I uses https://authy.com/

Separat from my passwords

Take a look at https://borgbackup.readthedocs.io/en/stable/

Separate phone.