peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas269 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
aa5fb5dedb2bbefore sync UI wiring + vault advanced + android SyncKeyPlugin (v2.14.10 → v2.15.0)6 months agoeb87e56fd631SYNC_STATUS.md — rewrite for v2.14.x: blockers all resolved, only manual E2E remains for daily-driver verification (v2.14.10)6 months ago4e0219b3fb32sync completion + vault history shipped — v2.14.9 / native v0.1.146 months ago7d738aa11c96Projects.md §3.9 sync architecture rewrite + §3.12 vault history doc + final verification (v2.14.9)6 months ago5bc0f257164cSettings — Vault History group (10 snapshots, restore + lock) + Sync Now feedback states (v2.14.8)6 months ago2b121cc936d6vault-history + blob-sync coordinator tests — 281/281 vitest, 30/30 cargo (v2.14.7)6 months agod957bb317130M7 shared AcceptRateLimiter across TCP+WS + M8 explicit FrameWriter shutdown on disconnect (v2.14.6 / native v0.1.14)6 months ago858d626ebba1JS Noise NK + auth proof + CapacitorSyncTransport + android-sync-identity + cross-check test (Rust↔JS hex pinned) (v2.14.5)6 months agoa2a086b69cf1TRIGGER_SYNC sequential multi-peer + mDNS onPeerDiscovered auto-sync (60s debounce) (v2.14.4)6 months ago89df69da73abauto-advertise lifecycle + incoming pairing subscriber wired into entry.ts (v2.14.3)6 months agoccf8a297e1d5pairing protocol — native pairing_mode flag + AuthOutcome split + extension wire PAIR_REQUEST/ACCEPT/REJECT (v2.14.2 / native v0.1.13)6 months agoe4d716993d01replace per-entry sync stack with blob protocol — applyIncomingVault + runBlobSyncSession (v2.14.1)6 months agobb21a0e3dc56replace snapshot system with peach_vault_history (max 10, snapshot-before-write, snapshotId restore)6 months ago4c3d8340d337answer pre-flight questions and queue all 13 phases6 months agoc6c980f1a36cbefore sync completion + vault history rewrite6 months agoaf5b631a53f1add SYNC_STATUS.md scratchpad before sync rewrite6 months agoa85d969e6a00docs: session notes — Phase 6+8 outcomes through v2.13.336 months ago47acbc3abf45feat: Android SyncPlugin (NsdManager mDNS) + sync-bridge transport selector (v2.13.33)6 months ago3602700c8be4feat: Native WebSocket transport at port+1 with mDNS wsport TXT (v2.13.32, native v0.1.12)6 months agoc7028334127cbefore SYN-001 phase 6 android sync6 months ago3649e6cc52a0docs: session notes — Phase 9 installer outcome + remaining-phase plan6 months ago97d959c4b02efeat: Native messaging host installer + Sync architecture docs (v2.13.31)6 months ago8d3a3cc67b03docs: session notes — Phase 7 outcomes through v2.13.306 months ago90d6ab2a5e88feat: Discover-and-tap pairing flow via mDNS (v2.13.30)6 months ago51b129be8db6feat: Incoming pairing request overlay banner with 60s expiry (v2.13.29)6 months agof400fcc5c4c3feat: Reset sync identity from Settings (v2.13.28)6 months ago15f0e8760acbdocs: Pin SYN-001 pick-up state for context handoff6 months ago1be9296ef937docs: Pin SYN-001 pick-up state for context handoff6 months ago0cdf2fe0a617feat: Enable nativeMessaging permission (v2.13.27)6 months ago9d2e394ad5c5feat: Add native accept rate limit and audit sign-off (v2.13.26)6 months agod9dcac6195a4feat: Wire conflict resolver into sync dispatcher (v2.13.25)6 months ago2563b3036de4feat: Add deterministic sync conflict resolver (v2.13.24)6 months ago3c90975bc48efeat: Add native sync transport adapter (v2.13.23)6 months ago32907007805dfeat: Add transport-injected sync session lifecycle (v2.13.22)6 months ago35252658ce1ffeat: Add stateless sync frame dispatcher (v2.13.21)6 months ago0795bfa40488feat: Expose native session key client (v2.13.20)6 months agod429e6e3565ffeat: Derive sync session key from Noise transport (v2.13.19)6 months ago0a69521c91bdbefore SYN-001 phase 5 session key derivation6 months ago441ed70686f7feat: Wire sync coordinator entry payloads (v2.13.18)6 months agoae28e74af922feat: Add encrypted sync entry payloads (v2.13.17)6 months ago19c5b50deb77feat: Add sync coordinator preflight (v2.13.16)6 months ago0607c6c271d5chore: Add native sync manifest generator (v2.13.15)6 months ago7d8739461decfeat: Add sync wire codec (v2.13.14)6 months agoe6e751939095feat: Add sync manifest diff helpers (v2.13.13)6 months agoc5f5d4f09257fix: Stop native sync advertising cleanly (v2.13.12)6 months ago34d3395b9063fix: Carry native sync TCP frames end to end (v2.13.11)6 months agob41a68df9b08docs: Record remaining sync transport blockers6 months ago11f364bd4e84docs: Refresh SYN-001 status6 months agoee019ea00094fix: Forward native sync discovery events (v2.13.10)6 months ago6e293938635cfix: Align sync host client protocol (v2.13.9)6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]