On the BitWarden recommendation, just make sure you're self-hosting as by default you will be storing passwords in their cloud.