The one-profile-per-account idea already mentioned here is a good starting point, because it keeps sessions separate and makes it easier to see which account had a problem. A consistent naming system helps even more, such as platform, project, and account name in the profile name, so you are not guessing later.
For security, avoid keeping passwords and two-factor backup codes in the same plain spreadsheet. A password manager for logins and separate, secure storage for recovery codes is safer, and it also helps if a device is lost. Finally, update the record right after any change, such as a new password, recovery detail, or profile change, because most mess comes from notes that are a few weeks out of date.