The short answer
- Important documents need three places: the originals somewhere physically safe, digital copies in an encrypted vault or cloud folder, and a person who knows where both are.
- A digital vault holds scans and PDFs you might need fast: IDs, insurance policies, deeds, tax returns, medical records. It doesn’t replace originals like a birth certificate, a deed or a will.
- A password manager is a different tool: it stores logins. Keep passwords out of your document vault.
- Protect the vault with a long, unique password (CISA says at least 16 characters) and multi-factor authentication, and back it up: three copies, two kinds of media, one kept offline.
- Set up emergency access now. Apple’s Legacy Contact, Google’s Inactive Account Manager and many password managers have a way to hand over access if something happens to you.
Where to keep important documents: the three-place rule
There is no single safe place. Each option protects against a different risk.
- A fireproof home safe gives you fast access. The FDIC notes it suits replaceable items you need quickly, like passports, but is much less secure than a bank box against burglary.
- A bank safe deposit box protects against theft and fire better, but it’s slow to reach and its contents are not covered by FDIC insurance. A safe deposit box is storage space, not a deposit account. If you want coverage, ask your homeowner’s or renter’s insurer.
- A digital vault protects against losing the paper and lets you send a copy from your phone in a minute. It’s only as safe as its password and its backups.
The FDIC’s own suggestion is to keep originals of birth certificates, property deeds, car titles and US savings bonds in a safe deposit box, but not the things you may need at short notice, such as passports and original powers of attorney. For your will, it says to ask an attorney. That’s because access to a box after death depends on state law and can require a court order.
In England and Wales, there’s a public option for the will: you can deposit it with HM Courts and Tribunals Service for a one-off fee of £24. Some US states let you lodge a will with the probate court during your lifetime; ask your county court.
For how long to keep each paper, and what to shred, see our guide on how to organize paperwork.
What to store in a digital vault
Ask yourself what you’d need if the house flooded tonight, or if you were in hospital and someone else had to handle things.
- Scans of passports, driver’s licences and national ID cards (both sides)
- Birth, marriage and divorce certificates, adoption papers
- Social Security card or National Insurance number letter
- Deed or lease, mortgage statement, home insurance policy
- Health, auto and life insurance policies with policy numbers and claims lines
- Last three years of tax returns
- Wills, powers of attorney and advance directives (copies; say where the originals are)
- Vaccination records and a current medication list
- Receipts and serial numbers for expensive items
- A photo or video walk-through of every room, for insurance claims
A vault is only useful if you can find things in ten seconds. Use the same topic folders as your paper archive (Identity, Home, Money, Tax, Health, Insurance) and put the year in every file name.
What not to store there
- Passwords in a note or spreadsheet. A file called “passwords.xlsx” inside a vault defeats the vault. Logins go in a password manager.
- Full card numbers and PINs. Nobody legitimate needs them, including your family.
- The vault’s own recovery codes. If they’re inside, losing your phone locks you out. Print them and keep them in your home safe or emergency file.
- Stray copies elsewhere. A passport scan sitting in your camera roll or an old email thread is more exposed than the one in your vault. Delete the extras.
Password manager or document vault?
People often mix them up. They solve two different problems, and most households need both.
| Password manager | Document vault | |
|---|---|---|
| Stores | Logins, passkeys, card details, short secure notes | Scans, PDFs, photos of documents |
| Main job | Unique passwords for every account, autofill | Find and share a copy fast |
| Size | Tiny | Gigabytes over time |
| Emergency access | Often a trusted-contact feature | Depends on the provider |
| What official guidance says | CISA and the NCSC both recommend using one | Back it up; protect it with MFA |
Stores
Password managerLogins, passkeys, card details, short secure notes
Document vaultScans, PDFs, photos of documents
Main job
Password managerUnique passwords for every account, autofill
Document vaultFind and share a copy fast
Size
Password managerTiny
Document vaultGigabytes over time
Emergency access
Password managerOften a trusted-contact feature
Document vaultDepends on the provider
What official guidance says
Password managerCISA and the NCSC both recommend using one
Document vaultBack it up; protect it with MFA
Some password managers let you attach files, and some cloud drives offer an encrypted “vault” folder. That can work for a small household. What matters is that the documents are encrypted, protected by MFA and backed up, and that someone you trust can get in if needed.
Securing the vault: what NIST, CISA and the NCSC say
A long, unique password. CISA recommends at least 16 characters, either random or a passphrase of four to seven unrelated words, and a different one for every account. The UK’s NCSC suggests three random words. NIST’s 2025 digital identity guidelines (SP 800-63B-4) require services to accept passwords of at least 15 characters when the password is the only factor, and tell them to stop forcing periodic changes unless there’s evidence of compromise. Length beats complexity.
Multi-factor authentication. CISA asks everyone to turn on MFA, especially for email, social media and financial accounts, and to protect the email first: it’s where every other password gets reset. Not all MFA is equal. CISA calls FIDO/WebAuthn authentication (used by security keys and passkeys) the only widely available phishing-resistant option. But its bottom line is plain: any MFA is better than no MFA.
Backups. The NCSC tells people to back up their important data, such as photos and key documents, to an external drive or cloud storage. A common rule of thumb, recommended for example by France’s data protection authority (CNIL), is 3-2-1: three copies, on two kinds of media, one disconnected from the network. For a family, that could be the cloud vault, a laptop and a USB drive kept in the home safe. Unplug the drive between backups, and try restoring a file once in a while.
Updates. Keep your phone and computer updated. The NCSC lists updates among its top tips because they fix security flaws.
Emergency access: plan for the day you can’t log in
A vault nobody else can open is a problem the day you’re in hospital or after your death. Set up a handover now.
- Pick one or two people. A partner, adult child or close friend who is organised and trusted.
- Turn on built-in legacy tools. Apple Legacy Contact on iPhone; Google Inactive Account Manager for Gmail, Drive and Photos.
- Use your password manager’s emergency access. Many offer a trusted contact who can request access after a waiting period, during which you can refuse.
- Write a one-page letter. Where the vault is, where the originals are, who your lawyer and insurer are. No passwords on it. Tell your executor or attorney where it’s kept.
- Review it once a year. People move and accounts change. Add it to your yearly paperwork purge.
Know the limits of each tool. Apple’s Legacy Contact gets your photos, messages, notes, files and device backups once they present the access key and a death certificate. It can’t reach purchased media or your iCloud Keychain, which holds passwords, passkeys and payment details. Google’s Inactive Account Manager lets you pick up to 10 people who receive a link to download the data types you chose once your account has been inactive for the period you set. Neither tool opens your bank, insurance or other apps, which is why the one-page letter and the password manager’s emergency access matter.
Where Binome360 fits
To be clear, Binome360 isn’t a document vault. Its memory is a personal vault for facts you tell it (“remember that…”), which it gives back when you ask. The app also keeps files attached to your records, such as a receipt photo on an expense. It’s not the place for your passport scan.
What it does well is remember where things are and the numbers you look up often, and remind you before things expire.
Remember that our home insurance policy number is HO-448217 and the originals are in the fire safe. Remind me to renew my passport on 1 March 2028
Here’s what I’ve prepared: a memory “Home insurance: policy HO-448217, originals in the fire safe” and a reminder on 1 March 2028 “Renew passport”. Save them?
A policy number, yes. A password or a PIN, never. Nothing is saved until you confirm.
Try Binome360 for freeIn a shared assistant for your household, the people you invite can see these facts and reminders, so your partner knows where the insurance papers are without calling you.
Frequently asked questions
What is the safest place to keep important documents?
There’s no single one. Keep originals you rarely need (birth certificate, deed, car title) in a safe deposit box or with your attorney, originals you may need fast (passport) in a fireproof home safe, and scanned copies of everything in an encrypted digital vault with MFA and a backup.
Is a password manager the same as a digital vault?
No. A password manager stores logins and short secure notes; a digital vault stores documents. Some password managers accept file attachments, which can cover a small household, but don’t put passwords in a document folder.
Should I keep my will in a safe deposit box?
Ask your attorney first. In some US states, getting into a sole owner’s box after death can take a court order, which delays finding the will. The FDIC suggests asking an attorney where to keep it. In England and Wales, HMCTS will store it for a one-off £24 fee.
What happens to my digital vault when I die?
It depends on the provider’s terms and on what you set up. Without emergency access or instructions, your family may be locked out. Add a trusted contact where the service allows it, turn on Apple’s or Google’s legacy tools, and leave a letter saying where everything is.
In short
Keep originals somewhere physically safe, copies in an encrypted vault protected by a long password and MFA, and a backup offline. Use a password manager for logins, not the vault, and set up emergency access so someone you trust can step in.
First action: tonight, scan both sides of your passport and driver’s licence, save them in a folder called “Identity” with the date in the file name, and turn on MFA for your email.
Sources
- FDIC, “Five Things to Know About Safe Deposit Boxes, Home Safes and Your Valuables”, updated 1 August 2023: fdic.gov/consumer-resource-center/five-things-know-about-safe-deposit-boxes-home-safes-and-your-valuables.
- GOV.UK, HM Courts and Tribunals Service, “How to store a will with the Probate Service”, updated 13 July 2026: gov.uk/government/publications/store-a-will-with-the-probate-service.
- Nolo, “How to Safely Store Your Will” (secondary source on probate court storage and state access rules): nolo.com/legal-encyclopedia/how-to-keep-your-will-safe.html.
- CISA, “Use Strong Passwords” (Secure Our World): cisa.gov/secure-our-world/use-strong-passwords; “More than a Password” (MFA): cisa.gov/MFA.
- NIST, Special Publication 800-63B-4, Digital Identity Guidelines: Authentication and Authenticator Management, August 2025: pages.nist.gov/800-63-4/sp800-63b.html.
- National Cyber Security Centre (UK), “Top tips for staying secure online”: ncsc.gov.uk/collection/top-tips-for-staying-secure-online.
- CNIL, “Sécurité des données : les règles essentielles”, 19 June 2026 (3-2-1 rule): cnil.fr/fr/securite-des-donnees-les-regles-essentielles.
- Apple Support, “How to add a Legacy Contact for your Apple Account”: support.apple.com/en-us/102631.
- Google Account Help, “About Inactive Account Manager”: support.google.com/accounts/answer/3036546.
Also available in Français.