OneDrive Personal Vault is a protected folder inside your OneDrive for your most sensitive files, and it only opens after a second identity check such as your fingerprint, face, a PIN, or a code by text, email or the Microsoft Authenticator app. It locks itself when you stop using it: as of October 2026 that's after 20 minutes of inactivity on the web and 3 minutes on a phone.
Here's the catch. Without a Microsoft 365 Personal or Family subscription, Microsoft's help says you can only add up to three files to the vault. With a subscription, you can add as many as your storage allows. So on free OneDrive it's somewhere for a passport scan and a couple of certificates, not your whole filing cabinet. If you're not sure what your account includes, here's what OneDrive free includes.
What the vault adds over two-step verification
Two-step verification on your Microsoft account protects sign-in for every app that uses that account. Personal Vault adds a second lock on one folder. If you already use two-step verification, Microsoft lists these extra protections:
- Files are encrypted with BitLocker when in use locally on a Windows 10 PC.
- Files aren't stored unprotected or cached on your PC, device or browser.
- Sharing is blocked, so you can't send a vault file to someone by accident.
- The vault locks itself after a set number of minutes, which varies by device and which you can change.
How to set up Personal Vault
You have to set it up separately on each device where you want to use it, and as of October 2026 it's only available on the web, in the mobile app and on a Windows PC.
- Open OneDrive and select Get started on the Personal Vault message, or select the Personal Vault folder if the message has gone.
- Read the introduction and select Next or Continue, depending on your device.
- In Verify your identity, check your account details, note your email address and select Verify. On the mobile app you'll sign in first.
- Choose a verification method, such as Text, and follow the prompts.
- If you chose text or email, find the message and type in the code.
No code arriving usually means your account details need updating, for example your mobile number is missing. On OneDrive.com you can also turn it on from Settings, then Personal Vault, then Enable, choosing a secondary email address or the Microsoft Authenticator app. The Authenticator app doesn't need internet access to generate a code.
Adding and moving files in
- In OneDrive, select the Personal Vault folder and verify your identity if asked.
- Select the files or folders you want to protect.
- Select Move to and choose Personal Vault, or drag the items in.
The tip I like most is on the phone. The OneDrive mobile app can scan documents, take photos or shoot video straight into the vault, so a picture of your ID never sits in your camera roll. In Chrome or Edge you can also upload whole folders with the Folder option on the Upload menu.
Auto-lock times by device
| Where you use it | When it locks, as of October 2026 | Can you change it? |
|---|---|---|
| Web | After 20 minutes of inactivity | Not stated by Microsoft |
| Mobile app | After 3 minutes of inactivity | Yes: Me, then Settings, then Personal Vault, then Auto-lock or Inactivity lock |
| Windows PC | After the lock wait time you pick | Yes: OneDrive settings, then the lock wait time under Personal Vault |
When it locks, access to files stops, including any video you're playing. Microsoft still suggests closing the vault yourself when you're done, so your files stay locked even if you forget to close the browser. You can lock it at any time from the Personal Vault folder.
What Personal Vault won't do
| Limit | What Microsoft says |
|---|---|
| Sharing | You can't share a file from the vault. Move it out first |
| Search | Vault files don't appear in search results, for privacy |
| File names on Windows 10 | Names and hashes of files aren't protected when the vault is locked |
| Recent lists | A vault file opened in a Windows app may show its name in that app's Recent list |
| Editing on a phone | You can view Office documents but must move them out to edit; editing works on a PC or the web |
| Old Word files | Old .doc files can't be opened from the vault, though current Word formats are fine |
| Thumbnails | Hidden on your computer for privacy, visible on the web and mobile |
The file names point matters most. If the names themselves are sensitive, open vault files on OneDrive.com, as Microsoft suggests, to keep them out of Windows Recent lists.
Deleting files from the vault
Deletion works differently by device. On mobile and OneDrive.com, deleted vault files only appear in the recycle bin while the vault is open. On Windows 10, files deleted from the vault on your PC are deleted permanently and skip your PC recycle bin, though you'll still find them in the OneDrive.com recycle bin if they'd already uploaded. My guide to how to recover deleted files from OneDrive covers the rest.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Where Personal Vault works
You need Windows 10 version 1903 or newer, or the latest Microsoft Edge, Chrome or Firefox. Microsoft suggests the In-Private or Incognito mode of your browser for added security. On a PC the vault shows as a shortcut in your file list, not in the folder list, which is why people think it's missing. On the mobile app it sits in the folder list.
My verdict on OneDrive Personal Vault
I'd use it for the handful of documents that would hurt if someone got into your account: ID scans, tax papers, insurance and recovery codes. On free OneDrive that's three files, so pick them carefully. Scan straight into it from your phone, lock it when you're done, and open sensitive files on the web if the file names matter.
Frequently asked questions
How many files can I put in OneDrive Personal Vault for free?
Up to three files without a Microsoft 365 Family or Personal subscription. With a subscription you can add as many as you want, up to your storage limit.
Why does my OneDrive Personal Vault keep locking?
It locks automatically for your protection, after 20 minutes of inactivity on the web and 3 minutes on a mobile device. You can change the time on mobile and on a PC.
Can I share a file from Personal Vault?
No. Sharing is blocked in Personal Vault, so you need to move the file out of the vault to share it.
Why can't I find my Personal Vault files in search?
To protect your privacy, Personal Vault items don't appear in search results.
Where is Personal Vault on my PC?
Because it's a secure folder, it appears as a shortcut in your file list, not in the folder list. On the mobile app you'll see it in the folder list.
