- Password manager for both password storage and 2FA OTP generation. (Not the best practice, but the convenience is worth the trade-off.)

- Password manager for almost all 2FA backup code storage. Both the best place and the dumbest place to store these. "The best" because it's pretty secure; "the worst" because it's a single point of failure AND if I can access my password manager I already have access to my 2FA OTPs. I regularly make an encrypted backup of my password vault.

- Authy for 2FA OTP generation for my password manager.

- A printed card in my wallet for 2FA backup codes for my email account and password manager. Password manager master password is kept in a safe (in case I get hit in the head and forget it).

This isn't perfect, but it fits my risk profile.