To keep using 2FA you will want to make it convenient for yourself, which is why I recommend using 1Password for your 2FA (and backup) codes.In the password manager tests we at the Home Media reviews team ran over several weeks, we downloaded 1Password on iOS, Chrome, Safari and Firefox on Windows. Using 2FA at all makes you much less likely to be a target. To them, I would ask, 'what threat model they are protecting against?' Like businesses, your goal should be to a less interesting target than someone else. Some folks will argue that keeping your 2FA app and password manager app separate. Duo Mobile is a great choice for managing your consumer TOTP tokens, but you'll still need a password manager. Duo is by far the best 2FA solution for businesses.

Or just stay offline! :-D)įWIW, I worked for Duo Security and other 2FA vendors in the past.

(Use a security key and enroll yourself into Google's Advanced Protection Program, ASAP. nation/state), and therefore have much larger issues to worry about. It does place all your eggs in one basket, but if you're really worried that someone has determined your primary encryption password and stolen your encrypted password manager file, you are probably being targeted by a very advanced attacker (e.g. It's better than SMS because you don't have to worry about your phone number getting ported by a motivated attacker. 1Password is my favorite 2FA app because it effectively balances convenience with security.

Use 1password as authenticator