I think you’re right to consider that storing 2FA tokens within 1Password a reduction in security—in fact 1Password themselves say that too: We need to make the distinction between one time passwords and second factor security. One time passwords are often part of second factor security systems, but using one time passwords doesn’t automatically give you second factor security. Indeed, when you store your TOTP secret in the same place that you keep your password for a site, you do not have second factor security. Put simply: the device that holds your TOTP secret should never hold your password if your aim is genuine two factor security. The point of 2FA authentication means for an attacker to breach an account of yours (like say your Google account), they would need to gain access to two things: 1) your 1Password account where the username and password is stored, and 2) your physical phone where the separate 2FA app exists and is the only device capable of generating the one time passwords. Storing both an accounts’ password and the TOTP secret in 1Password means an attacker would only need to gain access to one thing; your 1Password account. So technically yes, removing all the tokens from 1Password would add some security and protection. Keeping that in mind, I think best practices for internet security comes down to a balance between "security" and "convenience." I personally consider the security of a 1Password account, like you say, good enough protection. And then I consider the convenience of having the OTP auto-filled or copied to the clipboard is worth the slight cost in security by keeping both my account passwords and the TOTP secrets in 1Password. More on reddit.com

So what does this mean if you already run the desktop version of 1PW on Windows? Should you switch? Are they interchangeable - is the Windows Store version as fully-featured? I wish they'd address questions like this in their communications. https://blog.1password.com/microsoft-store/ More on reddit.com

Hey there, welcome to 1Password! When using the desktop application of 1Password, on top of being able to easily manage and edit your items from the application instead of needing to use 1Password.com, you also have the ability to keep 1Password in your browser unlocked for however long the 1Password desktop application is unlocked. Additionally, because the 1Password desktop application is handling the unlocking, Windows Hello can be used to unlock 1Password for Windows and by extension, unlock 1Password in your browser as well. You're also able to manage large amounts of items in the desktop app (for example, copying a bunch of items from one vault to another). More on reddit.com

I would store them in 1Password so it’s easy if you want to go to Android. More on reddit.com