&gt; I use 1Password but enable 2FA anywhere I can<p>Why? What is the threat vector whereby you think 1Password would be compromised but an OTP system would still be secure?<p>&gt; If you can store your 2FA keys in 1Password, you&#x27;re not really doing 2FA.<p>I know. (That&#x27;s why I said doing so is &quot;bringing it back down to 1 factor.&quot;)