Second bitwarden. Self-hosted on Start9. Also use 1password. I do store nostr credentials there and passphrase for hardware signing devices but the 12/24 words never touch anything online.