What 2fa Authenticator should I use?

Aegis is nice

Aegis via Fdroid

I use Aegis for personal and work stuff. Works great, is open source and initiates no network connections anywhere.

Use Ente Auth.

I use FreeOTP. Open source tickles me.

Open version called vault warden lets you put 2FA in the app. That said, I'm not of the camp that wants to put their password and code generator in the same place so I still use Aegis for the tokens.

Aegis (fdroid)

I typically use Bitwarden for my 2fa keys and passkeys. For Bitwarden itself, I have a Yubikey and my phone registered as passkeys. I also used to use Duo for 2fa in the past, but I prefer Bitwarden.

I use proton pass but IDK if it's good to warn against them now as they appear to support fascists

Nitrokey or yubikey if you have the key , or Aegis if only want to use an app

I've used andOTP for years and it's served me well. and it's FOSS

whatever you choose, keep the 2FA recovery codes to at least bitwarden on paper, in a safe place

Bitwarden Authenticator

Aegis.

I used tobuse authy. Mainly for the desktop to phone sync feature. The desktop got removed unfortunatly. So i am looking as well

Yubikey + Yubico app covers all my needs and is technically the most secure option

I use 1password. It's fine. I haven't tried much other stuff, but it works well, but I don't think there is a free option so it might not be a good pick. There is also Google Authenticator which works fine and is free.

Self-host Vaultwarden so you can keep using BitWarden?

Nevermind, misread.

I use LastPass authenticator for 2fa (note, I do not store any passwords in LastPass)

This way the authenticator accounts sync to my LastPass account and make device migration a breeze, I simply just sign into LastPass and then I can use authenticator immediately on the new device.

You could also use Microsoft authenticator (again with no passwords saved) to achieve the same thing.

I just didn't want to bother with exporting and importing 2fa accounts when getting a new phone. Or worse, if my phone fails unexpectedly I don't want to be unable to generate codes.

If you already have Microsoft authenticator just use that. They're all basically the same

My email is what I consider to be an important password so its in my offline password manager.

whatever you choose, keep the 2FA recovery codes to at least bitwarden on paper, in a safe place

At the risk of sounding snarky, why is this a deal breaker? I can recover both bitwarden and my email if I was ever in a situation where I forgot one or both passwords. It also only occurs in a situation where you are signing into devices that you've never logged in to or purposely logged out of. I do use 2FA, but even if I did not it sounds like a lot of complaining about a situation that you should already be prepared for. Bitwarden could easily go down or your password vault could be corrupted or (at worse case) your vault compromised and passwords stolen. Make plans for such situations and you'll realize this is mostly a knee-jerk reaction to a non-issue.