You can set an organisation policy to disable personal ownership, which forces every password to be saved into an org, unless the user is an org owner or administrator.