I've moved to Authy. They allow a backup password to encrypt all tokens on their servers. I think that is a valid tradeoff with a random password saved in Keepa

I've moved to Authy. They allow a backup password to encrypt all tokens on their servers. I think that is a valid tradeoff with a random password saved in Keepass. Otherwise, changing a cellphone (or hard resetting) is an arduous task.