[zavi]

Many banks also have these arbitrary password limitations which make it less convenient and less secure at the same time.

[maimeowmeow]

I just keep a google docs with username/password/recovery question, with website abbreviation as header.

As long as my google 2fa isn't compromised, I think this is safe.