> It seems like a very, very bad thing to store both your passwords, and TOTP codes in the same tool Yes. It defeats the purpose. But whenever you mention it,

> It seems like a very, very bad thing to store both your passwords, and TOTP codes in the same tool Yes. It defeats the purpose. But whenever you mention it, you will get lots of replies with plenty of hand-waving why this is still better and why it doesn't matter "much". If you go to the effort of doing 2FA, do it right. Two Yubikeys, and a reasonably decent TOTP app (Authy qualifies as "reasonable") for those sites that do TOTP.