Use KeePass for work as well as enforcing that policy for staff. Personally I have been using Bitwarden premium but am working up the courage to convert to a local solution. Probably KeePass as well. My main worry is keeping the password database safe and backed up.