I like using Keepassxc with a file that is on a storage provider. Keeping the task of storing my file and decrypting it completely and utterly distinct. Don’t have to audit that the total solution is keeping things separate like they claim when there’s no risky interop in the first place.