How to store important documents safely
Keep the originals in one fire-resistant place at home, and keep two encrypted digital copies under keys you control — one on your phone, one in a backup file somewhere else. That covers fire, theft, loss and a company being breached, without handing a readable copy of your passport to anyone. Unencrypted photos in a camera roll or a free cloud drive cover convenience and nothing else.
Start from what you are protecting against
"Safe" means four different things, and the storage options are good at different ones.
- Fire and flood destroy paper and the phone in the same room. Only a copy somewhere else survives.
- Theft takes the phone, the folder, or both. The question is whether what was taken can be read.
- Loss — the drawer that moved house, the phone left in a taxi — is the everyday one, and the one people plan for least.
- A breach at a company holding your copy. Not something you can prevent, only something you can avoid being exposed to.
Paper
The original passport, birth certificate, property deeds and the like cannot be replaced by a photo — a border, a court or a bank wants the document. Paper's weaknesses are fire, water and being in the wrong place. A small fire-resistant document box (rated for at least 30 minutes, kept off the floor for flood) handles the first two. For the third, the rule is one place, always the same place, and a photo of every page so you can act when the original is at home and you are not.
Safe deposit boxes are excellent for things you need once a decade and terrible for a passport you need next month at 6 a.m. Match the storage to how often you reach for the document.
Your phone
The phone is where you actually need the copy: at the check-in desk, on the phone to the insurer, at the clinic. It is also the most-lost object you own. So the copy on the phone must be unreadable to whoever ends up with it. Two conditions make that true: the phone itself is locked with a passcode and biometrics, and the documents are encrypted separately inside the app, so a phone unlocked for a moment does not expose a decade of paperwork.
The camera roll fails the second condition. Photos there are readable by any app you have granted photo access, are synced to whatever cloud the phone is signed into, and appear in search. A dedicated vault that encrypts at rest is the difference. For the record, RenewKeep stores documents in a SQLCipher database and photographs as AES-256-GCM files, under a 256-bit key held in the phone's keystore — described in full here. The design point is not the cipher; it is that the key exists only on the phone.
The cloud
A cloud drive solves the fire problem and the loss problem in one move, which is why it is the default answer. What it does not solve is the breach problem, and it introduces a new one: whoever runs the drive can read the file, and so can anyone who compromises your account or theirs. Big providers encrypt in transit and at rest, but with keys they hold; a subpoena, an insider, a phishing email that captures your login — each of those yields a readable passport scan.
The fix is not to avoid the cloud. It is to never put a readable copy in it. An encrypted backup file — encrypted on your device with a passphrase you chose, before it is uploaded — turns any cloud drive into safe off-site storage, because what sits there is ciphertext. The provider stores it; the provider cannot open it; and if the provider is breached, what leaks is noise.
The two-copy rule
Put it together and the arrangement is simple:
- Originals in one fire-resistant place at home.
- Working copy on your phone, inside an encrypting vault, behind the phone's own lock.
- Backup copy as one encrypted export, protected by a passphrase you remember, kept somewhere that is not the phone — a cloud drive, a computer, a USB stick in a different building.
Fire takes the originals: you have the copies to prove what existed and to start replacements. Theft or loss takes the phone: the thief has ciphertext, and the backup restores everything onto a new one. A provider is breached: they leaked a file they could not read. There is no scenario in that list where anyone but you sees the documents, and no scenario where you lose them.
Which pages to copy
A photo of the cover is not a copy. For a passport it is the data page and any visa or residence sticker. For a driving licence, both sides. For an insurance policy, the schedule page that carries the policy number, the renewal date and the excess — the forty-page wording booklet can stay in the drawer. For a certificate, the whole face, straight on, in daylight; a skewed photo taken under a kitchen light is the one that gets rejected when you actually need it.
What most guides get wrong
They stop at "use a password manager" or "back up to the cloud" and never say who holds the key. That is the whole question. A copy is safe exactly to the extent that only you can read it, and convenient exactly to the extent that you can reach it when the original is somewhere else. Encrypting on the device, with a key that never leaves it, is the only arrangement that is both — and it comes with one honest cost: forget the passphrase and lose the phone, and nobody can help. Write the passphrase down, on paper, in the fire-resistant box with the originals. That closes the loop.