I've got a fully airgapped Raspberry Pi, an old version (one without WiFi capability), which has a copy of all my "Google Authenticator", TOTP style, secrets. I made a little terminal app (so no need for a mouse / no need to boot into a GUI), with my secrets protected by a password.
I use that in addition to Google Authenticator on my phone.
And in addition to paper backups of the secrets (I don't print the QR code: I write the secret down, like 16 letters) which I keep in a safe.
I've also set someone as the person of trust should I not access my email for 6 months.
And I set up webauthn as well.
It's a pain but I don't want to have to deal with an account I lost access too.
I use that in addition to Google Authenticator on my phone.
And in addition to paper backups of the secrets (I don't print the QR code: I write the secret down, like 16 letters) which I keep in a safe.
I've also set someone as the person of trust should I not access my email for 6 months.
And I set up webauthn as well.
It's a pain but I don't want to have to deal with an account I lost access too.