Microsoft is adding an additional layer of security to its OneDrive storage service. It has introduced a new OneDrive Personal Vault feature which is essentially a folder which locks sensitive material behind two-factor authentication or an extra identity verification step such as PIN or facial/fingerprint authentication.
If files are stored in the Personal Vault, users will be required to enter an additional code whenever they access the folder through PC, the web or a mobile device. On Windows 10 PCs, it will use a BitLocker-encrypted area of a local hard drive to sync the files in the Personal Vault.
Microsoft says that all OneDrive files are encrypted in its cloud and when in transit to the device. The Personal Vault has some built-in security features. It will relock automatically on a device after there has been inactivity for a certain period of time. If the web version of OneDrive is used on an unfamiliar PC, any and all files within the Personal Vault are not going to get cached by the browser.
Users can store as many files as they want in the vault, the overall OneDrive storage limit permitting. The OneDrive Personal Vault is available for the web version of OneDrive, the mobile apps, and Windows 10 PC. It’s only rolling out in Australia, New Zealand, and Canada initially with the company saying that it will be brought to all markets by the end of this year.