The Personal Security Checklist
> You could store [2fa backup codes] in your password managerAaand we're down to single-factor authentication: your password from your password manager plus your backup codes from your password manager.I do recommend a password manager, but not to keep would-be-two factors in one vault.Also the very first item in the guide makes a blanket statement about dictionary words being really crackable. I forgave that one for simplification reasons (reality: passphrases are equally secure if you use enough random words, just like using a password with enough random characters), but I've now read the recommendation for 3 points and 2 are bad and mediocre advice.