You can probably sign up for azure without 2fa and use azure devops or just host gittea somewhere. If you get a yubikey, it's very convenient to use. Your pass

You can probably sign up for azure without 2fa and use azure devops or just host gittea somewhere. If you get a yubikey, it's very convenient to use. Your password manager can't protect you from phishing attacks. As someone who has seen probably 10's of thousands of phishing attacks, I am not confident I can identify one if it is sufficiently well crafted. In your mindset, you are fully sold that you are logging into the right place when you fall for one.