Safe provides a place for family and friends to store important and secure information in a group. You can save items such as the username and password your family use to connect to a streaming service, your frequent flyer number, the WiFi password for your apartment, and more. All data stored in a Safe is completely encrypted and secured so only members of the group have access.
When setting up your Safe, you have two options for how you want the encryption handled. In both cases, all data is completely encrypted using your key before it ever leaves your device, so no prying eyes can see what’s inside. The key difference is who manages the key:
Microsoft manages your key (default): A unique private encryption key is generated for you and saved on Microsoft servers. A copy of this key is stored on your device, and this key encrypts all data before sending across the network. When Microsoft manages your key, everything is set up for you automatically on your other devices. Plus, you don’t have to remember and keep track of a complex key sequence.
You manage your own key: A unique private encryption key is generated for you and that key never leaves your device. Choose this option if you want the added peace of mind that no one but you has access to your key, not even Microsoft. It is important that you save your key somewhere safe, as you will need to enter it again if you log in from a new device. If you lose your key, it can’t be recovered; you will need to reset your Safe and start over.
Regardless of which option you choose, your data is completely secure. Microsoft will never access your data on your behalf.