How to build a bullion inventory without exposing it

What to take away

A bullion inventory answers four questions: what exists, who owns it, who holds it, and what changed since the last count. A single plain-text file that answers all four is also a shopping list for anyone who steals the device it sits on.

Split the record into three layers

Keep separate files for separate purposes, because they leak different things if exposed.

Keep combinations, alarm codes, private keys and full security procedures out of the inventory file entirely.

The Oklahoma Insurance Department's guide to building a home inventory asks for every item of value, serial numbers where they exist, and detailed records of antiques, jewelry and collectibles with wide-angle and close-up photographs.

Split across the three layers, the same fields satisfy an insurer without handing anyone a route to the metal.

Assign neutral IDs

Create IDs such as M-0001 or LOT-2028-014. Avoid codes that reveal gold, home, vault or rough value. Attach the ID to a removable archival holder, or record it beside the package identifier. Do not mark a collectible surface.

Choose the fields

For each item, or each uniform lot, record:

Copy the header row as your template. Add one row per item or uniform lot. Weight is troy ounces for bullion and grams for small pieces, so state the unit inside the cell. Cost basis is what you paid, including any premium. The custodian code points to the location key, never to an address.

Use consistent units. Keep the original invoice wording where year or condition matters.

Track cost basis by specific ID when each piece keeps its own invoice. Use first in, first out for fungible lots, such as bags of junk silver. The two methods produce different reported gains when you sell, so choose one per holding and write it into the file.

Capture the supporting documents

Scan receipts, invoices, assay cards, grading labels, custody statements and insurance endorsements. Photograph both sides of distinctive pieces and any sealed package. Name files with the neutral ID, document type and date.

Encrypt and back up

Encrypt the device or file store before the first sensitive document lands in it. A VeraCrypt container protects the file store on any drive it is copied to, and the container passphrase stays out of the container itself. Keep passphrases and item records in a password manager such as Bitwarden or KeePass.

Keep a backup in a different loss zone. Use an encrypted external drive or a vetted cloud service for that copy. Store the recovery key somewhere separate from both the primary device and the metal. Keep wallet seed phrases offline on paper or steel, never in a photo or a note app.

CISA's personal cybersecurity checklist calls for encrypting every device, hard drive, removable media and relevant document, with backups to an external drive or a vetted cloud service.

Test restoration with a harmless sample, then write the procedure down. A backup nobody has opened is an assumption, not a recovery path.

Keep a movement log

Every acquisition, sale, gift, transfer, test and custody change gets a dated line. Record the item ID, the from-code and to-code, the reason, the authorizing person, the supporting document and the updated count.

Never overwrite an unexplained difference. Record the variance, freeze further movements if that is warranted, and work back through receipts, access logs and earlier counts.

Build a redacted emergency index

An authorized helper may need to know that records and property exist without seeing amounts or codes. Write a short index naming the record custodian, the legal authority required, the insurer contact, and where the sealed recovery instructions are kept.

Reconcile on a schedule

Count the physical metal every quarter. Once a year, review the ownership file, the location key and the insurance endorsements.

Compare the physical count against the inventory, then the inventory against ownership documents and custodian statements. Sign and date the review. Re-photograph items only when the new image proves something the old one did not.

Common questions

Should current market value go in the inventory?

It is optional, and most owners keep it separate. Value moves while identity does not, so a timestamped valuation worksheet ages badly inside an identity record.

Can a cloud spreadsheet hold the inventory?

Only after you have weighed account security, encryption, sharing, recovery, provider access and backup. The file is worth as much as the account protecting it.

Should family members get copies?

Give access only to people with a defined role, and disclose only what that role requires. A copy shared for convenience is a copy that outlives the reason for it.

What if the pieces have no serial numbers?

Use neutral IDs, specifications, package details, photographs and lot-level counts. Bullion coins and small bars rarely carry individual serials, so the lot becomes the unit of proof.