES-128 or AES-256, and produces a 48-digit recovery key. Save that key to your Microsoft account and print it — a key stored only on the encrypted drive is a joke. Turn off “automatically unlock on this PC” for a drive you lend out, or the encryption buys you nothing when the stick leaves the building already unlocked.
Windows 11 Home cannot create BitLocker To Go volumes, which is the most common reason people give up here. Use VeraCrypt instead: it encrypts a whole device or a container file, defaults to AES with SHA-512, and mounts read-only if you tick that box. A 20-plus character passphrase typed once per session is the entire cost. Microsoft’s BitLocker overview covers the recovery-key rules and edition requirements in more detail than the consumer settings screens do.
On a Mac, Disk Utility’s File > New Image > Blank Image creates an encrypted disk image with 256-bit AES; choose sparse bundle if the contents will keep growing, then copy the resulting file to an exFAT stick. Windows cannot open an encrypted APFS volume, but it holds a disk image file without complaint, so this pairing travels well.
Lend it without losing control of it
Create a folder called HANDOVER on the lend stick and put nothing else at the root. Keep a two-line note in your phone — who has it, when it left — because drives vanish in the gap between “I’ll bring it Monday” and the following month. If the stick carries client material, treat the handover as a data transfer: the recipient gets a copy, not your only copy, so you are never waiting on a returned piece of plastic to finish a job.
Deleting files before a handover removes them from the listing, but it does not erase flash memory. On a USB stick the old blocks stay readable with free recovery tools until overwritten, and a proper multi-pass wipe of a 64 GB device takes hours. That is the argument for encrypting first: the wipe becomes optional rather than urgent.
If it is lost, act on the data not the hardware
Assume the drive is gone the moment it has been out of your sight for a day. Change every password that was written in a text file on it, starting with email, then banking, then anything holding a saved card. If you used BitLocker, sign in to your Microsoft account and delete that drive’s recovery key. Revoke API tokens and SSH keys you copied onto it — a key file on a lost stick is a credential leak with a delay timer, which is exactly the scenario a password manager setup prevents in the first place.
Two smaller habits close the loop. Turn off AutoPlay so a plugged-in drive never runs anything by itself, and never plug in a stick you found or were handed by a stranger; a dropped USB is a classic malware delivery method. If you must inspect one, use a machine you can reinstall. For keeping track of which drive holds what, the labelling and indexing routine in these USB flash drive habits is a decent starting point, and a stick that stops mounting is often recoverable with the steps in this USB repair walkthrough before you bin the hardware.