It's redundant having the two together. I suppose it still has the nicety of 'unphishable logins'. Personally though, I have a separate KeepassXC DB with all my 2FA stuff there. I use the Raivo OTP[0] app for TOTP. I would only open my 2FA DB when trying to recover from a lost/damaged/stolen device with my Raivo OTP creds in it.
I suppose it depends on how secure the password manager is and how much security is built into it. I am using 1Password for most of my 2fa stuff (bar my personal and work office 365, plus Authy for some backup 2fa codes and stuff that won't export). Everything in 1pass is secured using my yubikey.
> I am using 1Password
Quick question: in the desktop web app for 1Password I am asked for a 'secret key' (aswell as my master passphrase) and have to manually copy and paste it each time. How do you cope with this?
i have only been asked once when setting it up. Also, im running on a mac, so i unlock with Touch Id... i think you can do Windows Hello unlock on machines that have that feature turned on too...
It is if your password manager is offline and not synced to the cloud imho. I use the commandline password store for this reason.