In the first case most password managers I’m aware of let you log in online. So I’d just log in and use my hardware token on my keyring for 2FA.