Use the official desktop client for windows. The Linux version has to be run using wine, but there's a snap that makes the install a one-clicker. Use keepass2android for mobile.

Use a keyfile and password just in case your password is compromised, the attacker would still need access to your machine to open the dB.