I use 1password for passwords, authy for 2FA and I keep the backup codes in keepass synced through cloud storage. It keeps them all separate.