I moved from keepassxc to bitwarden then to proton pass when it was released. I'm not going back. I keep my recovery codes separate to prevent a complete lockout. But thanks for the suggestions.