Ask HN: Where do you store secrets you can’t easily change if exposed

I’m using/leaving LastPass and following the vault exposure working my way through 100s of password changes. I realised when doing this that I have a bunch of stuff in LP that isn’t so easy to change such as bank card details, word sets to recover access to 2FA protected accounts, SSH keys and passphrases, root passwords etc

What are others using to store these types of secrets?

I’m moving to Bitwarden and although it may support secure notes I’d be interested to hear what others are doing.