1password + hardware keys - I am not a large target though and use crypto transactionally.