At some point somebody needs a document at short notice: an insurance policy after a flood, a passport number while abroad, a will after a death, a power of attorney during a hospital admission.
Frequently that somebody is not you, and they do not know where anything is.
The fix is unglamorous — one known location, an index, and someone who knows both.
What changed in 2026
- Digital identity documents spread. Some jurisdictions began issuing digital credentials alongside physical ones.
- Cloud storage became the default digital vault. Encrypted folders in mainstream services replaced dedicated products for most people.
- Estate access features improved. More platforms offered legacy contact mechanisms — see digital will.
- Physical originals stayed necessary. Certain documents continued to require the original rather than a copy.
What belongs in it
| Category |
Examples |
| Identity |
Passports, birth and marriage certificates, national identifiers |
| Legal |
Will, power of attorney, advance directive, trust documents |
| Property |
Deeds, titles, mortgage documents, leases |
| Insurance |
Policies with numbers and contact details |
| Financial |
Account list, not credentials |
| Medical |
Insurance details, key history, medication list |
| Access |
Where to find credentials and recovery information |
The access row deserves care. The vault should record where account credentials live — a password manager, a specific safe — rather than containing the credentials themselves. Recording passwords in a document defeats the point of a password manager.
Digital and physical, both
They fail differently, which is why both.
Physical originals are required for some purposes: certain identity documents, certain legal instruments where a signed original is needed. Store those in a fireproof safe at home or a safe deposit box, depending on how quickly they might be needed — see fireproof safe and safe deposit box.
Digital copies survive fire and flood, are accessible from anywhere, and can be shared instantly. Scan everything, including things you keep physically, and store them somewhere encrypted and backed up — see document scanning.
The two are complementary. A digital copy of a passport does not get you through an airport and is enormously helpful when reporting a lost one from abroad.
The index
The most useful single item, and the one nobody makes.
A one-page document listing what exists and where it is. Not the documents themselves — a map to them.
For each: what it is, where the original is, whether a digital copy exists and where, and any reference number worth having to hand.
That page is what lets someone else act. Without it, they are searching a house and a cloud account with no idea what they are looking for.
Keep it current — a stale index is worse than none, because it sends people to the wrong place. An annual review, alongside checking beneficiary designations, keeps it useful.
Someone else must be able to open it
The requirement people miss, and it is the point of the exercise.
A vault only you can access fails in exactly the circumstances it exists for — your incapacity, your absence, your death.
At least one trusted person should know it exists, where it is, and how to get into it. For a physical safe that means the combination or a key. For a digital vault it means access through a shared arrangement, a legacy contact feature, or credentials held with your legal documents.
Balancing that against not handing someone full access while you are perfectly well is the real design question. Options include a sealed envelope with a solicitor, a legacy contact that activates on a verified event, or splitting access between two people who must cooperate.
Common mistakes
- No index. Nobody knows what to look for.
- Only you can open it. Fails when needed.
- Passwords written in documents. Defeats the password manager.
- Digital only, where originals are required. Some things need the original.
- Physical only. Destroyed by the fire it was meant to survive.
- Never updating it. Sends people to the wrong place.
- A system too elaborate to maintain. Stops being current.
FAQ
What should not go in it?
Anything you would not want a trusted person to have on the day they open it, and passwords, which belong in a password manager the vault points to.
How often should I review it?
Annually, and after any significant change — a move, a marriage, a new policy, a new account. The same cadence as reviewing beneficiary designations.
What about documents for dependants?
Include them — children's birth certificates, guardianship arrangements, medical information. Those are frequently needed urgently by someone other than you.
Is a bank safe deposit box a good vault?
For originals that are rarely needed and irreplaceable, yes. For anything that might be needed urgently or outside banking hours, no — see safe deposit box.
Where to go next
For digitising what you hold, read document scanning. For physical storage options, fireproof safe and safe deposit box, and for the digital accounts side, digital will.