I'm using xBrowserSync for syncing the bookmarks, it supports Chrome, FF, and even has an Android app.
It seems secure to me, but of course I can't really tell, I'm not a pen tester.
For password management I use sysutils/password-store which I think is the best thing since the invention of sliced bread.
It uses git with gpg encrypted files, so you can just sync it with git pull / push, in my case I use a Raspi4 to centrally host the git repos.
There are many 3rd party tools and extensions for it, I use the browserpass-extension in particular, which lets you fill in password files with the click of a button. A bit tricky to set it up but it works if you follow the instructions in the README.md.
If you name your password entries correctly, it automatically shows the corresponding password record for the webpage you're currently on. (i.e.
It seems secure to me, but of course I can't really tell, I'm not a pen tester.
For password management I use sysutils/password-store which I think is the best thing since the invention of sliced bread.

It uses git with gpg encrypted files, so you can just sync it with git pull / push, in my case I use a Raspi4 to centrally host the git repos.
There are many 3rd party tools and extensions for it, I use the browserpass-extension in particular, which lets you fill in password files with the click of a button. A bit tricky to set it up but it works if you follow the instructions in the README.md.
If you name your password entries correctly, it automatically shows the corresponding password record for the webpage you're currently on. (i.e.
pass www/google.com/happyuser1
)