I just use additional passwords as recovery answers.
Username:tiddysprinklesPassword:fhg@t2Gxs7...What street did you grow up on:D$pvEb4...What was your first pets name:xwDu#&8w...
Like, okay, so an adversary wants to crack into my account. They’re going to need the unique email addresses for that account, my 60+ character passwords (100+ when allowed), my TOTP… Or the email, and three 60+ passwords…
At some point I’ll need to call up cs for something and answer D$pvEb4… as the street I grew up on. But it’s been a decade+ without a problem…
I just use additional passwords as recovery answers.
Username: tiddysprinkles Password: fhg@t2Gxs7... What street did you grow up on: D$pvEb4... What was your first pets name: xwDu#&8w...Like, okay, so an adversary wants to crack into my account. They’re going to need the unique email addresses for that account, my 60+ character passwords (100+ when allowed), my TOTP… Or the email, and three 60+ passwords…
At some point I’ll need to call up cs for something and answer D$pvEb4… as the street I grew up on. But it’s been a decade+ without a problem…