I use the TOTP option in KeePassXC and KeePassDX to handle 2FA duties. I backup the encrypted file to my Nextcloud. If you self host Nextcloud or something similar this is a viable option.
I use aegis for totp which has automatic backups to android cloud (Google Drive but only accessible for the app that created the folder) and for important accounts that support it I have a yubikey as well
Also using ente, but currently migrating from bitwarden (still good) to Syncthing (open source syncing folders between devices through encrypted often direct connections, no server) with KeePass.
I usually just use KeePassXC, which is open source and self hosted (kinda). It's synced over onedrive, though something like syncthing would work fine too.
No backups per-se, but onedrive should handle accidentally deleted files, and the database is on a few machines anyway so the chances of anything permanently happening to all copies are rather slim.
Aegis on a different user profile or a different device if you dont use grapheneos. I backup, using the 3,2,1 rule, whenever I make a change which isnt really often anymore since it kinda plateaued after a while. I also keep an unencrypted version of my totp seeds in a veracrypt container that way if for some reason I need to access my totp generator via a computer, I can just use keepassxc and input my seeds manually to generate the totp code.
Add comment