TOTP in your password manager bottlenecks you down to 1 factor if that 1 factor is compromised. You can address this concern by protecting that bottleneck behin

TOTP in your password manager bottlenecks you down to 1 factor if that 1 factor is compromised. You can address this concern by protecting that bottleneck behind two factors itself. And we already do that all the time - logging in to a website gives you a single-factor session token that gives you everything, after all! The trick is that the session token is time-limited and rotates frequently (you have to log back in every day or whatever), so it's okay that it's the single factor. The way to re-secure your password manager, then, is to do the same - protect your bitwarden account with 2FA, set it to require re-auth and a webauthn touch every 2 hours or to require a webauthn touch to generate a TOTP code, and you're basically back to the same state you were in when you were getting TOTP off your phone or a yubikey.