No that's too sketch, it needs to be encrypted. One to a flash drive, one to the cloud.

MUST be encrypted.

Veracrypt or just an aes256 string are good starts