peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas269 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
c639859d4d1afix: Use browser native messaging framing (v2.13.8)6 months agob2b9cde47478feat: Add native sync host control messages (v2.13.7)6 months agoe030c73adb94fix: Authenticate trusted sync initiators (v2.13.6)6 months ago14747ef65187docs: Record SYN-001 initiator authentication blocker6 months ago964f697e79defeat: Add native sync trusted device foundation (v2.13.5)6 months agodc83ed3b22f4feat: Add native sync trust store and rotation (v2.13.5)6 months agob49712298cc7fix: Replace sync host static Noise identity (v2.13.4)6 months ago4b36429b213dchore: Prepare native host compile baseline (v2.13.3)6 months agoea808a206a9ddocs: Capture SYN-001 Phase 0 baseline6 months ago6692bf57993cbefore SYN-0016 months ago636a946976ecdocs: Require SYN-001 Phase 0 baseline note6 months ago4085ea45f45edocs: Queue SYN-001 implementation phases6 months agof4dec4d5c9b4docs: Clarify SYN-001 save boundaries6 months ago4ecee9eab736docs: Record SYN-001 compile-only starting constraint6 months agoa201b81593e9docs: Document SYN-001 sync blocker6 months agobb855a4ce454fix: Wire Android foreground vault bridge (v2.13.2)6 months ago7a44a1c6f0afcheckpoint: before applying Android wiring spec6 months ago16ecb7d1bc61fix: version to 2.13.16 months ago0eef83c7562dfix: chrome shim + storage bridge + viewport for mobile (v2.13.1)6 months ago56c2eb02566bfeat: settings — mobile section (autofill status, biometric toggle) (v2.13.0)6 months agoa7dd619b808dfeat: onboarding — autofill enable card (Android only) (v2.13.0)6 months ago23dd738816b6feat: lock screen — biometric unlock button (Android only) (v2.13.0)6 months ago7ab832471271feat: android — AutofillPlugin + BiometricPlugin + src/shared/biometric.ts (v2.13.0)6 months ago96ed311ac197feat: android — MainActivity, AndroidManifest, Capacitor setup (v2.13.0)6 months agod2c6b5ea5665feat: src/shared/storage.ts — unified chrome.storage / Capacitor bridge6 months agoa8f5e20c98c9chore: add Capacitor, configure monorepo for Android target (v2.13.0)6 months ago5e1065cecd73before Android/Capacitor implementation6 months ago8de9310dce9cbefore mobile-to-desktop handoff implementation6 months agoe363952c062ffix: Entry.tsx keydown guard — swallow c/u shortcuts only when NOT in textarea/input/select/contenteditable (v2.12.3)6 months ago23f97922d05fwip: isolate notes textarea keyboard conflict — App keydown guard correct, Entry.tsx handler also needs guard6 months ago5133483cf65ffeat: settings — license key visible with one-tap copy (v2.12.2)6 months ago5e15c7c0eafebefore peach pro license key settings feature6 months agoceed33a0c307bump version to 2.12.1 for all fixes in this session6 months agob086f2d75824fix note editor swallowing letter U by only intercepting Ctrl/Cmd shortcuts for non-letter keys6 months ago0520c57b3767guard ADD_ENTRY with vault.isUnlocked() and surface vault-locked errors with actionable message6 months ago7a4d05b32d68show specific blocker message on disabled create vault button6 months ago7e9b7808076arewrite restore picker as onboarding-style stack: PeachScript / Mayan / CSV plus snapshot footer; QR→Mayan in Export6 months ago0a80d4f72fe2v2.12.0 — bump versions, Projects.md, session notes, tests, dist rebuild6 months agocca2dc2f164brewrite MAIN-world proxy, add relay, wire manifest, gate legacy offer6 months ago8a118743fab0add HAS_CREDENTIALS, CREATE, GET handlers and approval wrapper6 months ago996679b2fcceadd FIREFOX_USE_CONTENT_SCRIPT_PROXY runtime flag6 months ago1e3ded7ac879before firefox passkey full-interception proxy v2.12.06 months ago5e39562986aepanic overlay, Step 1 header, Step 3 rune backdrop, scrollbar hiding (v2.11.14)6 months ago63c701ea0f83before panic overlay + Step 1/3 redesign6 months ago688d6a788f92create-vault screen: optional back arrow that returns to Onboarding (only when hasVault=false so it doesn't appear for users with an existing locked vault); bump v2.11.136 months agoce561ac4b57einline silver-platter Edit: replace × with Edit button, click renders inline edit form (title/url/username/password/totp/notes) inside the same shadow-DOM surface, save→UPDATE_ENTRY then refresh platter, cancel returns; bump v2.11.126 months ago4fd968be25e7Vault Health loading screen: centered glyph with rotating arc + 'Checking your vault's health' title + scanning copy + indeterminate sweep bar; replaces the too-subtle skeleton that read as broken; bump v2.11.116 months agoe397baee42fcfavicon fallback: render colored title-initials chip when the real favicon isn't cached yet (login entries only); deterministic HSL hash so the same entry keeps the same color across renders; bump v2.11.106 months agof45fccde9c90Vault Health: hide platform scrollbar to match other popup surfaces, add shimmering skeleton (queue head + 3 rows) while GET_ADVANCED_HEALTH_REPORT computes; bump v2.11.96 months ago7c1bd58db8eadanger card visual overhaul for Replace + Destroy: paired card scaffold with glyph+title+copy+CTA, --danger-tint var keyed yellow (warn) vs red (hazard), accent border + radial-gradient glow that intensifies on hover; bump v2.11.86 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]