You should also not be ysing a corporate laptop for your private stuff. If you do need to use it, you can do use the password manager the old way, just read from your phone and manually type it in.

Yeah, but some stuff kinda blurs the line, and some stuff is just useful both places. It's not ideal, but I can maintain some separation with different NextCloud users and different database files.

Lastly, since you're proposing a corporate scenario, you wouldn't be able to install a random program on your laptop. IT would either block the installation or you'd have to explain why you're installing random programs on your work computer.

Portable versions of password managers work sometimes. There are browser extensions you might be able to use. Most notably, both of these are more likely to be authorized than a VPN tunnel into my personal machines if I even need authorization for them. In some places and jobs, you might get a little influence over what gets installed, within reason, and an open source, strictly offline password manager is less of a threat than a VPN connection to an uncontrolled endpoint. I might be able to get a Vaultwarden client, but then I'm back to exposing Vaultwarden to the open internet, which was what I didn't want to do.