I kind of wish most TOTP implementations (apps and/or desktop software) would support exporting all of the current data in an encrypted file format, a bit like KeePass has .kdbx databases with your passwords and other information.

To me, that feels like the missing piece in my mostly-offline way of managing credentials and backing them up - I could throw the KeePass database and this TOTP database (presumably both protected by passwords) in a VeraCrypt container (also encrypted) or something similar, put that on an SD card and then store it somewhere in case of hardware failures or other factors like that.

Personally I think that TOTP is great and while there are plugins for KeePass for example, most people will opt for using various apps which don't always let you fully be in control of your files. As for cloud options - they are easy to use, of course, but personally that feels like a major risk, which the LastPass breach somewhat confirmed.

If you're an Android user, you may be interested in Aegis [0,1]. It allows you to import data from various formats, either through a file or directly from another app like Authy (needs root access). It also allows for export options, such as encrypted JSON or unencrypted TXT/HTML. Additionally, it enables backups to file storage, I am using my Nextcloud as a target.

Overall, Aegis is my to-go open-source alternative to Authy.

[0] https://getaegis.app/

[1] https://github.com/beemdevelopment/Aegis