I see nobody's mentioned TOTP support yet. My stack is KeePassXC on computers, Keepass2android on mobile and Dropbox for syncing. A few months ago I realized t

I see nobody's mentioned TOTP support yet. My stack is KeePassXC on computers, Keepass2android on mobile and Dropbox for syncing. A few months ago I realized that both of my clients showed a TOTP option. Went digging a little and realized that there was enough support that I felt completely comfortable jumping ship away from Google Authenticator. Google Authenticator had been worryingly opaque to me until then - you scan a QR code and then somehow you get TOTP codes? - and having gone through a phone number change recently, I felt especially aware and uncomfortable about having 2FA for many important accounts tied to one fairly fragile, fairly mis-placeable electronic device (not to mention in an app controlled by Google). Figuring out how to use TOTP on KeePass was the nudge I needed to read up on how TOTP works, and of course it was quite simple. And keeping TOTP secrets in a password manager seems like a not-terrible idea (with the one caveat - and it's not a small one, I know - of busting the "second factor"ness of 2FA by making it possible to generate a TOTP code from the same device that you're using to log in with). I was especially impressed that KeePass knows about Steam's non-standard TOTP implementation and is able to generate Steam Authenticator codes. I will say that doing this requires some hairy steps! This was what put me on the right path: https://old.reddit.com/r/Bitwarden/comments/a67c1n/steam_authenticator_supported_not_sure_how_to/ https://old.reddit.com/r/Bitwarden/comments/a67c1n/steam_aut... And I put a good ~200 words of notes stored in that particular KeePass entry to remind me how I did it in the future.