peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas174 files
public/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.test.tsclipboard.tscommands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.test.tsmessages.tsmessages.ts — the only background message handler.ml-detector.tspairing-server-state.tsTracks the active 6-digit pairing-server session.passkey-crypto.test.tspasskey-crypto.tspasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tssync-coordinator.test.tsBlob sync session tests.sync-coordinator.tsBlob sync session coordinator.sync-identity-glue.tsLocal device id helpers shared between the lifecycle tick and the 6-digit pairing flow.sync-network.tssync-storage.tsvault-history.test.tsVault history tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
content-ml-detector.tsdetect.test.ts@vitest-environment jsdomdetect.tsfield-scoring.tsfill.test.ts@vitest-environment jsdomfill.tsindex.tsinject.tsinject.ts — autofill icon + selector overlay, injected into pages.palette.tsThis file has been retired.passkeys-firefox-relay.tspasskeys-firefox-relay.ts — extension-world relay for the MAIN-world passkey proxy (passkeys-firefox.ts).passkeys-firefox.tspasskeys-firefox.ts — MAIN-world WebAuthn interception for Firefox.policy.test.ts@vitest-environment jsdompolicy.tspolicy.ts — page-scraping helpers for password requirements.save.ts
crypto/
argon2.test.tsargon2.tscrypto.test.tsmayan_decode.tsMayan v2 decoder — anchor-finder + homography pipeline.mayan.test.tsmayan.tsMayan v2 — Peach's proprietary vault backup matrix code.peachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachQR.tspeachQR.ts — render a Peach binary payload as a printable QR code.peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.rs.test.tsrs.tsReed-Solomon codec — GF(2^8) with primitive polynomial 0x11D (x^8 + x^4 + x^3 + x^2 + 1, the standard CCSDS / NASA polynomial).totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
components/
views/
Add.tsxcontracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxSettings.tsxSyncPairing.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.capacitor-sync-transport.tsCapacitor (Android) sync transport.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsimport.test.tsimport.tsml.tsnoise-js.test.tsNoise NK auth proof cross-check.noise-js.tsNoise NK initiator for Android / Capacitor.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-types.tsTypes for Peach sync — full encrypted vault blob transfer.sync-wire.test.tssync-wire.tstypes.tstypes.ts — cross-boundary types and the
MessageType union.tests/
fixtures/
history
cce17ffb3143before legacy sync cruft removal — v2.14 modules, SyncPairing UI, legacy types, settings entry5 months agofb6d48603605bump v3.0.0 → v3.1.0 (package + chrome + firefox manifests); typecheck clean; all 3 builds pass; 3198 tests green5 months ago95c3a761406fdocument v2 brief deltas in Projects.md §3.9 — Ed25519 signing keypair, device manifest, probe cooldown, trustSource, vouched trust propagation5 months ago6c85957b5309subnet probe rate limit — per-pubkey 60s cooldown ledger, callable-from-outside via subnetProbeOnCooldown helper (5 transport tests, full suite 3198 green)5 months ago1d225ca17f0fwire SYNC_DEVICE_MANIFEST into ChirpSyncInitiator — optional adapter methods, exchanged between SYNC_TOMBSTONES and SYNC_DONE; placeholder for no-manifest case; coordinator test covers the opt-in path (13 tests)5 months ago458f39ca4f5adevice-manifest module — Ed25519 sign + verify, canonical JSON, freshness window, body tampering rejection (9 tests pass)5 months ago5460fcb73735add TrustSource, SignedDeviceManifest, signingPublicKeyHex to sync-types; Ed25519 deriveSyncSigningKeypair + sign/verify helpers in sync-identity5 months agoe0a8687171e0before chirp-sync v2 brief implementation — trust_source, signed device manifest, probe rate limit, stale-device UX5 months ago239555a47a8bbump to v3.0.0, document chirp-sync architecture in Projects.md §3.9 (v2.14 legacy preserved)5 months ago320caef58ef2wire chirp pairing message handlers, popup orchestrator, and ws_port on PairedDevice5 months agof60106bc57c6add ChirpPairingFlow component with three-act bird animation and full brief copy5 months agode900e337df3add manifest-diff sync coordinator with last-write-wins entries and tombstones5 months ago7fcb0fbb2af5add Noise XX initiator/responder and WebSocket sync transport with subnet probe5 months ago7e9dafc46041add v3 paired device registry in chrome.storage.sync with per-network IP cache in storage.local5 months ago98614d0cb031add audio chirp exchange driver and post-chirp Noise NK + long-term identity exchange5 months ago5cb96ec333ebadd deterministic sync identity derivation via HKDF + X25519 and BLAKE3 vault_id5 months ago998d37410c79add ggwave-wasm loader and ChirpCodec wrapper for ultrasonic-fastest pairing channel5 months ago304bf8470f7eadd chirp payload codec (64-byte PEAC frame, CRC32, X25519 ephemeral key) and v3 sync-types alongside v2.145 months ago142990628562before chirp sync implementation — ggwave ultrasonic pairing + ws sync per brief5 months ago6ac530a58f16verify token values against brief — all three match spec exactly5 months ago66073cb32a56warm dimmed coffee palette — surface, text, border, and interactive tokens (v2.54.0)5 months ago0c5309db4373before light theme revision — warm dimmed coffee palette5 months agob5fbe620c7d5remove display font picker — settings UI, CSS vars, type, signal, and vault field (v2.53.6)5 months agof5c13f17f956fix Small text size click misalignment — zoom body not html (v2.53.5)5 months ago143b4046bad8Aztec 3-retry fix + SyncComingSoonBanner on clean v2.53.3 baseline (v2.53.4)5 months ago5f40c4d44cbbbefore extended font options (8 typefaces, lazy Google Fonts, 2×4 picker)5 months agoacc7f2007babv2.53.3 — text size now resizes popup window (zoom moved from body to html)5 months agobc4b609d7d4bv2.53.2 — replace Roman numerals with 1-12 in recovery words grid5 months ago7f897a95b047v2.53.1 — trim words step layout + wrap RS WASM traps as CodexError5 months ago907aa805f36ebump to v2.53.0 — Codex reliability + PDF import + storage guidance5 months ago2fce2753fd80update Codex done and restore screens with storage guidance5 months ago21d1b52d8bd8Codex restore on Settings → DATA — free always, generate Pro-gated, onboarding link via Lock no-vault footer5 months agofbd343623e31add PDF import as restore path — importCodexPDF renders pages via pdf.js, scans with zxing grid5 months ago30054dc526c6scale Codex parity with vault size — 5% of data chunks, min 2, max 205 months ago334358e5905ebefore Codex reliability + PDF import refactor (parity scaling, restore entry points, storage guidance)5 months ago8206c7b40b05honest framing under codex page estimate — print double-sided, store separately from recovery words5 months ago67aa1f64b585revert CHUNK_SIZE 1300→1024 and CODE_SIZE 72→80 — reliability over page count; keep 6×6 grid + size-agnostic decoder5 months ago1856fba33466bump version 2.51.2 → 2.52.0 — Codex page reduction (CHUNK_SIZE 1024→1300, 6×6 grid, decoder size-agnostic for legacy restore)5 months ago19876ba11cdfset CHUNK_SIZE to 1300 — empirical max at eclevel=25 is 1386B, not 3200B as spec claimed5 months ago6a3d7192abc1derive shard size from scanned chunks in decodeWithErasure — restores old Codexes after CHUNK_SIZE bump5 months agof89c3b5b9a6ctighten PDF grid for 6×6 layout — CODE_SIZE 80→72, ROW_GAP 18→125 months ago43c51b300dbdbump CHUNK_SIZE 1024→3200 and CODES_PER_COL 4→6 in shared codex-types5 months ago876f27087081before Codex page reduction — CHUNK_SIZE 1024→3200, grid 6×4→6×6, erasure decoder size-agnostic5 months agoecf573de6e77remove overflow:hidden from codex rune body — restores scroll, button no longer cut off (v2.51.2)5 months agocda2da896574fix Codex words step blank screen — exclude rune canvas from > * z-index rule (v2.51.1)5 months ago935ad2d26e6dupdate session notes — v2.51.0 security review session record5 months ago0f96cbb1282dv2.51.0 — security review fixes complete — 3099 tests pass5 months agobbf572a5287bbump version to 2.51.0 — security review fixes: rune fuzz corpus, export strength gate, payload padding, hidden vault docs, KAT, Codex pre-warm5 months ago8ef109b58e21pre-warm Reed-Solomon WASM on Codex mount — surfaces load failures before word-confirmation flow5 months ago11fdad68e46badd KAT crypto self-test (PBKDF2 + AES-GCM) — runs on every unlock, catches broken WebCrypto environments5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]