Using a password manager

If you are in the Apple ecosystem, Keychain is your best choice. All passwords are synced via iCloud and you have the option to add 2FA codes and notes.

For other items such as individual passwords, documents, software licenses, and others you can use Apple Secure Notes which are encrypted end-to-end.

Keep in mind that Keychain uses the same password as your device, this means that if an attacker knows your code (for example a simple 4-digit pin of your iPhone) then they will also have access to all your passwords.

So I would use a 6 digit code or better still an alphanumeric password for your mobile devices like iPhone and iPad.

Of course!

Touch ID and Face ID allow you to unlock your device more easily and securely.

When you set up one of these you will also need to add a code (the ones we mentioned, a 4 or 6 digit code or an alphanumeric password) to your device which will be asked every time you restart your device or when Touch ID or Face ID fails to recognize you.

Surely a 6-digit code is better than a 4-digit one.

For 2-factor authentication you're doing great, always enable it on any service that implements it!

Last two tips:

1. If you have a Mac (Mac mini, Macbook, iMac, etc) enable automatic backup via Time Machine to an external drive. The backup will also include all the passwords that you have already synchronized with the other devices. It's always best to have an emergency backup in case something should happen.

2. I read that you used LastPass, I assume you are sadly part of the group of many people who are involved in the last LastPass incident. My advice is to switch to Keychain and change all, but really all passwords. I know it's time-consuming and boring but in the end, you will feel relief from this job. Double-check that LastPass has exported all the data (passwords, documents, licenses, and more), and then ask for your LastPass account to be closed.

I hope these tips help, let me know if you need anything else! 😀