peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas179 files
public/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.test.tsclipboard.tscommands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tspairing-server-state.tsTracks the active 6-digit pairing-server session.passkey-crypto.test.tspasskey-crypto.tspasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.sync-coordinator.test.tssync-coordinator.tssync-network.tssync-storage.tsvault-history.test.tsVault history tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
components/
views/
Add.tsxcontracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxSyncPairing.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsimport.test.tsimport.tslocal-network.tsml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-types.tssync-wire.tstypes.tstypes.ts — cross-boundary types and the
MessageType union.websocket-sync-transport.tstests/
fixtures/
history
fb549556f757add silver platter (State 1) for single-match — full-width Fill button with ✓ flash micro-confirmation, secondary copy ⓤ / copy ⓟ / dismiss row, Escape-to-dismiss handling6 months ago7aa9d2bbb445add dismissal lock, fill-success lock (form-WeakSet + 3s page grace), submit-button focusin exclusion, SPA URL-change reset to inline popup6 months agofc0e2449c05brebuild inline popup visual foundation: token-based dark/light themes via data-theme, new entrance/exit/slide animations, accent glow + border-accent vars on host, exit-animated dismiss6 months ago1c5fc17731ccrecord pre-redesign baseline of src/content/6 months agocf70dff0f0eabefore inline popup v2.2.0 redesign6 months ago02f5a9168241remove no-new-features freeze from Projects.md §86 months ago3b2a4a93bef0record v2.1.9 revert [OUTCOMES]6 months ago3ac33e77146arevert v2.1.8 global submit-click suppression — was breaking inline icon/selector injection (v2.1.9)6 months ago6c98b25ab588record v2.1.1–v2.1.8 polish pass [OUTCOMES]6 months ago8e6e3a1d2371suppress inline selector reopens for 1.5s after submit-button click, Enter-in-form, or submit event (v2.1.8)6 months ago6523d1775037entry title padding-bottom 0.12em so g/y/j/p descenders are not clipped by overflow (v2.1.7)6 months agoa66f93e5a822active sort pill text uses var(--peach-t0) so SMART label is visible in both themes (v2.1.6)6 months ago70dd4d73512dboost light theme text contrast: t0/t1/t2 darker + more opaque for legibility on cream (v2.1.5)6 months agoab0129ad124edarken light theme ~15% to match reference cream tone (v2.1.4)6 months ago728b05caa190lighten + desaturate light theme: warm cream bg (#FAF5EB) and softer accent wash (v2.1.3)6 months agoe416e9012b02trash list grows to fill popup; favicon img onerror falls back to type icon (v2.1.2)6 months agoee1f6563c07dfeedback view textarea grows to fill remaining popup height (v2.1.1)6 months ago693689c2cf53add SUBMIT_FEEDBACK handler tests, update Projects.md §3.7 and session notes (v2.1.0)6 months ago280e301ab2dbadd category nav and feedback form CSS rules to popup.css6 months ago73260e9b28a1rewrite Settings.tsx: two-level navigation, seven sub-views, feedback form6 months agoa205e1e3d989add SUBMIT_FEEDBACK message type, handler, FEEDBACK_ENDPOINT constant, version bump to 2.1.06 months agoe42e2b44e8f8before settings redesign and feedback feature6 months ago0295c6a8be14suppress autofill popup reopen on recently filled fields for 5s — fixes popup re-summoning when login button click refocuses an input (v2.0.3)6 months ago332398c99b82fix TDZ in showAutofillSelector — captureKeydownRef now declared before renderLocked() so the locked inline popup stops stacking and autofocuses (v2.0.2)6 months ago489d21bdf37edrop 'add' from + notes / + 2FA / + tags labels (v2.0.1)6 months agoe84a9fee3cfacapture-phase keydown intercept instead of focusout loop — eliminates tab hang (v2.0.0)6 months ago460535802d51stop keyboard event leakage and re-assert focus against page focus traps in locked inline popup (v1.9.9)6 months agoc99a298af8fbswitch Firefox manifest from service_worker to scripts array for MV3 compatibility (v1.9.8)6 months agoad53ccec2956trash 24 stale root files; clean dist dirs on every build (v1.9.7)6 months agocf2435008e01npm run build now produces both dist-chrome and dist-firefox atomically (v1.9.6)6 months agoc3dff661a44dreplace period mask with bullet chars + uniform spacing (v1.9.5)6 months ago363ddc594434add + add tags option with inline tag editor on Entry detail view (v1.9.4)6 months ago99cb0735ea7fleft-align + add notes/2FA with justify-self: start in grid context (v1.9.3)6 months ago2f841825d4c1fix lock-on-close with port disconnect instead of pagehide sendMessage (v1.9.2)6 months agocfa0b3390c64fix add-another-url closing the editor by unifying focus-out wrap and halve button glow (v1.9.1)6 months ago032574cf5b9aadditionalUrls + remember-site toast + 30% glow reduction (v1.9.0)6 months ago17d54c31d9c5before multi-domain entry support and remember-site prompt6 months ago6bf8fedee043fix copy buttons by writing clipboard directly from popup; SW only schedules auto-clear (v1.8.9)6 months ago7cb62f5f1ca2demote + add notes / + add 2FA from chunky capsules to text links left-aligned (v1.8.8)6 months ago521dac96adefsecond-pass brighter palette and four-layer bloom shadow on accent buttons (v1.8.7)6 months ago25b1cdf118d8resolve currentTabDomain before openVault so already-unlocked popups pick the domain match (v1.8.6)6 months ago690822a1ea3frestore vibrant accent palette and bump glow alpha; unlock button stays lit before typing (v1.8.5)6 months agob02e1d035194single-click copies and double-click edits totp; remove redundant copy button and hover box (v1.8.4)6 months ago4c33f3380f77expose + add 2FA button on login entries with no TOTP secret (v1.8.3)6 months ago653b9700c5c0fix inline ADD_ENTRY payload shape and wire inline generator to detectPasswordPolicy with forbidden-char support (v1.8.2)6 months agofc82a1c7601abefore inline save fix + smart gen policy wiring6 months agoaf96c8docs: CONTINUITY.md — v1.7.3-v1.8.1 session record6 months agoc1e7defix: accent color ambient surface response — glow, tint, bloom (v1.8.1)6 months ago0bb6a9feat: raise password generator maximum to 128 characters (v1.8.0)6 months ago1ab038fix: inline popup new entry save — vault status check and response handling (v1.7.3)6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]