The only robust and no BS lock combo so far, imo, is Regolith i3wm.

For some reasons and whatever black magic eas used, this Frankenstein combo of i3 and GNOME work every single time. The downside is their configs are soooo messy. It is very hard to use whatever you have in vanilla i3 for Regolith.

interesting, so you just back up your ~/.password-store directory? You use the same thing on Android or something else?/

I am using KeePass, it generates password and also TOTP. Works fine but I want to switch to something more Linuxy. Keepass is great but you really depend on a 3rd party.

the GNU pass encrypt using gpg? How do you transfer between devices, using cloud?

funny how with sooooo many updates, Windows are still very vulnerable. You buy a Windows PC, you better equip Antivirus software too; it is like bread and butter. On Linux and also Mac, you never need to worry about these things.