The Personal Security Checklist
> You could store [2fa backup codes] in your password manager<p>Aaand we're down to single-factor authentication: your password from your password manager plus your backup codes from your password manager.<p>I do recommend a password manager, but not to keep would-be-two factors in one vault.<p>Also the very first item in the guide makes a blanket statement about dictionary words being really crackable. I forgave that one for simplification reasons (reality: passphrases are equally secure if you use enough random words, just like using a password with enough random characters), but I've now read the recommendation for 3 points and 2 are bad and mediocre advice.