Give Sensitive Documents Extra Protection in OneDrive
OneDrive Personal Vault places sensitive files behind an additional identity check and locks them again after inactivity. It is a practical place for passport scans, tax records, insurance documents, and other files that deserve more protection than an ordinary cloud folder.
By Rodger Mansfield, Technology Editor
September 2, 2026
Your vacation photos and passport scan probably should not receive identical treatment.
Yet that is what can happen when everything lands in the same cloud storage account.
Your files may be protected by your Microsoft account, but an unlocked computer, shared device, or compromised session can still create an opportunity for someone to see more than you intended.
Here’s a Cool Tip: Move your most sensitive documents into Personal Vault, then lock it as soon as you finish using them.
OneDrive Personal Vault adds another checkpoint.
Before opening the protected folder, you must verify your identity using an available method such as a fingerprint, face, PIN, Microsoft Authenticator code, email code, or text message.
The vault also locks after inactivity, so its contents do not remain indefinitely accessible.
This is not a separate storage service or a replacement for good account security.
It is a protected area inside a personal OneDrive account, designed for files that deserve more care.
Personal Vault is a special folder in OneDrive protected by an additional identity-verification step.
It is a place for important or sensitive documents and photos.
Good candidates include:
- Passport and driver’s license copies.
- Tax returns and supporting records.
- Insurance policies.
- Birth certificates.
- Financial documents.
- Vehicle and property records.
- Emergency travel information.
Personal Vault automatically locks after inactivity. On the web, Microsoft documents a 20-minute inactivity period.
On mobile devices, the documented default is three minutes, with an option to select a different interval.
The Windows OneDrive client also provides a setting for its lock wait time.
Files in the vault cannot be shared while they remain there. To share one, you must move it out first. Microsoft also says Personal Vault items do not appear in OneDrive search results.
That creates a sensible tradeoff: slightly more friction in exchange for less accidental exposure.
What You’ll Gain
- Add another identity check before sensitive files can be opened.
- Reduce the chance of accidentally sharing a protected document.
- Keep important records available through supported OneDrive devices.
- Automatically relock files after a period of inactivity.
Step-by-Step Instructions
Here's how to do it.
Microsoft says Personal Vault must be set up separately on each device where you intend to use it. Button names may appear as Next or Continue, depending on the device.
Web/Desktop
- Visit OneDrive.com and sign in with your personal Microsoft account.
- Select the Personal Vault folder.
- Select Get started, followed by Next or Continue.
- In the Verify your identity dialog, confirm the displayed account information and select Verify.
- Choose an available verification method and complete the requested steps.
- Open Personal Vault, select the files you want to protect, and use Move to > Personal Vault. You can also drag supported items into the vault.
- When finished, open Personal Vault and select Lock.
 |
| fig. 1 - Secure Documents in OneDrive Personal Vault |
Cool Example
- Before traveling, create digital copies of your passport, travel insurance policy, and emergency contact sheet.
- Upload them directly to Personal Vault, confirm that each file opens, and then lock the vault.
- Keep the physical documents secure as well because cloud copies are backups, not replacements.
Windows
- Select the OneDrive cloud icon in the Windows notification area.
- Open OneDrive and select Personal Vault from the file list. Microsoft notes that it appears as a shortcut in the file list rather than the folder list.
- Select Get started if setup has not been completed.
- Verify your identity using an available method.
- Move files into the opened vault.
- When finished, select the Personal Vault folder and choose Lock.
To adjust the lock wait time, open the OneDrive cloud icon, select Help and Settings > Settings, open the Account tab, and find the Personal Vault lock-wait setting.
iPhone/iPad
- Open the OneDrive mobile app and sign in.
- Select Personal Vault in the folder list.
- Select Get started, Next, or Continue as prompted.
- Complete identity verification using a method available on the device.
- Upload, scan, or move a document into the vault.
- Confirm that the item appears inside Personal Vault.
The mobile app can scan a document directly into Personal Vault, helping keep that scan out of the device’s camera roll.
Android
- Open the OneDrive app and sign in.
- Select Personal Vault.
- Follow the setup prompt.
- Verify your identity.
- Upload, scan, or move the files you want to protect.
- Confirm the documents appear in the opened vault.
To change the mobile lock interval, go to Me > Settings > Personal Vault, then select Auto-lock or Inactivity lock, depending on the app version.
Pros and Cons
Pros:
- Adds identity verification before sensitive files can be opened.
- Automatically locks after inactivity.
- Prevents sharing while a file remains inside the vault.
- Lets mobile users scan documents directly into the protected folder.
- Fits naturally into an existing personal OneDrive workflow.
Cons:
- Personal Vault is not available in OneDrive for work or school.
- Users without Microsoft 365 Personal or Family can place no more than three files in the vault.
- Additional verification creates intentional friction.
- Documents can be edited in Personal Vault only on a PC or the web. Mobile users can view documents but must move them out to edit them.
Privacy and Data Notes
Personal Vault adds access controls, but its files are still stored in OneDrive and consume the account’s cloud storage.
Personal Vault files cannot be shared while they are in the vault.
However, opening a vault file in a Windows application may place its name in that application’s recent list or elsewhere in Windows.
Open particularly sensitive files through OneDrive.com to avoid this behavior.
A vault is not a complete backup strategy.
Keep recovery information current, use strong Microsoft account protection, secure your devices, and retain an additional protected backup of irreplaceable records.
Feature Access
Microsoft currently documents Personal Vault for:
- Windows 11.
- Windows 10 version 1903 or newer.
- Android 6 or newer.
- iOS 11.3 or newer.
- Current versions of Microsoft Edge, Google Chrome, and Mozilla Firefox.
Because Microsoft’s official pages conflict on the iOS minimum, readers should use the latest OneDrive version supported by their device and check the current app-store requirement.
Personal Vault is not available in OneDrive for work or school.
Microsoft 365 Personal or Family is required to store more than three files.
Score
