"some can even be locked from their firmware (government specs)"
What do you mean by this? If it's government spec then it's likely the best method, right?
After searching around yesterday, I found I can create a password protected disk image of the info on the disk and then erase the original copy, keeping only the protected disk image. If I do this in an external hard drive, this should work fine. But, do you think the alternate method of using the firmware better?
The drive is for storage, no so much a working drive. The hassle of having to access it often and having to punch a password in all the time will be non-existent. I will only have to access the drive every once in a while to store stuff, and rarely. The idea is that the information in it is for my own use and even in the case that I pass away, for example, the information is not longer needed and any access attempt to it should be futile and the disk to be destroyed.