Move sensitive OneDrive files into Personal Vault without orphaning them

OneDrive Personal Vault is a protected area for sensitive personal files. Microsoft requires an additional identity check to unlock it and automatically locks it after inactivity. It can reduce casual access after an unlocked account or device is encountered, but it is not a substitute for account security or an independent backup. Moving a file also changes where you find it, so track the new path and test the recovery route.

Before you start​

Confirm that your OneDrive personal subscription and device support Personal Vault; Microsoft lists web, mobile and Windows access. Check that your Microsoft Account verification method actually works before moving the only copy of an important document. Keep an independent backup of critical records in a different protected location.

Do it step by step​

1. Sign in at OneDrive.com through your own bookmark or open the trusted OneDrive app. Select Personal Vault and complete Get started and the identity-verification prompts.
2. Unlock the vault and move one non-sensitive test file into it first. Use Move to Personal Vault rather than making a stray copy and assuming the original vanished.
3. Close and reopen the vault, verify that the test file is present and readable, and check whether an old copy remains in its previous location or on another synchronized device.
4. Move the actual sensitive files in manageable groups. After each group, check the destination and any workflows that referred to the old path. A link shared earlier or an application pointing to the original location may no longer work.
5. Allow the vault to lock and test the additional verification step again, including on a second device you expect to use. If a verification number is being retired, update account security before losing the number.
6. Review copies in Downloads, email attachments, scanners and photo libraries. The vault's protection does not retroactively remove those copies. Keep a secure inventory of what the vault contains for future recovery.

Check the result​

The intended files are inside Personal Vault, open after a fresh identity check and remain reachable on supported devices. No unintended exposed copy remains where you expected a move.

If something goes wrong​

If verification fails, fix your Microsoft Account security information through official recovery rather than repeatedly moving files. If a file appears missing, check the original folder, OneDrive recycle bin and sync status before making more changes.

Know the limit​

The extra lock protects access to the vault, but a compromised account, malware on an unlocked device or someone who knows your second step can still be a problem. Personal Vault availability and features depend on account and platform. Maintain a separate backup. Microsoft Personal Vault