Whenever possible, I use 2FA. However, I've been wondering what to do with one-time backup codes that many apps give you when setting up the 2FA.
If you are not storing them in a secure manner, then using 2FA is not really an additional layer of security. Plain text is obviously wrong. However, even using your password manager would not make much sense, as if someone gains access to it, 2FA will not protect you from anything.
If you are not storing them in a secure manner, then using 2FA is not really an additional layer of security. Plain text is obviously wrong. However, even using your password manager would not make much sense, as if someone gains access to it, 2FA will not protect you from anything.
So, what do you do? Do you simply not keep them?