I have used 1Password for years and it's great. I'll store api keys, etc in Secure Notes and mostly on the servers via .env files or environment variables.