Comment by stephengillie

1. Email account with 2FA

2. Email randomized password stored in PasswordDatabase

3. PasswordDatabase is stored in CloudDrive

4. CloudDrive randomized password stored in PasswordDatabase

5. CloudDrive with 2FA

6. PasswordDatabase secured by weak password

7. 2FA codes from 2FApp

8. PasswordDatabase, CloudDrive, Email only available together on devices with a human-friendly password. Those 3 and the 2FApp are all on the phone, secured by human-friendly password, on me always.

(How do I make 8 mathematically stronger?)