Proton warns to not use 2fa from Proton Pass for your Proton account.

Sounds like it's time for some correcthorsebatterystaple!

Password manager inception. Sign up for last pass, and bitwarden, and Google auth and Ms auth. Get a burner phone and rotate and change passwords monthly.

...sorry for my useless post.

Use a passphrase (not a password) and a physical security key, like a yubikey. It also supports TOTP or whatever 2fa Proton uses, you just connect it with a laptop or phone and it gives you a key.

A physical key is much more secure than 2fa from a password manager (although both are probably fine)

In my opinion the centralization of all your data and secrets to one single company is itself a security risk. When I realized that, I completely stopped using proton. I see 2 main issues with using all-proton: 1. they could turn evil (like a lot of big companies do) 2. They can have exploits which then can effect all your data / secrets. I switched to have a different company for each service and I don't really pay more than what I would have to pay proton to get the same things.

I use all of Proton’s products as well. I’ve found a Yubikey works best for the 2FA codes. I’m also working on having a backup password manager

Best thing you can do is learn a very strong and complex password to use for your proton account, that's what I did.

It takes a bit of time but eventually you'll learn to type it in fast.

Im in the same boat. They really need to allow a second password for the pass database.

proton pass has a few non-email avenues to recovery. check it out.

Maybe diceware passwords can help you?

I use a password manager

Either have a strong password and write it down somewhere, or use another password manager for proton? That seems kinda unnecessary though. Would be nice if proton supported yubikey or passkey or something.