What not to store (passwords, full account numbers)
Store how to find an account, not the secret that opens it. Leave out passwords and full numbers. File the institution, the type, and where statements live.
The most protective thing you can do for your family is knowing what to leave out.
Your vault is for what your family will need to find. It is not a password book. Here's the simple rule: store how to find the account, never the secret that opens it.
Leave out: passwords, full card or account numbers, tax-file PINs, two-factor backup codes, and photos of both sides of a card. Those are keys, and a key in the wrong hands is a problem.
Put in: the institution, the type of account, and where statements are kept. For example: "Credit union, checking, statements in the desk drawer." That's enough for someone to call and start the institution's own process. If a site offers a legacy or recovery contact, set it up there, and just note in the vault that you did.
Do file identity documents like a passport or birth certificate. Families are asked for those constantly.
Already typed a full number into a note? Edit it down to the institution plus the action you want taken: call, close, or find the statement.