I use an offline password manager (KeePassXC) to store passwords. However, I'm curious about what is the best way to store 2FA recovery codes? I feel like writing or printing things on a piece of paper or Excel spreadsheet isn't gonna be secure at all. But also, I'm starting to think storing a txt file of the recovery codes in a KeePassXC attribute just defeats the purpose of 2FA. Because all you need to know then is their master password and voila. You can still get in to their account.