KeePass with inputstick. It’s a device that plugs into a USB A port, and your phone talks to it via Bluetooth. It emulates a keyboard (and mouse if you want), and there’s a KeePass plugin for KeePass2Android.

You open one of your password entries, click the username, and it types the username on your computer via inputstick. Ditto for passwords and totp or other fields.

You can also use inputstick to just remotely control your computer, albeit locally only and without a monitor connection. I’ve used it to control my raspberry pi or android TV, aside from password entry.

With this, you can have your password database be completely offline and your computer have no lasting knowledge of your passwords. Of course, a keylogger would still get the passwords that are “typed”.

I’ve had one of these $40 devices for a few years. I don’t use it too often, as I tend to synchronize my KeePass database on all of them, but it does come in handy. I wish the developer of the hardware made a usb-c one, but it works with usb-c to usb-a dongles.

It’s got what plants crave.

I agree with this idea. But it would make it harder to pick up your phone blindly and know which end is the top. I instinctively feel for the usb port on the bottom so it’s oriented correctly by the time my arm swings it into view.

Agreed. FairEmail is my goto choice. They’re both open source and on F-Droid.

FairEmail does have a $9 license you can buy to add extra features, but even without the license, I found it to be a nicer app than K9.

Keepass2Android does all that on android. It natively supports Dropbox, google drive, one drive, nextcloud, pcloud, and mega, plus you can use WebDAV or sftp. When editing an entry, the totp setup has the ability to scan qr codes with the camera. Plus, the whole thing is free and open source.

They even have a package on F-Droid, though that build lacks the built-in support for cloud syncing (due to F-Droid restrictions prohibiting binaries, I think).

I’ve used this app for years on android, paired with various cloud sync options as providers change their restrictions and capabilities. On desktop, I use keepassxc.