The Family Document Vault: What to Set Up Before Your Student Leaves

Somewhere in the middle of packing and scheduling and the last-minute Target runs, there is a category of preparation that tends to get skipped: making sure both you and your student can find critical information when something goes wrong.

That something does not have to be a crisis. It can be your student needing to fill out a health form at the campus health center and not knowing their insurance group number. It can be you needing to make a payment on their campus account and not having the login. It can be a medication running out and your student not having the prescription information on hand.

A shared family document vault, set up before move-in, solves most of these in advance. This guide covers what to put in it, how to set it up securely, and what the legal documents look like that families with college students should have in place.

What goes in the vault

The goal is not to compile every document your family has ever created. It is to make the specific information your student is likely to need, and that you are likely to need on their behalf, findable in under two minutes from anywhere.

Health insurance information. Front and back of the insurance card (a photo is fine), the insurance company’s member services phone number, the group number, the member ID, and the instructions for how to find an in-network urgent care near campus.

Prescription information. For any ongoing medications: the medication name and dosage, the prescribing doctor’s name and phone number, and the pharmacy your student plans to use near campus. If a controlled substance is involved, include the DEA schedule classification (your student will need this when transferring a prescription to a new state).

Emergency contacts. Not just your number, but a backup contact, a local contact near campus if you have one, and the campus emergency line. Some students also add their RA’s number.

Campus account credentials. Login information for the student portal, the billing/financial portal (Touchnet, CASHNet, or whatever the school uses), and the student email. Your student should control these, but you need to be able to access the billing portal at minimum.

Financial aid information. The FSA ID credentials (both student and parent versions), the expected family contribution or SAI from the most recent FAFSA, and the list of grants and loans in the package. If anything changes mid-year, this baseline is your reference.

Important phone numbers. Campus health center, Dean of Students office, campus counseling services after-hours line, and the non-emergency campus police line. The 988 Suicide and Crisis Lifeline is worth including as well.

Insurance policy documents. If your student has renter’s insurance (they should, if they have a laptop and other valuables on campus), save the policy number, the insurance company’s claims line, and the coverage summary.

Choosing a password manager

The simplest way to share credentials and documents securely is a family password manager. These are applications that store passwords, notes, and document copies behind a single master password, with the ability to share specific items with designated family members.

The key feature to look for is end-to-end encryption. This means the data is encrypted on your device before it leaves, so the company providing the service cannot read your vault contents. Standard iCloud Notes, for example, does not offer end-to-end encryption by default, which means Apple’s servers can access the contents. A dedicated password manager with end-to-end encryption does not have this exposure.

Options worth considering for families (pricing as of June 2026, starting at):

All four use end-to-end encryption. All four have mobile apps. The choice between them is mostly about interface preference and whether you want open-source code (Bitwarden) or a more polished commercial product.

If your family already uses iCloud Keychain for password syncing, note that it does not support shared vaults or document storage, and does not currently offer cross-platform access for Android users. It works for individual password management but is not ideal for a shared family vault.

Legal documents for college students

Your student is now a legal adult. That changes the legal landscape in ways most families do not think about until they need to.

Healthcare proxy / medical power of attorney. Without this document, you have no legal right to make medical decisions for your student in an emergency in which they are incapacitated. Hospitals can and do turn away parents who are not designated. Your student does not have to sign one, but they should know the risk of not having one in place.

HIPAA authorization. This is separate from the healthcare proxy. A HIPAA authorization permits a specific person (you) to receive information from healthcare providers about your student’s treatment. Again, your student must sign it voluntarily. For what a valid authorization needs to include and what happens if none is on file in an emergency, see our guide to HIPAA medical authorization for college students.

Durable power of attorney. This allows you to manage financial affairs on your student’s behalf if they are incapacitated. For most 18-year-olds, this is relevant primarily in a serious accident or medical emergency.

None of these documents need to be elaborate. Your state bar association may offer low-cost or free templates. An estate planning attorney can prepare all three documents for a one-time fee that varies by state. Some student health centers or legal aid offices on campus also provide templates.

If your student is reluctant (many are), the framing that works best is practical rather than morbid: “This is just making sure I can actually help you if something goes wrong while you’re far from home. It’s like the emergency contact form, but with legal weight.”

Once these are signed, they need a real home, not a drawer. Keep the physical originals in a small fireproof, waterproof document box. Then scan clean PDF copies of each one, a compact portable document scanner handles multi-page or notarized documents better than a phone photo, and add those PDFs to the shared vault alongside everything else.

FERPA and account access

FERPA covers academic records (grades, enrollment status, academic standing). It does not cover billing. You can get access to your student’s billing account as an Authorized User without a FERPA waiver, via whatever financial portal the school uses.

For academic information, your student needs to sign a FERPA release form. This is done at the registrar’s office or through the student portal at most schools. Without it, the school cannot discuss your student’s academic status with you, even if you are paying the bill.

Both setups should happen during or immediately after orientation. See our FERPA toolkit for the specific steps and email templates if you run into roadblocks.

For a full walkthrough of what a FERPA release covers, what it does not cover, and how to request one, see our step-by-step FERPA educational records release guide.

Setting it up in under an hour

This does not need to be a large project. The steps:

Step 1: Choose a password manager and set up a family plan. Any of the four options above works. Install the app on both your phone and your student’s phone. Create a shared vault or shared collection.

Step 2: Add the core credentials. Start with the student portal login, the billing portal login, and the FSA ID credentials. These are the items you are most likely to need urgently.

Step 3: Add the health insurance information. Photo the front and back of the insurance card and attach it to a secure note. Add the group number, member ID, and member services phone number as text in the same note.

Step 4: Add prescription information. One secure note per medication. Include the medication name, dosage, prescribing doctor, and pharmacy plan.

Step 5: Add emergency contacts and important numbers. Campus health center, Dean of Students, campus counseling after-hours, campus police non-emergency, 988.

Step 6: Review together before move-in. Open the vault with your student. Make sure they can access it from their phone. Make sure they know what is in it. This conversation also covers the ground of what each document or credential is and when to use it.

Two laws govern access to your student’s records once they turn 18: see our full FERPA Educational Records guide and HIPAA Medical Authorization guide for the documents and steps involved.

Frequently asked questions

Do I need a paid password manager, or will Google Passwords / iCloud Keychain work?
Google Passwords and iCloud Keychain are convenient for individual password autofill but are not designed for shared family vaults or document storage. If the only goal is sharing a few credentials, a shared Google doc with view-only access is serviceable. But for a vault that includes insurance information, prescriptions, and financial credentials, a dedicated password manager with end-to-end encryption is the better choice.

What if my student won’t share their passwords with me?
The vault does not need to contain every password. The minimum useful set is: billing portal, insurance information, emergency contacts, and FSA ID. Your student can maintain everything else independently. Frame it as a practical tool for emergencies rather than as parental oversight.

How do I access the billing portal if my student set it up but I don’t have the login?
Ask your student to log in and add you as an Authorized User. This is done in the financial portal (Touchnet, CASHNet, or the school’s equivalent). Once designated, you get your own login to view the account and make payments. Your student has to initiate this; you cannot do it on their behalf.

Does renter’s insurance cover a student’s laptop and belongings in the dorm?
Your homeowner’s or renter’s insurance may cover your student’s belongings at school as a “resident relative,” but coverage is typically limited and deductibles often apply. A separate student renter’s policy costs roughly $10 to $20 per month and provides dedicated coverage with a lower deductible. GradGuard is one option targeted at college students. Check your existing policy first, then compare.

At what point do we need the healthcare proxy?
The healthcare proxy matters in any situation where your student is incapacitated and cannot speak for themselves: a serious accident, a medical emergency requiring surgery, a mental health crisis requiring involuntary evaluation. It also matters for less dramatic situations where a provider simply will not share information without documentation. Having it before it is needed is the only reliable approach.

Is there a simpler alternative to the password manager?
A shared Google Doc with view-only access for your student and edit access for you works for basic information sharing. It is not encrypted at the document level (Google can access the contents), which matters more for credentials than for emergency contact numbers. If the vault contains passwords or insurance information, upgrade to a password manager. If it is only phone numbers and a scanned insurance card, a shared doc is adequate.

What changes if my student is an international student?
FERPA and HIPAA apply the same way regardless of citizenship or visa status. The practical difference is logistics. If you are not in the same time zone or country, designate a US based emergency contact, a relative, family friend, or the international student office, who can respond quickly if the school cannot reach you. Give the international student office your direct contact information as well as the emergency contact’s, and confirm your student has listed both.

What if the parents are divorced or the family is blended?
FERPA and HIPAA do not automatically favor one parent over another. Both legal parents generally retain equal rights to be authorized unless a custody order on file with the school says otherwise. Your student, as an adult, decides who to list, whether that is one parent, both, a stepparent, or someone else. Talk about this as a family before move in so it is settled in advance rather than becoming a conflict later. If there is a custody related court order limiting a parent’s access, give the registrar and health center a copy.

What is different if my student manages a chronic condition?
A HIPAA authorization lets you receive information when you ask for it. It does not obligate the health center to call you proactively. If your student manages a chronic condition such as diabetes, a severe allergy, or a mental health condition, talk with them before move in about whether they want campus health services to have the condition on file so staff can respond appropriately in an emergency, not just after one happens. If the condition affects coursework, that is a separate process through the school’s disability or accessibility office, not something these documents cover.