giovium

giovium password manager. Your server. Your secrets. Just like it used to be. Discover more on giovium.com

Built expressly for the self-hosting community, giovium is a secure, private password manager designed for absolute data sovereignty. It pairs state-of-the-art cryptography with strict, legacy-style privacy. There are zero analytics, zero tracking, and absolutely no middlemen.

With giovium, you can use the iOS app, self-host your own server, and seamlessly sync data across all major operating systems.
Ready to self-host? Deploy your server in seconds using Docker (hub.docker.com/r/xgiovio/giovium-server) or visit giovium.com.

1. Cross-Platform Architecture
Universal Support: Available across iOS, macOS, Windows, and Linux.
Unified Codebase: Ensures maximum reliability and rapid cross-platform updates.
Optimized UI: Seamless orientation adaptation and native iPadOS Split View support.
Low Footprint: Minimal data usage and blazing-fast responsiveness regardless of vault size.

2. State-of-the-Art Security
Advanced Crypto: Employs Ed25519/X25519 for sync, XChaCha20-Poly1305 for local data, and Argon2 for password derivation.
Zero-Knowledge: Data is strictly encrypted 100% of the time. The server never possesses your keys.
Just-in-Time Decryption: Items remain encrypted in memory until precisely accessed.
Hardware Integration: Leverages native device cryptography with large, unique salts.

3. Server Deployment & Sync
Rapid Setup: Docker containers or native binaries ready in seconds.
Instant Sync: Real-time data mirroring across multiple independent servers.
Autonomous Security: Clients and servers encrypt their connection directly. No external CAs required. Deploy behind a reverse proxy or standalone.
Smart Resolution: Automatically handles out-of-sync states to prevent data duplication.

4. Data Integrity & Versioning
Append-Only Structure: Data is never permanently deleted; safely revert to previous versions of any item anytime.
Rigorous Consistency: Automatically verifies data upon unlock, and supports manual offline verification.
File Hashing: Built-in verification ensures absolute integrity for all attachments.

5. Interface & Experience
Custom Entries: Build items using text, concealed passwords, files, and an integrated TOTP authenticator (manual or QR).
Minimalist Design: Distraction-free with native Light/Dark modes and instant search filtering.
Privacy Controls: Explicitly hide specific elements from standard view.

6. Device Protection
Biometrics: Secure Enclave integration for safe Face ID/Touch ID unlocks.
Anti-Espionage: Actively blocks screen recording, background screenshots, and OS app-switcher visibility.
Smart Lock: Background auto-unlock and customizable timeouts secure the vault.

7. Backup & Ownership
Absolute Privacy: No tracking, ads, or third-party logging. Network connections strictly limited to your server.
Full Ownership: No account creation or email recovery loops. Governed entirely by your master password.
Offline Access: Manage encrypted vaults offline via the native iOS Files app or automate iCloud backups.