Choosing 2FA authenticator apps can be hard. Ars did it so you don’t have to
arstechnica.com
Losing your 2FA codes can be bad. Having backups stolen can be worse. What to do?

I’m using freeOTP, on one device with a backup file on an encrypted drive, not sure if it’s an out of date choice though