Cryptomator VS Aegis

the best way to do this is with https://cryptomator.org

Before putting anything on a cloud service I would recommend 3rd party tools, like Cryptomator, to encrypt folders and such, then upload to a cloud service.

I use Cryptomator - https://cryptomator.org

I've used countless encryption "schemes" over the years, from True/Vera-Crypt to encrypted sparse bundles/images, and none have ever really felt right.

These days i tend to use Cryptomator[0] instead. It accomplishes what none of the others could do, which is transparent encryption across devices.

With Cryptomator, i simply create a vault somewhere in the cloud, stuff data in it, and i can access it from my laptop, phone or tablet, and not think much about it. It integrates into the normal file browsing APIs, and doesn't get in the way.

Because it does "per file" encryption, it also doesn't need to download a 20-100MB chunk from the cloud before decrypting, so it's rather fast (depending on file size of course).

[0]: https://cryptomator.org/

Cryptomator's arguably the most popular encryption software for cloud storage (you can give yourself zero-knowledge encryption by using them) - it's actually what they specialize & focus on (cloud encryption). It's 100% open source and Free to use on computers. On phones I believe it's just a 1-time fee of a few bucks ($13-14, then you have it forever) - note: their iOS offering is still new, so may be a bit unpolished at the moment.

This is the solution: https://cryptomator.org/

Cryptomator. It is made for uploading files securely to cloud storage, but works locally, is easy to use, and completely free for your use case.

For 1Password I use a Yubikey, but for 2FA in general, I have a backup phone running Aegis[1].

[1] https://getaegis.app/

Bottom line is, why in the world would you use a mysterious closed source app when there are better options out there? 2FAS is one of the better ones. Aegis Authenticator is another good choice for Android devices.

You can enable 2fa with amazon I suggest you do that with a 2fa app like aegis, that will greatly increase the security of your account and require the 2fa code to login to your account.

Aegis Authenticator has been a lifesaver for me: https://getaegis.app/

I use Aegis[1] on mobile and OTPClient[2] on my computer, both are regularly backed up on change.

I do not use the TOTP feature in my password manager (though I can split it to new DB in keepassXC) as feel it will defeat the purpose of 2FA.

[1] https://github.com/beemdevelopment/Aegis

Google Authentificator → Aegis