They would also need access to the machine which you have your vault stored on which would be your laptop and your phone and nothing else.