@hyde I use a combination of Keepass2Android, Authy, and Google Authenticator for things I've not migrated away from the latter two yet. I use SyncThing to keep my KeePass vault available in several locations I can access, and the app can locally cache a vault it fetches through SSH.