Most families have a Vault of some kind. A fireproof safe with the will inside. A password manager with the bank logins. An encrypted folder with the scanned tax returns. The container exists; the contents are real; the intent is right.
Then a single rule, which most families have never heard, quietly undoes all of it.
The Vault Key is never stored inside the Vault it opens.
This sounds obvious. In practice, it is the most common Vault failure mode I have seen in family information systems — and the failures are rarely visible until the Vault is needed.
Consider three real configurations:
- A family stores their fireproof safe combination in a sealed envelope. The sealed envelope is inside the fireproof safe.
- A family uses a password manager. The master passphrase, written down for safekeeping, is saved as a “secure note” — inside the same password manager.
- A family keeps an encrypted folder for sensitive documents. The passphrase exists only in the memory of one person — who is now incapacitated.
Each is a version of the same failure: the key and the lock are in the same place, or the key exists in only one form. The Vault is sealed not just to intruders, but to everyone — including the spouse, the executor, the adult child trying to find a power of attorney during a hospital admission.
The system protected the information from everyone. Including the people who needed it most.
Where should the Vault Key be stored?
A working Vault Key strategy satisfies three conditions. Together, they are what the rule means in practice.
1. The Vault Key is written down in a durable, recoverable form. Not stored only in memory. Not stored only on a digital device that itself requires the Vault to access. A passphrase known only to one person is a passphrase that ends with that person.
2. That written record is stored outside the Vault it opens, in a location that is itself secured. A second physical safe, a sealed envelope held by an attorney, a safe-deposit box at a different institution. An unlocked drawer is not a key-storage location.
3. At least one trusted person knows where the record is — or will be directed to it through the Family Guide when the time comes. A perfectly executed Vault Key strategy that only the system owner knows about is, in practice, the same as no strategy at all.
Each condition closes one specific failure mode: forgetting, theft, or the unavailability of the system owner. All three together are what makes the rule operational.
The two-minute test
If you have a Vault of any kind right now, here is the fast self-check:
Pick any one Vault you currently use — a safe, a password manager, an encrypted file, anything. Where is its key right now?
If the answer is “in my head,” you have just identified a single point of failure. If you cannot answer in two minutes, you have identified a different one — you do not yet have a key strategy at all. If you can answer cleanly, and the location is outside the Vault and known to one trusted person, the rule is satisfied for that Vault.
Most readers find at least one Vault where the answer is unsatisfactory. That is not negligence; it is the consequence of a rule that almost no one was taught.
Why this matters more than tool choice
It is tempting to focus the family-information conversation on which password manager to use, or which safe to buy, or which encryption tool is best. Those choices matter — but they sit downstream of this rule. A perfectly chosen tool with its Vault Key stored inside it is not a real Vault. A simpler tool with a documented Vault Key strategy is.
This is why The Recoverable Family takes a tool-agnostic approach. Containers vary. The rule does not.
The next step
Run the two-minute test on every Vault you have — today. Write down where each key currently lives. For any Vault that fails the rule, take one of these actions:
- Write the key down in durable form.
- Move the written key outside the Vault it opens.
- Tell one trusted person where the key is — or commit to documenting it in your Family Guide.
You do not have to fix everything at once. You do have to know where the gaps are.
A Vault with no documented Vault Key strategy is a liability disguised as a security measure. Once the rule is satisfied, the Vault becomes what it was always meant to be: a container that protects the right people from being locked out at the worst possible moment.
Ready to put the rule into practice? The free FIRM System templates — including the Passwords and Passkeys Module — are at thefirmguide.com.