KeepassX to remember and make strong passwords. i was also thinking that it might be a good idea to have an extra email you give to exchanges, that is not you google.com 2fa account.
So if the hacker gets in on your phone and try to reset your passwords. Then the reset is not sent to the google account. :)