Confession: I write them down.
My threat model is 100% aimed at remote attacks/hackers. I could not care less about law enforcement. I also use a hardware backed second factor.
My threat model is 100% aimed at remote attacks/hackers. I could not care less about law enforcement. I also use a hardware backed second factor.
A computer will always do a better job at generating\remembering passwords.
hardware 2FA is definitely a good idea.
The issue is when you want to access that paper remotely or on the go. Then it becomes a really bad method.
Not necessarily. See https://xkcd.com/936/