Helmet normally goes in the top box unless its packed, then I use the helmet lock on the bike itself & just shut the lid if its raining, seemed to work out fine....of course that's perfect for the combo of an old Vee and a D-ring fastening helmet. I also have a very thin (5-6mm) and short cable lock given away by a bike magazine as a helmet lock...never used it yet.