Two factor authentication vs Really long random password/Keepass

[Bryan792]

Which is better in terms of security and in terms of conveneince? Thanks

[rtgornik]

Two factor authentication is inherently more secure, being less vulnerable to a brute force attack. If you could swing it, I would urge you to go for it!

[01BTC10]

Use both. 

[mjc]

Three Form is even better

• Something You Know (Password)
• Something you Have (Token Device like One Time Pass code)
• Something you Are (Finger Print. IRIS Scan, DNA Sample)

It is inherently more difficult for an attacker to gain all three.  The last one however has higher cost to entry and can generate many False positive on lower end equipment.  So we use Two Factor, and it is more secure than Password alone.

[jimhsu]

Two factor provides strength against copy-paste and keyboard attacks, which no password can do.

[Kartaiv]

If you don't have a smart phone for Google Authenticator you can pick up a Yubi key for $25 a pop to enable 2 factor. Well worth it.