pass/gopass/passage and KeePassXC can be offline-only, but usually you use some sort of tool to sync/backup the password store. I use gopass with keys stored o

pass/gopass/passage and KeePassXC can be offline-only, but usually you use some sort of tool to sync/backup the password store. I use gopass with keys stored on yubikeys, which I think is secure enough. For syncing I use git, but since decoding the synced archive requires a key that is impossible to extract from my hardware keys I'm not that worried about leaks from the syncing.