The one thing I've done is take a really good older local password manager, read the source once. Follow for security advisories and do everything else myself. Build procedures for backup. Never put it online.... I don't recommend anyone do this unless you're comfortable implementing cryptography, reading c++ code... and so on.

The solution I recommend somewhat tech literate normies nowadays is keepass, but that's a concession, even if someone is literate enough to use it with a yubikey.