I've also heard of (but not used) Keepass