Hands down, Bitwarden app on phone and in browser. Vaultwarden self hosted. Since I host it at home, I know it's always in my server. The winning thing for me is that Bitwarden Supports Webuathn now, you can use it as it's own webuathn key you authorize to log in with, so basically go the site you want to login with and when it asks for the webuathn, you can either have Bitwarden use the credentials you stored for it or your own biometric or hardware key instead.
With this, I sign into Authentik for my SSO just by clicking one link, and Bitwarden prompts to log in and I click the option. I'm auto logged into my server and no UN/PW passed to it.
I've tested others and nothing quite comes close except for KeepassXC, but for me, it's a matter of personal preference on my side. I've been with Bitwarden since the early days.
