Managing Device Passwords with a Password Manager

Questions
1

What is the recommended way of managing device passwords when using a password manager?

I use a bitwarden as my password manager, set up on both my phone and laptop, along with ente auth for MFA when websites allow auth apps, but with this:

  • I want a secure password for both my devices, but memorizing three different complex passwords (one for each device + master password for password manager) is difficult, and I know I won’t be able to keep track of them
  • While biometrics can let me reauthenticate myself on a device, you often have to use the device password at some points, like after updates or restarting it. Since I need a device for both the password manager and the auth app (which I also need to log into my password manager), I can’t reliably use the password manager to store my device passwords

Is there any recommended way of approach this? Besides having three passwords and (optionally?) storing the device ones in the password manager, the only two ideas I came up with are:

  • Reusing your master password for device logins. My gut reaction is that this is horrible to do, but since even if my master password is leaked somehow, this wouldn’t give them physical access to my devices to log into them, and without them having access to my devices they wouldn’t be able to use the authenticator app to handle MFA logins
  • Using a physical security key as passkey manager for passwordless login. I’d still want to know though how this scenario would be handled if a device doesn’t support initial login via a physical security key passkey/requires a password
2

If you make and are able to remember 3 different passwords that are strong and unique, you most likely never have to change them considering the strength of them all. I simply do that.

It takes a little bit of time but its totally possible to remember 3 different passwords.

3

An OnlyKey outputs passwords like a keyboard. It automatically wipes after 10 failed pincode attempts. You can program it with automatic delays to enter encryption keys then passwords. Or get a single password as if you pasted it in. It works like a physical password manager which is also Yubikey compatible.