I highly recommend PasswordState[0].<p>We run it on an internal-only server, only accessible via 2fa.<p>Edit: The one time I found a software bug, the developer sent me a fix within an hour.<p>[0] <a href="http:&#x2F;&#x2F;www.clickstudios.com.au" rel="nofollow">http:&#x2F;&#x2F;www.clickstudios.com.au</a>