If you're really cautious, sure thing, that'd probably work just fine... personally I think a PGP encrypted text file would be good enough, but I guess that depends on how hard you expect somebody to be trying.