peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas266 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsTemporary until Vesper (internal tracker) is readydevice-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
f17d073716b4diag: mesh-propagation round 2 — five tagged lines at every silent rejection path in applyVerifiedPeerManifest (v4.7.7)2 months agoec56ceb632a1docs: verify v4.7.5 implementation, fix stale restoreFromSession docstring (v4.7.6)2 months ago2ce3e994721efix: background sync works after popup close (lock no longer clears session key; rootKey restored from pw_root_*) (v4.7.5)2 months ago470beed172adfix: canonicalise skips null fields to match Android manifestEntryMap (v4.7.4)2 months ago7af03d846f2ediag: dump first device + first revocation as JSON (v4.7.3)2 months agoc46a49d2fa01diag: include deviceIds in verifyDeviceManifest diag line (v4.7.2)2 months ago9cab7d6bd740diag: log canonical string length + head (v4.7.1)2 months ago8a84c926b1bffix: derived-key retry was crashing on Node-only Buffer API (v4.7.0)2 months agoc65884a42bdfchore: bump to v4.6.9 (deeper verifyDeviceManifest diagnostic)2 months ago0e674d57a890diag: log verifyDeviceManifest error reason on both stored + derived attempts2 months ago25b89c1d4939chore: bump to v4.6.8 (diagnostic logging)2 months ago6139bb5c534ediag: log early-return reason in applyVerifiedPeerManifest2 months ago1379c16e930ediag: log per-entry skip reason in applyVerifiedPeerManifest2 months agodcd38225db61diag: log manifest exchange for mesh-propagation investigation2 months ago1f39c16ea27bdocs: record v4.6.7 stale signing key fallback session2 months ago47f10bb9ac6afix: fall back to derived signing key when stored issuer key is stale (v4.6.7)2 months agob56583e1a012test: cover relay adoption receiver mesh manifest path (v4.6.6)2 months ago84225691c252docs: Record GPT-5.6-Sol browser promotion PASS2 months ago74ca2839ec4ffix: Fail oversized duress before snapshot send (v4.6.5)2 months ago4c15b8de49bbtest: T-A38 root-cause proof — >768 KiB snapshot succeeds because duress rides its own frame2 months ago1077ccaa33ebfix: Reserve frame for duress at chunk cap (v4.6.4 GPT-5.6-Sol HIGH re-review fix)2 months ago8411b9a63ec4fix: Move duress off the entries frame (v4.6.4 frame-ceiling root cause)2 months agod1f501a07784test: VaultAdopt T-A33 >768 KiB frame-ceiling regression (v4.6.4)2 months ago158d02e85de5docs: Append review-fix session log to continuity2 months ago8d256514b827fix: Bump Firefox manifest to 4.6.3 and update rename docs reference (v4.6.3)2 months agoe8856c991369chore: Rename relay-adoption-source-bg.ts to relay-adoption-bg.ts (v4.6.2)2 months ago517c682f9968feat: Echo `snapshot_capable` on ADOPT_GRANT so receivers skip the inline wait when no snapshot is coming (v4.6.1)2 months ago7410c0da42c1feat: Carry the sealed duress slot across adoption snapshot (v4.6.0)2 months agobcae1b330341fix: resilient post-adoption sync fallback (v4.5.1)2 months agodbac78ce978bdocs: record android inline-snapshot counterpart in continuity2 months ago80ab8c3ad841feat: inline vault snapshot over pairing channel (v4.5.0)2 months ago7416b66af497docs: initial sync optimization proposal — inline vault snapshot over pairing channel2 months ago6adad954a8ffdocs: record v4.4.7 release completion in continuity2 months ago5aae9d62aac7feat: resolve audit findings, add Biome lint and debug flag (v4.4.7)2 months agod7f9a49fc425docs: v4.4.6 production security audit report and continuity2 months ago57cc863ec76cfix: Decentralize mesh graph convergence (v4.4.6)3 months ago06339055866cfix: Remove receiver pairing dead space (v4.4.5)3 months agoc2712fceaa45fix: Fit receiver pairing states in popup (v4.4.4)3 months agoda96a6703572feat: Polish receiver pairing flow (v4.4.3)3 months agoe6d0005c7660fix: Hold adoption until initial sync completes (v4.4.2)3 months ago50d1cbac965bfix: Enforce Pro entitlement during pairing (v4.4.1)3 months ago781b92629025feat: Add deterministic full-mesh sync (v4.4.0)3 months ago359f57c490f8docs: record receiver SAS and full-mesh protocol boundary3 months agoba610b7f083bfix: show receiver safety code without a second gate (v4.3.20)3 months ago651df90f45b2fix: complete direct receiver adoption and rollback (v4.3.19)3 months agob7d66c79afb4fix: receiver's createVaultFromRootKey was chrome.runtime.sendMessage'ing from the SW to itself, which MV3 returns undefined for. Switched to a direct import call. Vault creation now completes, ending the inverse-pairing 'create_vault_no_response' failure. (v4.3.18)3 months agof788ea070b4bdiag: log start/end of CREATE_VAULT_FROM_ROOT_KEY handler and the popup-side sendMessage call so we can see whether the SW is replying with undefined (no listener) vs a real error vs a thrown sync exception. (v4.3.17)3 months ago22bd36b49aa2UX: Enter submits the password form (was click-only); pair screen text shortened and QR shrunk to 160px so it fits in the 360px-wide extension window without clipping. (v4.3.17)3 months ago04f422dac66abump manifests to v4.3.16 (previous save forgot the version bump). Same defensive guard against undefined service worker response.3 months agof02a7ceeb1ffdefensive: guard createVaultFromRootKey against the service worker returning undefined (was crashing the receiver session with a minified 't is undefined' TypeError before the real error could surface). Bump to v4.3.16.3 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]