Each data storage device that supports the standard security features and is enabled with a security password may be locked when power is removed from the device. When power is returned, a determination is made as to whether the data storage device is locked and returning from a powered off state or a hardware reset. If locked, a password may be received from a user. After the security password is received, the data storage device is unlocked, allowing access to the data on the device. A setup utility is provided for manipulating the security and backup passwords for each device. Other features include: presenting locked devices to the operating system, the use of a backup password to unlock a device in lieu of the security password, requiring or not requiring password entry from a user to unlock a device when returning from a sleep state, setting maximum or high security, an automatic hardware reset upon exiting the setup utility, and disabling change password capabilities for devices without an enabled security password.