Ask HN: Best password manager, 2FA, and recovery code strategy?
I like the idea of using a normal-ish, commercial password manager; however, I don&#x27;t like the idea of also having 2FA and recovery codes in that same password manager in case another LastPass situation happens.<p>What would you all recommend? 2 or 3 different password managers (or perhaps 2 or 3 different accounts with the same password manager?), one for passwords, and one for 2FA and potentially another one for recovery codes? Any best practice resources &#x2F; websites?<p>I feel like I&#x27;ve read on HN people doing some really complicated stuff, and I&#x27;m not super interested in that. I want something that balances convenience with security and not having all my eggs in one basket. Convenience includes being able to relatively easily access the separate 2FA codes as some sites now require them all the time.<p>One situation I&#x27;m concerned with is someone stealing my phone at gunpoint and demanding the passcode and &#x2F; or my password manager password. That would basically give them keys to the castle.<p>Additionally, if someone was mildly sophisticated, they could kidnap you, demand relevant passwords, but also make you go through your email searching for the various banks, and then forcing you to login to those and drain the accounts.<p>Lastly, would you all support adding a PIN code to your phone to prevent stealing of your eSIM?