I won’t be using any sites that ask for my phone, so hopefully they don’t enforce this.

No thanks.

I think I will be using BitWarden for a long time until I am sure that this new process is really safe, but it sure is very convenient.

Does anyone know if and how the private key is secured during cloud sync? Do they have access to it or is it ciphered before sync using the… user password?

Also, how is it different from Duo Push? (edit: I am talking workflow, here. I know about the FIDO part)

Keepassxc for me.