My IT guy buddy asked to see my recovery codes and I couldn't find them for 20 minutes
He said 'if you can't find them in under a minute, a hacker will find your whole account in less,' which stung because I'd been meaning to print them out since I set up 2FA in January, so what's the actual best place to keep backup codes anyway?