# Peach

A free, open source, local-first password manager for Chrome, Firefox, and Android.

Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.

**[peachpasswords.com](https://peachpasswords.com)**

---

## Features

- **Passwords, cards, and secure notes** — keep your private data together in one encrypted vault
- **Inline autofill** — fill and save credentials without leaving the page
- **TOTP built in** — generate two-factor codes without a separate authenticator
- **Password health** — find weak, reused, and exposed passwords
- **Portable backups** — export and restore with PeachScript or a `.peach` file

Peach Pro adds:

- **Peach Sync** — end-to-end encrypted sync across paired devices
- **Passkeys** — save and use passkeys in Chrome and Firefox
- **Peach Codex** — print an encrypted, scannable backup of your vault
- **Advanced vault health, Canary Entries, and duress tools**

See the [Peach website](https://peachpasswords.com/install) for current availability and Pro details.

---

## Install

- [Chrome and Firefox](https://peachpasswords.com/install)
- [Android beta](https://peachpasswords.com/install/android-beta)

---

## Open Source

Peach is released under the [GPL v3](./LICENSE). This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.

The source is hosted on [Kepr](https://kepr.uk/peach), Asha Software's version control platform.

---

## Security

Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.

Implementation details live alongside the code:

- [Security finding resolutions](./docs/PEACH_BROWSER_SECURITY_FINDING_RESOLUTIONS_2026-09-05.md)
- [Cross-client Sync protocol](./docs/sync-protocol.md)
---

## Building

```bash
bun install --frozen-lockfile
bun run build
```

Builds are written to `dist-chrome/` and `dist-firefox/`.

---

Built by [Asha Software](https://asha.software) · [hello@peachpasswords.com](mailto:hello@peachpasswords.com)