README.md

2.3 KB · raw

rendered · source

1# Peach23A free, open source, local-first password manager.45No servers. No subscription. No account required. Your passwords stay on your device, encrypted with AES-256-GCM and protected by Argon2id key derivation. Everything else — syncing, backup, autofill — happens without a cloud in the middle.67**[peachpasswords.com](https://peachpasswords.com)**89---1011## Features1213- **Zero-knowledge vault** — AES-256-GCM encryption, Argon2id KDF, keys never leave your device14- **Chirp Sync** — pairs devices over ultrasonic audio. No QR codes, no servers, no accounts15- **Codex** — prints your encrypted vault as Aztec codes on paper. Physical offline backup16- **Inline autofill** — fills directly in the page, no redirects17- **TOTP built in** — two-factor codes without a separate app18- **Canary alerts** — get notified if a saved credential is accessed19- **One-time purchase** — $39 for Pro, yours forever2021---2223## Browser Extension2425Available for Chrome and Firefox.2627[Chrome Web Store](#) · [Firefox Add-ons](#)2829---3031## Android3233Coming to the Play Store. Source available in this repository.3435---3637## Open Source3839Peach is free and open source under the GPL v3 license. Both the browser extension and the Android app.4041The source is hosted on [Kepr](https://kepr.uk/peach) — Asha Software's own version control platform.4243---4445## Security4647Peach has undergone two adversarial analysis sessions. All findings have been resolved. See [`security/`](./security/) for the full reports.4849**Cryptographic primitives:**50- Key derivation: Argon2id (m=64MiB, t=3, p=4)51- Encryption: AES-256-GCM with fresh random nonces52- Sync handshake: Noise NK / Noise XX (25519, ChaChaPoly, BLAKE2s)53- Backup codec: GF(2⁸) Reed-Solomon with zstd compression54- BLAKE3 checksums throughout5556---5758## Building5960```bash61bun install --frozen-lockfile62bun run build63```6465Outputs to `dist-chrome/` and `dist-firefox/`.6667---6869## Contributing7071See [CONTRIBUTING.md](./CONTRIBUTING.md).7273---7475## License7677GPL v3 — see [LICENSE](./LICENSE).7879---8081## Peach Pro8283Pro features (Chirp Sync, Codex, Canary) are available for $39 one-time at [peachpasswords.com](https://peachpasswords.com). Purchasing Pro supports continued development.8485---8687Built by [Asha Software](https://asha.software) · [[email protected]](mailto:[email protected])