I like 1Passwords auth for this. There's a long key you need once (this stays in a lockbox), and a master password you need every sign in (safety deposit box with no information about what it is).