for extra precaution, you might want to store TOTP secrets in a password manager thats separate from the one used to store passwords.