Two-factor authentication (TOTP)
Add a second factor: your password plus a 6-digit code from an authenticator app (Aegis, 1Password, Google Authenticator…). Recovery codes cover a lost phone.
Backups
Everything you own, in one click. The JSON export covers every table, with every password, key and other credential redacted (webhook URLs and member page links included), so it is the copy you can hand to someone; the database file is the rawest possible backup on SQLite installs and is not redacted.