I use Interactive Brokers for my investments (can also be a checking account since it supports ACH and debit card). They have an app “Ibkr key” feature where you get a push notification to auth.

They also allow different uname/Pword combos with different auth levels. (Enterprise level granularity).

Eg I keep the read-only combo on my phones password manager, a general read/write to investments on my computer, and an “admin” level access (change permissions add banks move money) in offline storage.