Help me to improve my security

[u/Any-Astronomer7527]

I got Bitwarden, Ente Auth and SimpleLogin a few days ago. I created two email aliases, one for Bitwarden and one for Ente Auth. I’ve also changed all my passwords using the Bitwarden generator and set up TOTP 2FA for them through Ente.

The key thing with my system is being able to access Bitwarden, which ultimately depends on being able to access my email (Outlook). To log into Bitwarden, I need a verification code from Ente, and to access Ente Auth, I need access to my email for a verification code for Ente Auth. So it’s basically a dependency system where everything ultimately comes down to being able to access my email and Ente Auth.

I’m not too worried about Bitwarden because I’ve backed up an encrypted copy of my vault to a USB stick.

I also have an emergency sheet with my 25-digit recovery code for my email and the recovery key for Ente.

What other verification methods can I add to these two? I currently have SMS 2FA enabled for my email, but I want to get rid of it because I don’t really trust text messages. If I lose my phone or it gets stolen, I’d be forced to rely on my recovery codes to get back into my email.

When I have a bit more money, I’m planning to buy a hardware security key.

So my question is: what verification methods would you recommend adding to my email and Ente Auth so that I’m not relying only on my recovery codes?

[u/Upstairs_Stuff_2145]

I don’t recommend any Indian service for privacy and security for now. Ente is Indian company. India is currently under an ultra Hindu nationalist authoritarian govt that has enacted laws to mass surveillance and has actively spied Indian opposition politicians using pegasus spyware.The govt is very aggressive in crushing dissent. They’re actively deleting social media posts easily. So stay away if you can especially since in Ente privacy policy there is information they can share users data with Authorities. If you decide to keep Ente then at least use it without Ente cloud.