Two very interesting blog posts explaining how Alex manages multi-factor recovery codes and memorises passwords:

• Where I store my multi-factor recovery codes
• The passwords I actually memorise

But enabling MFA isn’t everything – what if you lose access to that second factor? For example, I store my MFA codes in an app on my phone. What happens if my phone is broken or stolen?

I generally trust my password manager, but I don’t want it to be a single point of failure for my entire digital life.