Password policies are a mandatory requirement with HIPAA. Password managers offer a good security layer, but yes, this single layer is vulnerable to keystroke malware capturing the master password. Pairing this with a hardware token such as a Yubikey, makes this a much stronger layer. Google Authenticator (which is a multi factor authentication solution) is a stronger security layer than passwords alone, but it's still not a silver bullet. Security layers must be blended together to be effective.
Most companies begin by evaluating software costs https://mlsdev.com/blog/how-to-make-a-messaging-app. This is considered to be one of the most critical aspects of custom software development. It is vital to get software costs below estimated costs as wasting money on software development is one of the most common reasons why a project is delayed. In order to get an idea of software costs you can easily calculate the total budget required for the development process and compare it with the software costs estimated by various companies. A dedicated software development team should work within the allocated budget to ensure that there are no discrepancies.