Don't use anything that runs in the DMZ (browser), if you care about your secrets.
I use keepassx, which requires manual search, copy, paste but it can store its vault on a cloud drive, mobile etc. and can have a key file or password.
Autotype is a bit risky because it assumes you've got the correct window/element focused. All it takes to expose your passwords is for a pop-up (e.g. instant message) to appear at the right moment.
Even if you don't hit the enter key/submit the form it is still possible for that incorrect window/app to grab your keystrokes.
I use keepassx, which requires manual search, copy, paste but it can store its vault on a cloud drive, mobile etc. and can have a key file or password.