The discussion here is somewhat relevant: https://news.ycombinator.com/item?id=20026297

I typically say:

1. Anything is better than nothing.

2. 1Password is pretty good.

3. Keepass is the best if you are ultra paranoid.