peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas269 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
f7ce7c14626drestore field-split routing: username icon → mini identity-first flow, password icon → full generator5 months agoef51cb981097unified inline popup on signup forms regardless of which field icon is clicked (v2.38.18)5 months agocc1e4864ce62close popup after passkey approve/deny; fix TOTP double-click clobbering clipboard (v2.38.17)5 months agof110a866ba42auto-filter by field type, keep collapse toggle, smooth height animation on inline popup (v2.38.16)5 months ago8f57c111acabbefore removing filter pills from identity suggest5 months agoe7f0d0d1b7ebkeyboard navigation for identity suggest list — arrow keys, enter/space, escape (v2.38.15)5 months agodb05c533ad81before keyboard navigation in identity suggest list5 months ago18958b371f86identity autocomplete on username/email fields in inline popup edit mode (v2.38.14)5 months ago262ece8cc27dbefore identity suggest in inline edit form5 months ago807418099580TEST_WS_LOCAL + TEST_SUBNET_DETECT handlers in messages.ts for service-worker connectivity probe (v2.38.13)5 months ago717b4cb8afcabefore sync foundation test handlers5 months ago6e813d9fe0e6fix filter dismiss bug and styled scrollbar on identity suggestion list5 months ago451d5a169ed5keep vault alive while new entry form is open via 30s TOUCH_AUTO_LOCK heartbeat5 months ago917ff03ad570bump 2.38.9 → 2.38.105 months ago710bf17ebf47fix identity list scrolling and filter pill blur-dismiss bug5 months agoe2df50cfe4e3add current-page URL insert button to new entry domain field5 months ago24b44033cfdasmooth collapse toggle and enter animation on identity suggestion lists5 months agobb3cc8fd3352bump 2.38.5 → 2.38.65 months ago768b657719fcidentity suggestions on username+email in Add.tsx (email field added, type filter toggle, allIdentities memo); inject.ts: on-demand fetch when savedIdentities empty, type badges + filter pills (v2.38.5)5 months ago90500f481978inject.ts createSmartGenerator: default 64, editable password output, click-to-edit length; showCreateForm: split into username + email fields, identity suggestions on focus for both fields (v2.38.4)5 months agob8ffaf221b51before inject.ts create form overhaul — identity suggestions, dual identity fields, editable password5 months ago1c24140227f4click-to-edit length number in GeneratorDrawer — both compact and full layouts, Enter/blur commits clamped to 8-128, Escape cancels, slider stays synced (v2.38.3)5 months ago104b98beeb6apassword generator default 20→64; policy detection: multi-ID aria-describedby, title/placeholder/aria-label, N-M char range pattern (v2.38.2)5 months ago48bbe718accdidentity suggestions dropdown on username field in Add.tsx — surfaces used usernames and emails from vault, filtered as you type, with usage count (v2.38.1)5 months agodc4a623bf02cbefore identity suggestions in Add.tsx new entry form5 months agocc26af3047e7improve sync screen legibility — pro note card surface, body text t2→t1, note text t3→t25 months agof341f450afb1add local-network vault sync — Noise NK transport, blob coordinator, mesh device propagation, subnet scan, Android bridge (v2.38.0)5 months ago68d9866adecfbefore vault sync implementation — parts 1-155 months ago05884f77dcd7session notes: record v2.37.0 Android scan tab outcome5 months ago41feb7d5a8dcadd Android two-tab camera scanner to AddDeviceView — Scan/Show tabs, jsQR, pair-probe-answered → PAIRING_COMPLETED wire (v2.37.0)5 months ago6a43baf3fef2before Android scan tab in AddDeviceView5 months agoa428fecf556afix Settings sync nav subtitle: remove incorrect 'sync is free' copy (v2.36.0)5 months agoa340155ddd86sync screen rebuild: new SyncPairingView hub (States A/B/C + Advanced), AddDeviceView QR flow, Settings sync section removed, GET_PAIRED_DEVICES + GET_SYNC_STATUS handlers, nav from Settings directly to hub (v2.36.0)5 months ago8c654a6d9948before sync screen complete rebuild5 months agoaf0831a8ab00sync info sheet: SyncInfoSheet wired into Settings renderSync, hasPaired flag loaded and PAIRING_COMPLETED tracked, setHasPaired called on pairing completion in SyncPairing, bump 2.35.8 → 2.35.95 months agoa3b65b7baf9cSyncInfoSheet component + CSS (backdrop, sheet-up animation, handle, title, points, actions)5 months ago02819433296badd getHasPaired / setHasPaired flag to sync-storage.ts5 months ago3ef568aeb5bcbefore sync info sheet — State A/B/C flow, SyncInfoSheet component, hasPaired flag5 months ago1800a1f83eb8session notes: record v2.35.8 sync pro gate fix outcome5 months ago9edde75430a8sync settings: remove ✦ badge from nav, add network note, promote Add a device row, flip Show to when={isPro()}, fix App.tsx v=view() used before declaration (v2.35.8)5 months agob05386777208before sync pro gate restructure (full spec implementation)5 months ago91fc8b0ba947sync pro upgrade hint hidden until first device paired; drop dead pro_required branch in SyncPairing error path (v2.35.7)5 months ago2301f0b91e5efix vault sheet architecture: peek at 60px, PEEK_PX-aware restClosed, tap-to-open peek strip5 months agodf273d35620bbefore sync pro gate fix5 months ago276cbbc17ab5lower flick velocity threshold 0.2→0.05 px/ms so any upward flick opens the sheet5 months ago940a65b06fd2bump 2.35.5 → 2.35.6 across package.json + both manifests5 months agoe7752164f70creplace 6-digit pairing code with QR; expose Add a device to free users in Sync settings5 months ago739bb2d48de0bump 2.35.4 → 2.35.5 across package.json + both manifests5 months ago331e43258a85move @types/qrcode to devDependencies; add --peach-text and --peach-health-bad aliases in vars.css5 months ago26b3c48d7f7cdrop dead exports: trustCurrentNetwork + duplicate isCurrentNetworkTrusted from sync-network.ts; isCurrentNetworkTrusted/getPairedDevice/updatePairedDevice from sync-storage.ts5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]