Am I the only one still rocking Keepass?
My main point of concern with these web-based password managers is what would happen if an attacker were able to hijack the JavaScript served to clients. The code is obfuscated, and it can be updated at any time without anyone noticing which, in the context of a password manager, certainly gives me pause for thought.
I’m satisfied. It’s actively maintained and reliable.