Yeah, I am also leaning towards a printed out sheet. The issue is using it across different devices and on mobile they end up being stuck without a password. I like how Google and Apple lets you configure a backup email/account, which has been useful to get the alerts if they try to change their password for example.
2FA on Google also mandates a set of ten one time backup codes. Print it out, keep it safe. Perhaps one to physically escrow for them. Or, you can help them prime bitwarden on your machine, but they have the password not you and its also off-line sealed envelope in their or some escrow's hands.
Comments
Yeah, I am also leaning towards a printed out sheet. The issue is using it across different devices and on mobile they end up being stuck without a password. I like how Google and Apple lets you configure a backup email/account, which has been useful to get the alerts if they try to change their password for example.
2FA on Google also mandates a set of ten one time backup codes. Print it out, keep it safe. Perhaps one to physically escrow for them. Or, you can help them prime bitwarden on your machine, but they have the password not you and its also off-line sealed envelope in their or some escrow's hands.
Or go the whole hog and m of n it