An off-the-shelf kit and about two hours are all you need.
Lightweight functions without Linux.
Bitwarden now supports passkey sign-ins to Windows 11, which I believe is a first for a third-party password manager.