I always thought the entire concept of even password resets was absurd. Email is a huge SPOF for basically everyone.
If you lose your password or 2FA, you should lose your account, too bad so sad.
If you lose your password or 2FA, you should lose your account, too bad so sad.
Not saying it should be easy or routine, it should not be. But it must be possible.
I just save them in my password manager.
As best as I can tell, everyone I work with simply doesn't save them at all and initiates a password reset if they lose their password/2FA.