Do not store your 2FA codes in 1Password. It turns your second factor into the same one as your password.
I was storing backup codes in 1P before I realized that I was putting all my eggs in one proverbial basket.
I was storing backup codes in 1P before I realized that I was putting all my eggs in one proverbial basket.
Probably wouldn't be a bad idea to have a distinct password vault for TOTP seeds, although they'll be stored on whatever device you generate codes from anyway (hopefully in a secure way). At the very least, it might be helpful for moving between TOTP devices without needing to do the random steps required by different services!
It's pretty obvious why this changed, however, it is a major increase in exposure and a terrible change overall. It is discussed in [1] and mostly the answers aren't very satisfying as demonstrated in [2].
[1] https://discussions.agilebits.com/discussion/101560/secure-m...
[2] https://discussions.agilebits.com/discussion/101551/article-...