Yup and yup. Usually recommend Bitwarden as a starter password manager and then keepassxc for the more advanced people who can handle their own syncing/backups. Regardless turn on 2fa to each account especially your phone carrier, email and bank