Anyone not already using KeePass (or KeePassXC) has been doing it wrong for at least a decade.

KeePass2Android Offline and KeePassium on mobile.