I don't think it's safe to have your 2fa authenticator on your phone

Most of the time your email is on your phone too. If you sign in to your exchange from a different device it will usually ask you to verify a code sent to your email or an SMS message.

Both of which happen to be on your phone, along with your authenticator.

I know almost everyone is leaving nothing on the exchanges these days but still better to be safe.

I use an old android tablet that never leaves a hidden spot in my house. It's inconvenient but I don't care, I don't need to sign in to my exchange unless I'm depositing and buying and withdrawing.

Another thing I did was: I changed the name of all the exchanges. For my CDC code I labeled it Coinbase. And for Coinbase, I labeled it Exodus and so on.

This is for those extreme cases if someone was trying to force me at gunpoint. I could still play dumb like "look it doesn't even work. I dont know what's wrong or why its not working"

Another thing, whenever I travel - I delete all crypto apps and all references to crypto search terms in my browser and youtube search. It's not worth the risk.

Oh and obviously, don't talk about crypto, pretend you don't even know much about it.

Just wanted to mention this, since not many people bring up this point about 2fa.

If your 2fa is on your phone, you can usually have someone just sign in from your phone, defeating the whole purpose of 2fa.