{"keep your\nsecrets."}

master password

setPassword((event.target as HTMLInputElement).value)} onKeyDown={(event) => { if (event.key !== "Enter" || !props.ready) return; void handleCreate(); }} /> 0 && passwordStrength() !== null} fallback={

Use at least 12 characters. Peach will only create the vault when the passwords match and the strength check passes.

} >

{passwordStrength()}

confirm password setConfirmPassword((event.target as HTMLInputElement).value)} onKeyDown={(event) => { if (event.key === "Enter" && props.ready) void handleCreate(); }} />

{error()}

Save your 12 recovery words right after you create the vault — they're the only way in if you forget your password.

setScriptInput((e.target as HTMLTextAreaElement).value)}
        />
        <div class="peach-rt-divider">— or —</div>
        <label class="peach-btn peach-btn--ghost peach-btn--sm peach-rt-file-label">
          open .peach file
          <input
            type="file"
            accept=".peach,text/plain"
            style="display:none"
            onChange={async (e) => {
              const file = (e.currentTarget as HTMLInputElement).files?.[0];
              if (!file) return;
              try {
                setScriptInput(await file.text());
              } catch {
                setError("Couldn't read file.");
              } finally {
                (e.currentTarget as HTMLInputElement).value = "";
              }
            }}
          />
        </label>
        <input
          class="peach-restore-symbols-pass"
          type="password"
          placeholder="backup password"
          value={backupPass()}
          onInput={(e) => setBackupPass((e.target as HTMLInputElement).value)}
          onKeyDown={(e) => {
            if (e.key === "Enter" && scriptValid() && backupPass().trim() && !working()) {
              e.preventDefault();
              void handleRestore();
            }
          }}
        />
        <button
          class="peach-btn peach-btn--accent peach-btn--md peach-rt-submit"
          onClick={() => void handleRestore()}
          disabled={!scriptValid() || !backupPass().trim() || working()}
        >
          restore vault →
        </button>
        <Show when={error()}>
          <p class="peach-rt-error">{error()}</p>
        </Show>
      </Show>
    </div>
  );
}

// ── CSV tab ────────────────────────────────────────────────────────────────

function RestoreCSV(props: { hasVault: boolean; onSuccess: () => void | Promise<void> }) {
  const [importing, setImporting] = createSignal(false);
  const [error, setError] = createSignal<string | null>(null);
  // CSV/JSON imports are plaintext and carry no password, so when there is no
  // vault yet the user MUST choose a master password here — otherwise the
  // imported credentials would be encrypted under an empty key and offer zero
  // at-rest protection (audit HIGH). Mirrors the onboarding MIN_LENGTH policy.
  const CSV_MIN_PASSWORD_LENGTH = 12;
  const [newPass, setNewPass] = createSignal("");
  const [confirmPass, setConfirmPass] = createSignal("");
  const needsPassword = () => props.hasVault === false;
  const passwordReady = () =>
    !needsPassword() ||
    (newPass().length >= CSV_MIN_PASSWORD_LENGTH && newPass() === confirmPass());

async function handleFile(e: Event) {
    const input = e.currentTarget as HTMLInputElement;
    const file = input.files?.[0];
    input.value = "";
    if (!file) return;
    if (needsPassword() && newPass().length < CSV_MIN_PASSWORD_LENGTH) {
      setError(`Set a master password of at least ${CSV_MIN_PASSWORD_LENGTH} characters first.`);
      return;
    }
    if (needsPassword() && newPass() !== confirmPass()) {
      setError("Passwords do not match.");
      return;
    }
    setImporting(true);
    setError(null);
    try {
      const text = await file.text();
      const parsed = await parseImportSource(text);
      if (parsed.entries.length === 0) throw new Error("NO_ENTRIES");

if (props.hasVault === false) {
        // Create the vault under the user-chosen master password — never an
        // empty one (an empty key derives a publicly-known vault key).
        const cr = await sendMessage({ type: "CREATE_VAULT", payload: { password: newPass() } });
        if (!(cr as { ok: boolean }).ok) throw new Error("CREATE_VAULT_FAILED");
      }

return (
    <div class="peach-rt-csv">
      <Show when={needsPassword()}>
        <input
          class="peach-restore-symbols-pass"
          type="password"
          placeholder="new master password"
          value={newPass()}
          onInput={(e) => setNewPass((e.target as HTMLInputElement).value)}
        />
        <input
          class="peach-restore-symbols-pass"
          type="password"
          placeholder="confirm master password"
          value={confirmPass()}
          onInput={(e) => setConfirmPass((e.target as HTMLInputElement).value)}
        />
      </Show>
      <label
        class="peach-btn peach-btn--accent peach-btn--md peach-rt-csv-btn"
        classList={{ "is-busy": importing(), "is-disabled": !passwordReady() }}
      >
        {importing() ? "importing…" : "open csv file"}
        <input
          type="file"
          accept=".csv,.json,.peach,application/x-peach"
          style="display:none"
          onChange={handleFile}
          disabled={importing() || !passwordReady()}
        />
      </label>
      <p class="peach-rt-csv-sources">
        Imports from Bitwarden, 1Password, Proton Pass,<br />
        Chrome, Safari, and Edge.
      </p>
      <p class="peach-rt-csv-warning">PLAIN-TEXT — DELETE THE FILE AFTER IMPORT</p>
      <Show when={error()}>
        <p class="peach-rt-error">{error()}</p>
      </Show>
    </div>
  );
}

// ── Helpers ────────────────────────────────────────────────────────────────

function getDisplayError(error: string | undefined, fallback: string): string {
  if (!error) return fallback;
  if (
    error === "SERVICE_WORKER_UNAVAILABLE" ||
    error.includes("Receiving end does not exist") ||
    error.includes("message port closed")
  ) {
    return "background service unavailable";
  }
  return error;
}

unlock your vault.

{"keep your\nsecrets."}

unlock
your vault.