giovium

giovium password manager. Your server. Your secrets. Just like it used to be. Discover more on giovium.com

Built expressly for the self-hosting community, giovium is a secure, private password manager designed for absolute data sovereignty. It pairs state-of-the-art cryptography with strict, legacy-style privacy. There are zero analytics, zero tracking, and absolutely no middlemen.

With giovium, you can use the iOS app, self-host your own server, and seamlessly sync data across all major operating systems. Ready to self-host? Deploy your server in seconds using Docker (hub.docker.com/r/xgiovio/giovium-server) or visit giovium.com.

1. Cross-Platform Architecture Universal Support: Available across iOS, macOS, Windows, and Linux. Unified Codebase: Ensures maximum reliability and rapid cross-platform updates. Optimized UI: Seamless orientation adaptation and native iPadOS Split View support. Low Footprint: Minimal data usage and blazing-fast responsiveness regardless of vault size.

2. State-of-the-Art Security Advanced Crypto: Employs Ed25519/X25519 for sync, XChaCha20-Poly1305 for local data, and Argon2 for password derivation. Zero-Knowledge: Data is strictly encrypted 100% of the time. The server never possesses your keys. Just-in-Time Decryption: Items remain encrypted in memory until precisely accessed. Hardware Integration: Leverages native device cryptography with large, unique salts.

3. Server Deployment & Sync Rapid Setup: Docker containers or native binaries ready in seconds. Instant Sync: Real-time data mirroring across multiple independent servers. Autonomous Security: Clients and servers encrypt their connection directly. No external CAs required. Deploy behind a reverse proxy or standalone. Smart Resolution: Automatically handles out-of-sync states to prevent data duplication.

4. Data Integrity & Versioning Append-Only Structure: Data is never permanently deleted; safely revert to previous versions of any item anytime. Rigorous Consistency: Automatically verifies data upon unlock, and supports manual offline verification. File Hashing: Built-in verification ensures absolute integrity for all attachments.

5. Interface & Experience Custom Entries: Build items using text, concealed passwords, files, and an integrated TOTP authenticator (manual or QR). Minimalist Design: Distraction-free with native Light/Dark modes and instant search filtering. Privacy Controls: Explicitly hide specific elements from standard view.

6. Device Protection Biometrics: Secure Enclave integration for safe Face ID/Touch ID unlocks. Anti-Espionage: Actively blocks screen recording, background screenshots, and OS app-switcher visibility. Smart Lock: Background auto-unlock and customizable timeouts secure the vault.

7. Backup & Ownership Absolute Privacy: No tracking, ads, or third-party logging. Network connections strictly limited to your server. Full Ownership: No account creation or email recovery loops. Governed entirely by your master password. Offline Access: Manage encrypted vaults offline via the native iOS Files app or automate iCloud backups.