One one hand, if I lose the database or manage to forget that password, I am fucked.
On the other hand, that’s also the case with 2FA.
The latter has already happened to me, but I have since switched to different software that lets me properly manage backups rather than doing only cloud bullshit.
Cisco Duo. That piece of shit doesn’t even do version control.
I just turned on an old phone, and there goes my backup, overwritten by old data.
I use keepass, but i have 4 back ups on different drives and 3 locations. I also have my main passphrases written down on a notebook that are also encoded with a Caesar cipher. Haven’t lost data yet. If I forget my password or lose my book, I’m fucked, but that’s security
And now everyone knows what to do.
You could do a sort of physical 2FA by requiring 2 pieces of paper from 2 different locations. Either a long password split into 2, which would allow partial weakening with either one, or random OTP and cipher text.