Peach

A free, open source, local-first password manager for Chrome, Firefox, and Android.

Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.

peachpasswords.com

Features

• Passwords, cards, and secure notes — keep your private data together in one encrypted vault
• Inline autofill — fill and save credentials without leaving the page
• TOTP built in — generate two-factor codes without a separate authenticator
• Password health — find weak, reused, and exposed passwords
• Portable backups — export and restore with PeachScript or a .peach file

Peach Pro adds:

• Peach Sync — end-to-end encrypted sync across paired devices
• Passkeys — save and use passkeys in Chrome and Firefox
• Peach Codex — print an encrypted, scannable backup of your vault
• Advanced vault health, Canary Entries, and duress tools

See the Peach website for current availability and Pro details.

Install

• Chrome and Firefox
• Android beta

Open Source

Peach is released under the GPL v3. This repository contains the browser extensions and shared web application code.

The source is hosted on Kepr, Asha Software's version control platform.

Security

Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.

Implementation details live alongside the code:

• Cryptographic test vectors
• WebAssembly provenance

Building

bun install --frozen-lockfile
bun run build

Builds are written to dist-chrome/, dist-firefox/, and dist-mobile/.

Built by Asha Software · [email protected]