Practices for protecting business login credentials

I have a small business that uses the usual set of online services - email/office suite, cloud VPS (generally setup to only login with ssh keys on my computer) and storage, github, password manager, bank accounts, plus some stuff in personal email. Some of these have 2FA. If I'm incapacitated, or if my house burns down, or some other disaster happens, I want to make sure I (or my successor) can get back into everything as easily as possible. What are people in a similar situation doing? Is keeping the password manager recovery kit in a safe deposit box enough?