> The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), et

> The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), etc. However, I keep 2FA TOTP codes on my Pebble watch only. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right? Technically no, but whether or not that is a problem depends on the threats you're worried about. I'm personally most worried about 1. credential stuffing, 2. keyloggers/client exploits, and 3. Phishing/MITM attacks. Using a password database allows me to use different passwords for every site, which defeats #1. TOTP even if it's in the same database solves for #2 since simply scraping the password isn't enough to gain access. And #3 isn't addressed at all, even if you use a separate device for TOTP. What I'm not especially worried about is specific targeted attacks where the attacker is attempting to acquire my database and crack it. Now, if you store your password database on someone else's cloud, that could become more of a concern, as a mass breach and bulk collection of databases becomes a possible attack vector. But I use syncthing to directly share my DB between devices, so I'm not particularly worried about that. If you're worried about either of those threats, then a separate TOTP device is absolutely vital. But, for me personally, the inconvenience of it is not worth the additional security.