Have Android phone
Don’t bother signing into your Google account
Download Canta, Shizuku and f-droid apk and install
Use canta to uninstall every Google app that isn’t strictly required
Chrome, Gmail, Drive
Weather, Launcher, News
Clock, Keyboard, even the damn Calculator
Everything. Canta actually tells you what is and isn’t safe
Replace everything with open source alternatives as you go (don’t forget about a keyboard alternative)
Get APKUpdater to install and update apps that aren’t on f-droid from various sources you can choose
Have hastily degoogled Android phone
folekaule@lemmy.world 1 day ago
Always download the backup 2fa codes. This is when you need them.
Cornelius_Wangenheim@lemmy.world 1 day ago
Or buy a yubikey and set it up as a backup MFA on at least your email and password manager, then keep it in a fireproof safe.
neatchee@lemmy.world 1 day ago
While this is good advice, best practice is to always get your yubikey in pairs and keep them synchronized. One should remain in your home, in a safe place (as you described) while the other should remain on your person or outside the home (e.g. in a safe deposit box)
It’s more of a pain in the ass for sure, but handles the theft scenario more effectively