[elahd]

- Password manager for both password storage and 2FA OTP generation. (Not the best practice, but the convenience is worth the trade-off.)

- Password manager for almost all 2FA backup code storage. Both the best place and the dumbest place to store these. "The best" because it's pretty secure; "the worst" because it's a single point of failure AND if I can access my password manager I already have access to my 2FA OTPs. I regularly make an encrypted backup of my password vault.

- Authy for 2FA OTP generation for my password manager.

- A printed card in my wallet for 2FA backup codes for my email account and password manager. Password manager master password is kept in a safe (in case I get hit in the head and forget it).

This isn't perfect, but it fits my risk profile.

[RandomBacon]

> master password is kept in a safe (in case I get hit in the head and forget it).

In that case I hope it's a biometric safe.

[thefrozenone]

On this note, it would be nice for mobile OS's to have their own OTP generator, to prevent the need for a single app just to store the password manager OTP. Google has Authenticator, but I don't know if there's a built-in to iOS, which could have keyboard-based convenience pasting too.