Bitwarden has TOTP included as a feature. Seems like lots of people don’t like using it though, and see storing the 2FA keys with the passwords as “putting all your eggs in one basket”.

Aegis seems to be the open source 2FA app of choice for privacy-minded people right now.

Aegis Authenticator for Android: https://getaegis.app/

Raivo OTP for iOS: https://raivo-otp.com/

2FAS however is cross-plataform, open source, and what I’m using right now: https://2fas.com/

I personally use yubioath for anything that doesn’t support yubikey. Sounds like that isn’t a solution for you (maybe a totally different, open source hardware key?).

I’d recommend against putting your 2FA inside bitwarden. It’s not a very good second factor if both factors can be exposed by getting into your bitwarden.

Yes: Bitwarden.

Idk about the central instance, but I use my bitwarden (specifically vaultwarden) instance for my TOTP keys. I can just autofill and then it copies the current TOTP key and i can paste it in to log into whatever i’m logging into!

Bitwarden provides a facility for MFA. Though there’s an argument to be made against eggs + baskets. It might defeat threw purpose a bit.

I use Aegis which is opensource and easily encrypted and backed up locally. Saved my ass where I accidentally deleted my 2FA for Bitwarden, thus locking me out in circle of shite. Aegis allowed me to roll back and pull in that one missing key without having to redo a load i’d made since the last backup and all was good.

deleted by creator

You can use Bitwarden Premium for 2FA keys. It’s pretty cheap and well worth it to support development ($10/yr).

If you’re on Android and don’t want to pay for Bitwarden Premium, I’d use something like Aegis Authenticator.

Yubikey is a good option. It supports totp for sites that don’t support physical keys.