Some files deserve more than ordinary cloud storage: passport scans, tax records, insurance papers, certificates. OneDrive’s Personal Vault is a protected area inside your OneDrive that needs an extra identity check every time you open it and locks itself automatically after a short period. It works like a safe inside the filing cabinet — same storage, much stronger door.
This guide shows how to set up Personal Vault on your phone and computer, how to move important documents into it, and how its locking rules behave day to day.
Quick Answer
Open OneDrive (app or onedrive.com), open the Personal Vault folder, and follow the setup prompts: verify your identity with the Microsoft Authenticator app, a text/email code, or your account sign-in, and the vault is created. Then move or upload your sensitive documents into it. The vault locks automatically after a period of inactivity (20 minutes on mobile, configurable on the web) and requires the extra verification again to reopen. Free accounts can store a few files in the vault; a Microsoft 365 subscription allows unlimited vault files.
Setting Up Personal Vault on Your Phone
- Open the OneDrive app and sign in to your Microsoft account.
- On the Files/home screen, tap the Personal Vault icon (shown as a safe/vault tile).
- Tap Next through the explanation screens.
- Choose your verification method. Microsoft may offer the Authenticator app, a code by text or email, or Windows Hello/fingerprint depending on the device.
- Complete the verification. Your vault is created and opens, empty.
- Tap Add or the upload option inside the vault to add your first documents — or use the built-in scan option to photograph paper documents straight into the vault.
Setting Up on a Computer
- Go to onedrive.com and sign in, or open the OneDrive folder in File Explorer (Windows) / Finder (Mac) where the Personal Vault folder is listed.
- Open Personal Vault. First time, you will be guided through identity verification.
- Verify with your chosen method. The vault unlocks.
- Drag files into it like any folder — but remember they only move while the vault is unlocked.
Microsoft’s support page on Personal Vault covers the setup and the file limits for free versus subscribed accounts.
What Belongs in the Vault
- Scans of passport, driving licence, national ID, and birth/marriage certificates.
- Tax returns, payslips, and financial statements.
- Insurance policies, property documents, and wills.
- Medical records and vaccination documents.
- A document listing recovery information — though never your only copy of your vault credentials themselves.
Everyday files do not need the vault; the extra unlock step is worth it only for what would hurt if it leaked. For general document organisation, the approach in our guide on stopping OneDrive from syncing Desktop and Documents automatically may interest you if OneDrive has been over-eager with your PC folders.
How Locking Works Day to Day
Automatic Locking
The vault locks itself after inactivity — by default around 20 minutes in the mobile apps and 20 minutes to a few hours on the web depending on settings. Onedrive.com lets you adjust the lock timeout in vault settings. A locked vault shows its contents as hidden; file names inside are not browsable until you unlock.
Unlocking
Opening the vault always requires the second verification — that is the point. Fingerprint or face unlock on your phone makes it quick in practice. On a shared computer, close and lock the vault manually when you finish rather than waiting for the timer.
Sharing Limits
Files inside Personal Vault cannot be shared directly — Microsoft blocks sharing from the vault entirely. To share a vault document, move a copy out of the vault first, then share the copy. Treat that as a feature: nothing leaves the safe by accident.
Security Notes Worth Knowing
- Files are encrypted in Microsoft’s cloud and protected by the extra verification; on Windows they also sit in a BitLocker-protected area of your local drive while synced.
- Your Microsoft account security is the foundation. Turn on two-step verification for the account itself — a vault behind a weak, reused password is a strong door on a weak house.
- Free accounts are limited to a small number of vault files (historically three). Microsoft 365 subscribers get unlimited vault storage within their OneDrive quota.
- Vault files still count against your OneDrive storage space like normal files.
Personal Vault vs a Plain Folder: Why Bother?
A normal OneDrive folder is protected by your account sign-in and nothing more: anyone who picks up your unlocked phone or sits at your signed-in laptop can open it. The vault changes that in three concrete ways. It demands a fresh identity check on every entry, so an unlocked device does not mean an open vault. It relocks itself, so forgetting to close it is not fatal. And its contents stay hidden from casual browsing — someone scrolling your OneDrive sees a locked vault icon, not your passport scan’s thumbnail. For documents whose exposure would mean identity theft or serious embarrassment, that difference is the whole point. For everything else — the family photo archive, work drafts — a normal folder remains the right, convenient home.
Mistakes and Tips
- Do not store your only copy of recovery codes inside the vault you would need them to open. Keep a separate, safe record of your Microsoft account recovery options.
- Scan paper documents directly into the vault using the OneDrive app’s scan feature — no unprotected copy ever sits in your camera roll.
- Lock it manually on shared computers. Do not rely on the inactivity timer when others use the machine.
- Review the vault once a year. Remove expired documents and add new ones (renewed IDs, new policies) while the habit is fresh.
What If You Get Locked Out of the Vault?
Being unable to open your own vault is almost always an account-recovery problem, not a vault problem: if you lose access to your verification methods — a changed phone number, a lost authenticator — work through Microsoft’s account recovery process first, and the vault opens again once your identity is re-established. The documents themselves are not deleted while you sort it out. This is why keeping your Microsoft account’s security information current, with a backup email and phone number you actually control, matters more than any vault setting.
Adding the Vault to Your Wider Backup Habit
The vault protects your most sensitive documents inside OneDrive, but remember it is still one copy in one service. For documents you truly cannot lose — property deeds, certificates, your will — keep a second copy somewhere independent, such as an encrypted external drive at home. The vault handles day-to-day security and privacy; the second copy handles the disaster scenario. Together they give important papers both a strong lock and a safety net.
Conclusion
Personal Vault adds a genuine second lock to your most sensitive documents inside storage you already have. Set it up in minutes with a strong verification method, move your ID scans, tax records, and policies in, and let the auto-lock do its job. Just remember the two limits: vault files cannot be shared, and your account’s overall security matters as much as the vault itself.
Frequently Asked Questions
Is Personal Vault free?
Yes, but free OneDrive accounts can keep only a few files in the vault. A Microsoft 365 subscription removes the file-count limit, leaving only your overall storage quota.
Can I share a file from inside Personal Vault?
No. Sharing is disabled for vault files. Move a copy outside the vault and share that copy instead, keeping the protected original inside.
What verification do I need to open the vault?
A second factor each time: the Microsoft Authenticator app, a code sent by text or email, or biometrics/Windows Hello where set up. Your normal sign-in alone is not enough.
How quickly does the vault lock itself?
After a period of inactivity — around 20 minutes by default in the apps, and adjustable for the web in vault settings. You can also lock it manually at any time.
Are vault files backed up anywhere else?
They live in your OneDrive like other files, protected by the vault’s extra layer. They count against your OneDrive storage. Keep account recovery options up to date so you never lock yourself out permanently.


[…] for large batches. The cloud-icon behaviour behind this is the same one explained in our guide on setting up OneDrive Personal Vault — different feature, same sync […]