Use a password manager, and invest in a hardware security key. Other than that totp, aka autheticator apps, is your friend when it comes to 2fa unless you can use your hardware security key. Stay away from sms and email authetication unless its the only choice. Besides that practice the 3,2,1 rule as others stated especially for your password manager vault and your totp seeds.