peach-android
A free, open source, local-first password manager for Android.
Kotlin
timeline
atlas502 files
app/
src/
androidTest/
java/
com/
peachpasswords/
codex/
qa/
QaFormActivity.javaMinimal native login form for emulator autofill QA.QaFormAutofillTest.ktEmulator-QA probe: does the autofill framework issue fill requests for a native form at all?QaFormTwoFactorChipTest.ktEmulator QA: does the autofill framework issue a fill request for a form that includes a 2FA field, and does the OTP chip appear in the inline suggestion strip?QaSpoofedWebViewActivity.javaCompanion app form that claims a victim web domain without being a verified browser.VaultSeedTest.ktEmulator-QA harness: seeds a real vault in-process so autofill and keyboard-row chip testing never depends on IME text injection (Gboard corrupts
adb input text).vault/
debug/
res/
values/
main/
java/
com/
peachpasswords/
autofill/
AssistStructureParser.ktThe autofillable fields discovered in one [AssistStructure], plus the origin Android authenticated for ranking vault entries.AutofillEnablement.ktWhether Peach is actually the system's autofill service, and the one-time offer to make it so.AutofillEntryPickerActivity.ktBranded bottom sheet shown when the user taps "Search Peach…"/"Unlock Peach" in the system autofill drop-down.AutofillIntents.ktPendingIntents the autofill surfaces hand to the framework: a no-op attribution target the inline chip requires, the authentication IntentSender that opens the branded [AutofillEntryPickerActivity], and the "open new entry" launcher that the picker fires when the user taps the "+ Create new entry" affordance.AutofillNavRepository.ktCarries a one-shot "open the new-entry editor" request from the autofill picker to the nav host.AutofillNavViewModel.ktThin Compose-friendly wrapper around [AutofillNavRepository] so the NavHost can grab the singleton via
hiltViewModel() without reaching for an EntryPoint accessor.AutofillOrigin.ktOrigin resolution for autofill matching.AutofillResponseBuilder.ktTurns parsed form fields + vault entries into autofill [Dataset]s — the menu RemoteViews row, the inline keyboard chip, and the actual field values.AutofillSave.ktChipMonogramIcon.ktMonogram chip icons for inline autofill suggestions — the same initials and deterministic background as the vault list (titleInitials/titleBackground), rendered once per source and cached.Identities.ktSignup identities for the autofill picker (parity gap A4).PasswordPolicy.ktSite password constraints detected from a password field's HTML attributes (exposed by [android.app.assist.AssistStructure.ViewNode.getHtmlInfo]).PeachAutofillService.ktSystem autofill provider.codex/
CodexAztec.ktAztec encode/decode for one Codex chunk, via ZXing.CodexAztecFrame.ktLive-camera Aztec decode for the Codex restore camera path (D10).CodexCodec.ktPure (Android-free) Codex byte pipeline: compress → stripe → Reed-Solomon → envelopes, and the inverse for restore.CodexGenerator.ktGeneration milestones surfaced to the UI.CodexPageLayout.ktA4 Codex page geometry — the exact port of the browser's
popup/codex/pdf-layout.ts, which is the canonical Codex page format.CodexPdf.ktRenders the Aztec codes onto an A4 PDF in a 6×6 grid — the printed Codex.CodexRestore.ktRestore side: render a Codex PDF back to bitmaps, crop the 6×6 grid using the same geometry [CodexPdf] laid down, decode each Aztec, then Reed-Solomon reconstruct the payload — surviving missing or unreadable codes up to the parity budget.CodexTypes.ktCodex on-paper format constants and shapes — port of the browser shared/codex-types.ts.ReedSolomon.ktSystematic Reed-Solomon erasure codec over GF(2⁸), Backblaze/JavaReedSolomon construction (Vandermonde matrix made systematic).credentials/
di/
feedback/
haptics/
license/
passkeys/
PasskeyAssertion.ktPasskeyCallerOrigin.ktF1/F2 (2026-08-03 security scan): passkey ceremonies are bound to the verified caller.PasskeyCredentialEntryFactory.ktPasskeyCredentialPlanner.ktPasskeyCredentialSelectionActivity.ktPasskeyPendingIntentIds.ktPasskeyRegistration.ktPasskeyUnlockIntent.ktPasskeyVerificationRoute.ktPeachCredentialProviderService.ktAndroid 14+ credential provider surface for Peach.
shared/
sync/
AdoptionProtocol.ktAdoption transcript v2.BackgroundSyncCoordinator.ktOwns the "when do we actually start the sync service?" decision for the background-sync preference.BackgroundSyncPreference.ktBatteryExemption.ktAsks once to be left out of Doze / App Standby.BootReceiver.ktRestarts the sync service after a reboot.CloudRelayDialer.ktOne relayed reconnect session where WE speak first — the mirror of [runCloudRelayResponderSession], and the half Android never had.CloudRelayReconnectListener.ktCryptoCompare.ktFixed-format protocol comparisons.DeviceIdentity.ktDeviceManifestSupport.kt0x05 adds signed per-issuer revocation records to the vouch graph.DeviceType.ktWhat kind of device a peer is, on the wire and in the paired-device store.ForegroundSyncCoordinator.ktLocalIdentityRecord.ktPersisted local-identity record codec (campaign task 2.1).LockedSyncSpoolStore.ktNoiseKK.ktNoiseNK.ktPairedDevice.ktPairedDeviceStore.ktPairIdentityFrames.ktThe PAIR_IDENTITY frame: who a peer claims to be, exchanged inside the encrypted session once and pinned thereafter.PairingFrames.ktLength-delimited frame IO for a pairing/sync connection.PairingInvitation.ktPairingSession.ktThe user's SAS decision, handed to the UI and awaited by the live pairing session.PeachSyncService.ktKeeps this device reachable on its deterministic relay waiter edges and drives its dialer edges.PeachWebSocket.ktA minimal RFC 6455 server endpoint — just enough of the protocol to talk to a browser extension's
new WebSocket(...).PendingVouchedDeviceStore.ktRelayAdoptionHost.ktRelayAdoptionReceiver.ktReceiver half of relay-first vault adoption.RelaySettingsStore.ktSync is exactly three named choices (docs/sync-lan-retirement.md, mirroring the browser's sync-settings.ts):Rendezvous.ktRustNoiseNative.ktThin JNI boundary over the canonical Rust snow state machine.SASDerivation.ktSyncAlert.ktSyncAlertStore.ktSyncCoordinator.ktSync — Phase 2 manifest-diff coordinator.SyncFrameTransport.ktE7b: split a too-large padded sync frame across multiple Noise transport messages and reassemble it on the other side.SyncFreshStartResetter.ktClears every piece of state that can make a destroyed vault still look paired.SyncGeneration.ktThe durable Sync-generation state machine (protocol §11).SyncGenerationStore.ktStorage adapter for the Sync-generation state machine.SyncIdentity.ktSyncLimits.ktCloudflare Workers caps one WebSocket message at 32 MiB.SyncMessage.ktSync wire protocol — exact port of the browser SyncMessage union (shared/sync-types.ts).SyncNotificationPermission.ktA foreground service can keep running after Android notification permission is denied, but its status notification disappears from the drawer.SyncOutcomeReason.ktWhy a sync attempt ended, in the same vocabulary the browser uses (src/shared/sync-outcome.ts).SyncOutcomeStore.ktThe single place a sync attempt is allowed to end.SyncPadding.ktE7: frame padding at the relay boundary.SyncPeerRole.ktWho speaks first in a relay room.SyncSession.ktTransport-neutral session consumed by the sync coordinator.VaultAdopt.ktVault adoption frame protocol — exact port of the browser shared/vault-adopt.ts.VaultSyncAdapter.ktProduction [SyncVaultAdapter] backing the coordinator with the live [VaultRepository].ui/
codex/
components/
BirdAnimation.ktThe three acts of the pairing animation, bound to the audio protocol.CharEnterText.ktPer-character entrance: each glyph fades in and rises into place with a staggered delay.CopyButton.ktCopy button with the two-effect copy feedback (spec §4.4): a diagonal sheen sweeps once over ~600ms and an accent drain bar fills 0→100% over 1.4s.CopyFeedbackOverlay.ktFaviconInitials.ktFavicons repository for this window; provided by MainActivity and the picker.Favicons.ktU1: real site favicons, offline-first with a disk cache.LockRuneString.ktPairingBirds.ktThe two pairing birds, ported path-for-path from the browser extension's
PairDeviceFlow.tsx (a finch and a swallow) rather than redrawn by eye.PeachEmptyOrEndState.ktPeachExpandableCard.ktPeachField.ktPeachMark.ktThe Peach brand mark — a peach fruit with a single leaf.PeachSectionHeader.ktQuiet branded section identity used instead of the retired contained top bar.PeachSegmentedControl.ktPeachTopBar.ktQaFlags.ktDebug-only, opt-in escape hatch so automated visual QA (screenshot-based Gate 2 comparisons) can capture screens that are normally FLAG_SECURE-protected.RuneGridBackground.ktSecureFlagEffect.ktAcquires a reference-counted secure-window lease while this composable is in the composition — blocking screenshots, screen recording, and the recents thumbnail of screens that display secrets (MN-3: recovery words, export blob, codex generation).SecureWindowPolicy.ktThe only owner of [WindowManager.LayoutParams.FLAG_SECURE] transitions.SyncIndicatorDot.ktThe sync indicator light, shared by the vault list and the Sync settings card so the two can never disagree.TOTPRing.ktA small ring that sweeps once per TOTP period and turns breach-red in the final 5 seconds.lock/
BiometricKeyStore.ktStores the vault's AES key wrapped under a hardware-backed, biometric-gated Android KeyStore key, so the lock screen can unlock without the master password.Biometrics.ktThin wrapper over androidx BiometricPrompt for the re-auth gate.LockScreen.ktWhere the unlock transition should land.LockViewModel.kt
onboarding/
pairing/
AdoptVaultScreen.ktAdoptVaultViewModel.ktBackgroundSyncDialog.ktCodePairScreen.ktPair a device by code.CodePairViewModel.ktThe phone half of pairing: occupy a relay room, show the invitation, wait to be scanned.PairingProRequired.ktPairingQrCamera.ktPairingQrFrame.ktQR-only CameraX decoder for reachability invitations.PairingRelayChoice.kt
recovery/
security/
settings/
CardIcon.ktThe seven settings-card glyphs — exact ports of the browser CardIcon.tsx SVGs (viewBox 0 0 16 16, stroke 1.25, round caps/joins).PanicScreen.ktProCelebration.ktCSS cubic-bezier(0.16, 1, 0.3, 1) — the browser's bloom/wordmark-in easing (a pronounced ease-out-expo feel).SettingsCardBodies.ktSettingsScreen.ktDeck geometry — ported verbatim from StackDeck.tsx constants.SettingsStack.ktThe six settings categories, in deck order (Pro on top).SettingsViewModel.kt
theme/
AccentColors.ktPeachColors.ktPeachMotion.ktPeachPalette.ktA resolved set of Peach colour tokens.PeachRadius.ktPeachSpacing.ktShared 4dp-based spacing scale extracted from the lock-screen layout.PeachStackColors.ktPeachTheme.ktCurrent accent color, available to any composable under [PeachTheme].PeachType.ktShellBackground.ktThe two-bloom shell background that sits behind every screen.
vault/
AdditionalUrlsDetail.ktE3 — additional-URL rows for EntryDetailScreen.AdditionalUrlsEditor.ktHard cap on additional URLs, matching the browser editor.CardDetailFields.ktD2 — EntryDetail CARD display block.CardEditFields.ktD2 — EntryEdit CARD field block.CardFieldUtils.ktShared card formatting/detection helpers for D2 (card type fields).CsvExport.ktPure-Kotlin CSV serialisation for the C2 Export screen (CSV sub-view).CsvImport.ktPure-Kotlin CSV / JSON import parsing for the Import screen (spec B2).DetailTagRow.ktInline tag row for EntryDetailScreen, mirroring the browser EntryView: chips display in place, and the "+" affordance expands a same-surface tag editor.EditableFieldRow.ktD6 — Inline per-field editing for EntryDetailScreen.EntryDeckChrome.ktEntryDetailGenerator.ktD4 drafts — generator access from EntryDetailScreen.EntryDetailScreen.ktEntryDetailViewModel.ktEntryEditScreen.ktEntryEditViewModel.ktExportScreen.kt───────────────────────────────────────────────────────────────────────────── Password strength scorer (local, dependency-free) ─────────────────────────────────────────────────────────────────────────────IdentitySuggestDropdown.ktAnchored suggestion dropdown for identity-style fields (username/email).ImportScreen.kt───────────────────────────────────────────────────────────────────────────── ViewModel ─────────────────────────────────────────────────────────────────────────────MultiSelectUi.ktD12 multi-select per-row checkbox (spec §9).NoteHtml.ktNote bodies are authored in the browser's contenteditable, so a synced note arrives as HTML: the extension's sanitizer allow-list (NoteEditor.tsx) is b, strong, i, em, u, s, h2, h3, blockquote, ul, ol, li, br, hr, p — attribute-less — plus the div wrappers Chrome's contenteditable inserts for new lines.NotesModeScreen.ktE2 — full-screen editor for NOTE-type entries.NotesModeViewModel.ktBacks [NotesModeScreen].PasswordHistorySection.ktShared past-password history UI, extracted from EntryEditScreen so both the editor and EntryDetailScreen render the same rows.PeachField.ktThe Peach text field used across the entry-edit screens: a bare underline (no border box), drawn in t3 and lit to the accent while focused — matching the lock screen's credential inputs.PeachScriptExport.ktPeachScript export (MF-2) — writes the browser's PCHS binary payload (Argon2id + AES-256-GCM, zstd sections, BLAKE3 checksum, size-bucket padding, string-table entry packing) re-encoded into Private-Use-Area text.PeachScriptImport.ktPeachScript import (MF-2) — parses the browser's PCHS binary payload back into full vault entries.RecoveryWordsScreen.ktRuneResolve.ktWhich leg of the restore animation is running (browser: RestoreSymbols'
animating).TagChipEditor.ktMax tags per entry.TagListWidgets.ktHorizontally scrollable tag filter strip for VaultListScreen, placed between the search bar and the sort bar.TotpInlineEdit.ktE6 — TOTP double-tap to edit the 2FA secret, inline in EntryDetailScreen.TrashScreen.ktVaultHealthScreen.ktWarm amber used for the "reused" and "weak" advisory buckets.VaultListScreen.ktVaultListViewModel.ktupdates/
UpdateCheckWorker.ktPrivate action set only by the update notification's PendingIntent.UpdateManifest.ktKepr's generic release manifest, as returned by
GET https://kepr.uk/api/<repo>/releases/latest, flattened to the single platform this app can install.UpdateRepository.ktThe Kepr side of in-app updates: what the newest release is, fetching its APK, and proving that APK is the one Kepr published before it is ever handed to the package installer.vault/
BrowserSlot.ktReads the browser extension's slot A so Android can restore a vault that was created there — a Codex printed from the extension, most importantly.Canary.ktDuressConfig.ktThe action Peach takes when the duress passphrase is entered at the lock screen.EffShortWordList.ktEFF short word list, published 2016-09-08.JwkString.ktReads a passkey's
privateKeyJwk whether it arrives as a JSON object or a string, and writes it back as an object.LastViewedEntryStore.ktRemembers the id of the entry the user last opened so a fresh unlock can land straight back on it (matching the extension, which opens the last entry rather than the list).PasskeyData.ktPasswordGenerator.ktCryptographically random password generator.PasswordHistoryItem.ktOne past password kept in [VaultEntry.passwordHistory].PeachPayloadCodec.ktPeachScript binary payload (PCHS) — a byte-for-byte port of the browser's peachPayload.ts (MF-2).PeachScript.ktPeachScript outer codec — maps each payload byte to one Private-Use-Area code point in U+E000..U+E0FF, and back.PinUnlockStore.ktRecoveryWordList.ktRecovery word list — byte-identical to the browser's src/shared/recovery-word-list.ts: the canonical 2048-word BIP39 English list, 0-indexed, no duplicates.RecoveryWords.ktSavedIdentity.ktSyncEntrySanitizer.ktMN-3 (2026-06-09 audit, reopened 2026-08-03): content sanitization for entries arriving from a sync peer.TOTPGenerator.ktRFC 6238 TOTP / RFC 4226 HOTP.VaultCrypto.ktVaultEntry.ktVaultHealth.ktVaultLockTimer.ktIdle auto-lock timer.VaultRepository.ktLenient parser for the Codex vault-blob wrapper only.VaultSettings.ktVaultSlotRollback.ktRestores the durable slot set after a partially committed vault transaction.VaultSnapshot.ktVaultStore.ktOne encrypted slot at rest.res/xml/shortcuts.xml and the credential-provider unlock entry point in [com.peachpasswords.passkeys.PasskeyUnlockIntent].jniLibs/
arm64-v8a/
x86_64/
res/
drawable/
font/
layout/
mipmap-anydpi-v26/
values/
test/
java/
com/
peachpasswords/
autofill/
AssistStructureNullHintsTest.ktRegression pin for the 2026-08-07 Fold 7 crash loop: Facebook Messenger presented an autofillHints array containing a null entry and classify() dereferenced it, crashing the autofill service on every fill request (One UI then surfaces the repeated "app keeps stopping" dialog).AssistStructureOtpRegexTest.ktOTP / 2FA field detection.AutofillBrowserVisibilityTest.ktAutofillCardTest.ktAutofillChipBudgetTest.ktChip-slot budget after the v2.14.8 refinement.AutofillMatchTest.ktAutofillNavRepositoryTest.ktAutofillNavRepository carries the one-shot "open the new-entry editor" request from the autofill picker through MainActivity to PeachAppNavHost.AutofillNewEntryTokenTest.ktF3: the picker→MainActivity new-entry handoff is authenticated with a one-time in-memory token.AutofillOriginReleaseTest.ktAutofillPickerSearchTest.ktAutofillPickerSpecSelectionTest.ktWhich inline spec hosts the "Search Peach…" chip.AutofillPreviewLabelsTest.ktAutofillSaveTest.ktAutofillTwoFactorChipLabelTest.ktConfirms the keyboard-row chip carries WHAT it will fill.IdentitiesTest.ktOtpDatasetTest.ktE2-fix verification: the 2FA chip and the LOGIN chip are SEPARATE datasets so the user can verify the TOTP code before it lands.OtpDigitsTest.ktPasswordPolicyTest.ktPeachAutofillLoggingTest.ktRememberOfferTest.kt
codex/
credentials/
feedback/
license/
passkeys/
CredentialProviderContractTest.ktPasskeyAssertionTest.ktPasskeyCallerOriginTest.ktF1/F2: caller-origin resolution policy — which callers may register for an rpId and which may obtain a stored credential.PasskeyCredentialPlannerTest.ktPasskeyRegistrationTest.ktPasskeyUvFailClosedTest.ktH-07: WebAuthn user-verification fail-closed decision.
security/
shared/
sync/
AdoptionAdapterCoverageTest.kt§10.5: every relay adapter must forward every v2 callback, and a callback must never be one that only fails once a peer asks for it.BackgroundSyncCoordinatorTest.ktThe v2.5.13 gate
if (enabled && vault.isUnlocked.value) was wrong: the user almost always enables background sync from Settings while the vault is locked, so the service never started and the device stayed invisible to paired peers.BackgroundSyncPreferenceTest.ktC7TransportTest.ktC7 transport tests.CloudRelayDialerTest.ktPhone-to-phone: the case that had no initiator at all.CloudRelayReconnectListenerTest.ktEnough of a vault to send SYNC_HELLO; the peer stalls before anything else.CrossClientSyncProcessTest.ktProcess endpoint for scripts/check-cross-client-sync.mjs.DeviceManifestSupportTest.ktBounds tests for [verifyDeviceManifest].FakeSyncGeneration.ktIn-memory [SyncGenerationPort] for the JVM tests.ForegroundSyncCoordinatorTest.ktLegacyIdentityDerivation.ktRoot→device key derivation, retained for tests only — campaign task 2.4.LocalIdentityRecordTest.ktFrozen local-identity schema (campaign task 2.1): round trip, legacy completion, and every malformed-shape rejection.LockedSyncSpoolModelTest.ktNoiseKKTest.ktPairedDeviceAliasTest.ktPairedDeviceRevocationTest.ktPairedDeviceStoreConcurrencyTest.ktPairIdentityFramesTest.ktRegression coverage for M-08: the hand-rolled PAIR_IDENTITY encoder escaped ", \, and control bytes; the parser stopped at the next unescaped quote and never unescaped.PairingInvitationTest.ktPairingRelayLimitsTest.ktPB-26-205 (Android mirror): the pairing/adoption relay inbox is bounded before any allocate/copy of attacker-controlled frame data, with the same ceilings as the browser (src/shared/pairing-dial.ts).PeachWebSocketTest.ktExercises the server against OkHttp's RFC 6455 client rather than a hand-rolled one.RegistryTransactionTest.ktPure failure-injection coverage for the real SharedPreferences transaction helper.RelayAdoptionHostTest.ktRelayAdoptionInitiatorSourceTest.ktSource-initiator counterpart to [RelayAdoptionHostTest]: the phone dials the relay room, runs Noise as initiator, and sends the grant to the (empty) responder.RelayAdoptionReceiverTest.ktItem 2 (REVIEW_DEFERRED_ITEMS_BRIEF.md): receiver inline-snapshot happy-path.RelayGateTest.ktThe fail-closed relay gate, mirroring the browser's sync-settings.test.ts.RelaySettingsPropagationTest.ktWhat a relay change does to the existing mesh, mirroring the browser's setSyncMode / setRelayUrl.RendezvousTest.ktRustNoiseNativeCoverageTest.ktSourceConsentGateTest.ktPB-26-116: the vault-owning device must approve a pairing before the root key is read.SyncAlertTest.ktSyncCoordinatorTest.ktTwo in-memory [SyncSession]s wired back to back.SyncEntryEnvelopeKatTest.ktSyncFrameTransportTest.ktE7b end-to-end chunking — the deliverable for the wire shape.SyncFreshStartResetterTest.ktSyncGenerationTest.ktThe §11 secure-reset contract: the durable generation record, the six states, create-on-miss refusal, archival by generation, crash recovery at every step, and the sync gate.SyncNotificationPersistenceTest.ktSyncOutcomeTest.ktThe indicator light is the whole point of this vocabulary, so the mapping is swept exhaustively rather than sampled: a reason added later has to be given a place here or the sweep fails.SyncPaddingTest.ktSyncServiceStartTest.ktThe service start is the first step of every sync path, and it was the one step that could throw straight out of a button press: Android 12+ refuses a foreground service started from the background, and startForegroundService was called bare.SyncSuiteTest.ktSync suite (brief Suite 13): length-prefixed pairing frames, SAS derivation KAT, and cross-device entry sync through the [VaultSyncAdapter] (two repositories made to share a sync root key via the Codex blob).TrustDataCorruptedTest.kt§18.4: a corrupt persisted ledger must not be read as empty — that would silently un-revoke every device.VaultAdoptSnapshotTest.ktInline vault snapshot protocol parity with the browser vault-adopt-snapshot.test.ts.VaultAdoptTest.ktAdoption frame protocol parity with the browser vault-adopt.test.ts.VaultSyncAdapterTest.ktVaultSyncManifestEpochRaceTest.ktRegression for a stale signed manifest mutating only a prefix before relock.ui/
components/
lock/
onboarding/
pairing/
settings/
vault/
EntryDetailParityTest.ktEntryDetailScreenTest.ktEntryDetail suite (brief Suite 4): the screen's pure rendering logic — full-title ghost watermark, NOTE routing, breach-banner predicate, TOTP timing/hot-state, and masked card display.EntryEditExtraTest.ktEntryEdit suite expansion (brief Suite 5): the new-card field logic (network detection, PAN/CVC limits, expiry validation) and the password generator the editor drawer drives.EntryEditScreenTest.ktExportRoundTripTest.ktExternalUrlPolicyTest.ktGhostWatermarkTest.ktImportBoundsTest.ktM-01: an import is attacker-shaped input.ImportParsersTest.ktNoteHtmlTest.ktThe vocabulary under test is the browser sanitizer's allow-list (NoteEditor.tsx ALLOWED_NOTE_TAGS): b, i, u, s, strong, em, h2, h3, ul, ol, li, br, hr, blockquote, p — plus the div wrappers contenteditable adds on its own.NotesModeTest.ktRealBackupDecodeTest.ktDecode-path checks using a deterministic synthetic PeachScript backup.UntouchedNoteDraftTest.ktVaultListSyncAlertTest.ktVaultSearchParityTest.kt
updates/
vault/
AdoptDuressSlotTest.ktAdoption duress slot install tests.BitwardenPasskeyImportTest.ktBrowserPasskeyJwkTest.ktA passkey's
privateKeyJwk is a JSON OBJECT in the browser (JsonWebKey in shared/types.ts); Android holds it as a compact string.BrowserSlotTest.ktPins the browser→Android slot-A translation that Codex restore depends on.CardSerializationTest.ktIn-memory [VaultStorage] for exercising last4 derivation on save (MF-3).CodexRestoreAtomicityTest.ktC-01: a Codex restore must not touch the device's vault until the candidate has been decrypted and decoded in memory, and must roll back if any write in the commit fails.CrossPlatformRecoveryWordsTest.ktRecovery words are only a human-readable encoding of the root key's first 16 bytes, so the two platforms MUST agree on the word list byte for byte.CxfImportTest.ktCXF (FIDO Alliance Credential Exchange Format) passkey import.DecoySettingsIsolationTest.ktPB-26-120: the duress design promises that a decoy session looks like an ordinary installation and that everything it writes stays in the decoy.DuressCodexRoundTripTest.ktEnd-to-end Codex round-trip tests for the duress (slot B / decoy) slot.DuressPolicyRecordTest.ktPB-26-127: duress configuration and its action must not be readable from the stored record alone.DuressSlotBTest.ktIn-memory [VaultStorage] including a decoy (slot B) slot, for the MF-6 duress model.HiddenSessionStateTest.ktM-04: no operation may leave in-memory session state that disagrees with what is on disk, and the sync-key accessors must fail closed whenever the session is not a fully-unlocked real vault.ImportSettingsClassificationTest.ktPB-26-118: a PeachScript backup carries a settings record, and importing one used to apply the whole record — including the screen-capture control and the favicon consent flag, which the app elsewhere obtains only from the user.LockRaceAtomicityTest.ktH-03: lock() and requireUnlocked() must serialize with in-flight state mutations in suspend operations.OfficialCryptoVectorsTest.ktPasskeyConsolidationTest.ktPasskeyEntryTest.ktPasswordGeneratorTest.ktPasswordRotationAtomicityTest.ktH-01: a wrapping-key rotation (changePassword / resetPasswordWithRecoveryWords) must either fully commit slot A + size-matched noise slot B + version stamp or leave the at-rest state untouched.PeachScriptHardeningTest.ktM-02 regression tests: PeachScript parser must reject attacker-controlled lengths/counts before any unbounded allocation.PeachScriptRoundTripTest.ktPeachScript + CSV round-trip suite (brief Suite 7): large-vault fidelity, ciphertext tamper detection, size-bucket padding, and CSV column/injection behavior.PeachScriptTest.ktPinUnlockStoreTest.ktRecoveryEscrowIntegrationTest.ktIntegration coverage for the full create → confirm → seal → unlock recovery chain (brief Fix 1).RecoveryEscrowSuiteTest.ktRecoveryEscrow suite (brief Suite 3): word validation/autocomplete, partial and wrong-word failures, missing-escrow handling, recovery-driven password reset, and the duress-mode guard that recovery escrows are never sealed for the decoy.RecoveryEscrowTest.ktReplaceEntriesAtomicityTest.ktM-01: import's REPLACE mode must be one all-or-nothing write.SessionEpochRaceTest.ktDeterministic H-03 races.SlotAUnlockTest.ktIn-memory [VaultStorage] for the non-committing dual-derivation path (MF-5).SlotPaddingTest.ktExposes the raw stored slots so the padding lengths (MN-1) can be inspected.SnapshotRestoreAtomicityTest.ktH-02: a snapshot restore must either fully commit slot A + slot B + version stamp or leave every byte of at-rest state (slot A, slot B, history) untouched.SyncEntrySanitizerTest.ktMN-3: sync-peer entries are sanitized before merge — mirrors the browser's sanitizeRestoredEntry, with the Android allowance for flat passkey fields.TOTPGeneratorTest.ktVaultCryptoKdfTest.ktMF-4: the Argon2id KDF must hash the password's explicit UTF-8 bytes (matching the browser's TextEncoder().encode), not its UTF-16 code units.VaultCryptoTest.ktVaultCrypto suite (brief Suite 2): Argon2id key derivation, AES-256-GCM round-trips, AAD enforcement, and KDF parameters.VaultHealthAdvancedTest.ktVaultHealthTest.ktVaultHealth suite (brief Suite 8): the pure [VaultHealth.buildReport] scoring — breach / reused / weak / aged / sensitivity detection, section counts, and the sensitivity-weighted vault score.VaultKeyRotationHooksTest.ktPB-26-126: the PIN and biometric escrows wrap a copy of the slot-A key, so every rotation site must fire the invalidation signal.VaultLockTimerTest.ktIn-memory [VaultStorage] so the timer can drive a real repository off-device.VaultRepositoryExtraTest.ktSecond VaultRepository suite (brief Suite 1 expansion).VaultRepositoryTest.ktIn-memory [VaultStorage] so the repository can be exercised without Android.VaultSettingsDefaultsTest.ktGate for the new-install default.VaultSlotRollbackTest.ktwidget/
resources/
fixtures/
gradle/
releases/
v2.14.10.mdv2.14.11.mdv2.14.12.mdv2.14.13.mdv2.14.16.mdv2.14.17.mdv2.14.18.mdv2.14.3.mdv2.14.4.mdv2.14.5.mdv2.14.54.mdv2.14.6.mdv2.14.7.mdv2.14.77.mdv2.14.78.mdThis release follows v2.14.77, which rebuilt PIN unlock on device hardware and closed the autofill and site-icon findings.v2.14.79.mdThis follows v2.14.78, which fixed a second lock screen appearing after sign-in on wide screens when UI scale is set to Large, and v2.14.77, which rebuilt PIN unlock on device hardware.v2.14.9.mdv2.15.10.mdv2.15.4.mdv2.15.7.mdv2.15.9.mdv2.17.13.mdv2.17.14.mdPublished to Kepr on 2026-09-09.v2.17.34.mdv2.17.35.mdv2.17.36.mdv2.17.38.md
scripts/
build-noise-core.shbuild-rust-host.shcheck-cross-client-sync.shcheck-native-provenance.pyCheck the native libraries a release ships against a checked-in allow-list.check-release-manifest.pyCheck the checked-in Android release manifest inventory against merged output.cross_client_sync_gate.pykepr-build-apk.shBuild and publish the release APK for Kepr Builds.kepr-build-helpers.shSourceable, secret-free helpers for the Kepr release gate.rust-toolchain.shtest_cross_client_sync_gate.pytest-kepr-build-helpers.shHermetic negative-path tests for the sourceable Kepr release-gate helpers.test-native-provenance.shHermetic negative-path tests for the native-library provenance allow-list.test-release-manifest.shHermetic negative-path tests for the release-manifest inventory drift gate (PB-26-113).
tasks/
plan.mdReplace the persisted Argon2id/PIN-derived vault-key wrapper with a hardware-backed Android Keystore envelope.security-assessment-2026-09-01-plan.mdResolve every open finding in
docs/peach-android-independent-security-assessment-2026-09-01.pdf against the current v2.14.89 tree.security-assessment-2026-09-01-todo.mdPriority supersedes the unfinished PIN hardware-validation queue; that queue remains preserved in tasks/plan.md and tasks/todo.md for follow-up.todo.mdhistory
47790bac4b4achore: Remove unused BrowserSlotJson instance (v2.9.8)2 months ago845caf3108e6chore: Remove unused BrowserSlotJson instance (v2.9.8)2 months agoab8531a9baebfix: Serialize duress slot wire JSON with explicit version 1 (v2.9.7)2 months agoe5993569bbf6feat: Echo `snapshot_capable` on ADOPT_GRANT so receivers skip the inline wait when no snapshot is coming (v2.9.6)2 months ago309a3ecfa246refactor: Dedupe hex-string parser used by both vault shapes (v2.9.5)2 months ago942f3c20cdcffeat: Send the sealed duress slot as adoption-snapshot source (v2.9.4)2 months agoff6562aacdb4fix: Install the browser duress slot from the adoption snapshot (v2.9.3)2 months agocb62379d810afix: Carry browser duress slot across Codex restore instead of dropping it (v2.9.2)2 months agod05b98b443d5test: Add H-09 snapshot wire-guardrail tests from T2 verify pass (v2.9.1)2 months ago85d691ffdf4afeat: inline vault snapshot over pairing channel (v2.9.0)2 months ago933dfea7fdd0feat: Let users fill any entry from an unverified origin via explicit picker choice (v2.8.7)2 months ago3b3fd73ab28ffix: Remediate audit H-05/H-06/H-07 user-facing security claims (v2.8.6)2 months ago4bbb8467f10afix: Fence vault sessions and scrub transient secrets (v2.8.5)2 months ago519a145e56fefix: Harden updater and release publication gates (v2.8.4)2 months ago0a6a3463e47bdocs: Record audit remediation review failure2 months agofbe981103717L-01..05: intent router, OkHttp topPrivateDomain, sinceR haptic guard, strict SemVer on cache, user-initiated battery exemption2 months agod01087059810M-10/11/12/13/14: build verifies signing+identity, gradle checksum pinned, stale comments refreshed, androidTest stubs added2 months ago1fe244bffe4bM-09: pass invalid entries through build so verify detects them; tighter bounds2 months ago28ed7c0d30b6M-09: manifest freshness uses two-sided bounds; per-field caps and validation2 months agob2caee704b91M-08: drop contradictory test cases (raw-newline, over-cap on encode) — round-trip already covers unescape2 months ago37efe0733337M-08: relax validateField — allow JSON-escapable control chars, reject only NUL2 months ago9cadaac8c124M-08: pair identity uses kotlinx.serialization with field length/format validation2 months ago093d52874539M-07: transient background-lock suppression carries a deadline; expired flag never suppresses a real lock2 months ago20500a0671beM-06: Android 12+ dataExtractionRules + legacy backup_rules XML, all prefs domains excluded from cloud+device transfer2 months agodc00496b3964H-04: fix test regex for codex wrapper with both A+B slots; balancedBraceAfter helper2 months ago1b9f6ac8953aH-04: duress storage forensics — pad to slot-A size, presence-indistinguishable fake, codex restore into duress slot2 months ago5fb4f8745b61H-11: always exchange manifests; per-entry timestamps are diff authority; transitive sync test2 months ago0fee2a175dd2H-10: negotiated device-manifest capability computed once from both HELLOs2 months ago30cd436080deM-03: preserve last4 + entry IDs on REPLACE; tag/url overflow throws instead of truncating2 months ago24fe1013d9b3M-02: PeachScript parsing — caps on envelope, sections, entries, passkey blobs; Long arithmetic with checked bounds2 months ago6a51c07ba744M-01: bounded imports, repository-level atomic replaceEntries, failed import destroys just-created vault2 months ago9bd9b6bedb2cH-08: strict SemVer, path-traversal guard, byte cap, APK identity check, no sole-artifact fallback2 months agoa0af1c52d84bH-07: passkey flags derived from ceremony state; BE persisted as true; UV from real biometric2 months agoc9594ddcf5d4H-06: autofill origin auth — pinned signing certs, DAL-verified native, unknown origin gets no preselect2 months agod3ee5564ced4H-05: fix SecureFlagCoverageTest manifest parser to handle relative activity names2 months ago31ab56461db7H-05: FLAG_SECURE no longer cleared in release; separate secret activities set it themselves2 months ago77e71ef26cbaM-05: try/finally zero plaintexts/derived keys across persistSlotA, sync, autofill biometric2 months ago142e04d50602M-04: hidden in-memory session state guarded; sync accessors null when locked; failed create/adopt discards candidate2 months ago9e26e136f055H-03: stateLock fence around state mutations; lock() sync-callable via ReentrantLock2 months ago065b02e39f66H-01: transactional password rotation with rollback on every storage step; throw on stamp commit failure2 months ago1d32590746bcC-01: authenticate Codex candidate in memory before any write, rollback on storage failure2 months ago12b8bb8814a4docs: Record v2.8.3 release phone install2 months ago858a3129886dfix: Decentralize mesh graph convergence (v2.8.3)2 months ago19321e591d55docs: Record v2.8.2 wireless phone install2 months ago195ba762b6d8fix: Widen connected pairing birds (v2.8.2)2 months ago4fc86c132507docs: Record v2.8.1 wireless phone install2 months ago818bd9bb6b50fix: Enforce Pro entitlement during pairing (v2.8.1)2 months ago234156b10775docs: Record v2.8.0 wireless phone install2 months ago1b935547ec0dfeat: Add deterministic full-mesh sync (v2.8.0)2 months agoa34938c7cc39docs: record full-mesh protocol boundary2 months ago
details
Peach for Android
A free, open source, local-first password manager for Android.
No accounts. No subscription. Your passwords stay on the device, encrypted with AES-256-GCM and protected by Argon2id key derivation. Sync, backup, and autofill happen without trusting any cloud in the middle.
Features
- Zero-knowledge vault — AES-256-GCM encryption, Argon2id KDF, keys never leave your device
- End-to-end encrypted sync — pairs with your other Peach devices over a Noise channel; the relay only forwards ciphertext it cannot read
- Inline autofill — fills directly in apps, no copy-paste detour
- Passkeys — WebAuthn credentials alongside your passwords
- Quick Settings tile — copy a credential from anywhere with a single tap
- Biometric unlock — hardware-backed AndroidKeyStore escrow, invalidated on enrollment change
- Codex — prints your encrypted vault as Aztec codes on paper. Physical offline backup
Open Source
Peach is free and open source under the GPL v3 license. Both the browser extension and the Android app.
The source is hosted on Kepr — Asha Software's own version control platform.
Security
Peach has undergone two adversarial analysis sessions against this codebase. The most recent findings have been resolved.
Cryptographic primitives:
- Key derivation: Argon2id (m=64MiB, t=3, p=4)
- Encryption: AES-256-GCM with fresh random nonces
- Sync handshake: Noise NK / Noise KK (25519, ChaChaPoly, BLAKE2s)
- Backup codec: GF(2⁸) Reed-Solomon with zstd compression
- BLAKE3 checksums throughout
The canonical Noise core lives in a shared Rust crate with the browser extension — Android drives it via JNI. See docs/CRYPTOGRAPHIC-TEST-VECTORS.md for the byte-level vectors that pin each primitive.
Building
./gradlew assembleRelease
Outputs to app/build/outputs/apk/release/. The shared Noise core is built from ../peach-browser/crypto-core.
License
GPL v3 — see LICENSE.
Peach Pro
Pro features (end-to-end encrypted sync, Codex, Canary) are available for $39 one-time at peachpasswords.com. Purchasing Pro supports continued development.
Built by Asha Software · [email protected]