

Just double-checked with the help manual of the one I use (PasswordSafe) and it looks like it can do it. Never actually tried it though, which is one of the reasons I didn’t mention it previously.
At the risk of sounding like an ad (I’m not affiliated, just a someone who found it in their Linux distro’s package manager), there are versions of it for pretty much any device. I definitely can’t vouch for the feature set(s) of the other versions, though.
I can see a lot of smaller companies (and maybe one or two reasonably big ones) opting for air-gapped networks of old operating systems and older versions of Office. A fool’s errand, sure, and for a number of reasons, but it’s cheap, and upper management likes cheap.