NewPipe

WearOS support? Nice

That’s the spirit!

In Aegis I can see an option for importing from Authy, but I looked up and I didn’t a way to easily export from there. I guess that’s what we get for using proprietary software. ¯\_(ツ)_/¯

Use Aegis, which is also available on F-Droid.

UFW, by default, blocks all incoming requests. This means that SSH (port 22) is blocked already. Then, if you need to, whitelist (ALLOW) ports that you want to expose to the network. For example, I have ports 1714-1764 whitelisted for KDE Connect and everything else is blocked.