
Microsoft is also making it easy to scan in documents or passport information within the OneDrive mobile app so that it saves directly to the Personal Vault. You can store as many files you want in the vault, up to the overall OneDrive storage limit. If you wanted to, you could store all of your files in this Personal Vault, but then you’d need to reauthenticate every time you wanted to access a file. If you use the web version of OneDrive on an unfamiliar PC, then any files within the Personal Vault will not be cached by a browser. On a PC, you’ll also be able to use Windows Hello for this. The Personal Vault will also automatically relock on a PC or device after a period of inactivity, and you’ll need to then reauthenticate to get access again. On Windows 10 PCs, Microsoft is using a BitLocker-encrypted area of a local hard drive to sync the Personal Vault files, and all OneDrive files are encrypted at rest in Microsoft’s cloud and in transit to a device. This secured area is designed for files like copies of passports, identification cards, or more sensitive personal financial information. If you store files in the new Personal Vault area, you’ll be prompted for an additional code each time you access them via the web, PC, or mobile devices. The new OneDrive Personal Vault feature will be protected by an additional step of identity verification, such as a PIN, fingerprint / facial authentication, or a two-factor authentication (2FA) code.

Microsoft is adding a new secured storage area to OneDrive where users can store more sensitive files.
