Roger on Nostr: A second device covers the case where the first one dies. It does not cover the case ...

A second device covers the case where the first one dies. It does not cover the case where the secrets themselves leak. Whatever syncs your passwords and two-factor codes puts the same set on two networked machines, and one compromised account or one malware run reaches both copies. Two habits have earned their place here. Keep the seed material out of the live sync entirely, on paper or steel, offline, so losing or wiping the backup device never locks you out. Store the recovery codes with the seed rather than on the phone. Restore from the backup once, on purpose. An untested backup is a hypothesis.