Are you using an extension to get the 2FA code? That is not how it is meant to be used. 2 Factor means, it's the second way of proving it is you. THe first way is password. And if you use your 2FA this way, then it's really only 1 factor. The use of the 2fa seed in many places will increas the chance of it being stolen. You could just install a 2fa app on a phone not connected to the internet.

For 2FA, you have to have a strategy to securely store the backup of your 2FA as well cause you don't want that falling under the wrong hands either.

This is a reasonable thought process. Also, you can use two password managers - one password - to store passwords that are not risky. Ie for regular accounts and such that will not cause you to lose lot of money. Using a file based offline password manager like Keepass to store sensitive passwords and keys.

For sure. This sounds a reasonable way to go about it. Also, the security doesn't have to be one solution for everything. YOu can have higher level of security for larger amounts. And reasonable security for lower amount of assets.

You could increase the security of the above method by using a client side encrypted storage space  instead of dropbox or gdrive - ex: Sync.com or Spideroak

This is exactly the problem I want to tackle and educate people on it. It's hard to find relevant guides to security in one place. There are some that offer just generic information but don't discuss the details of how to do it.

‘Use a strong password’ ‘Buy a hardware wallet’ are the most common security solutions to manage your crypto. But is that enough?

Are you overwhelmed with how to manage your crypto and be assured that they are secure?  
For instance:

 * Do you know of the 5 axis of attack areas you should be aware about - Browser, Network, Software, Email, Password
 * If both your phone and laptop were stolen tomorrow, are you prepared against loss of assets and for recovery?

I want to create educational material around easy solutions to managing and security crypto for fund managers/analysts/traders/developers.


What are some questions you need answered?
What are some common frustrations you have around this topic?
Or find out what are the right things to do is?