peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas269 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
63fdf3a4458dstrip recovery words from Codex PDF and payload: remove includesRecoveryWords/CodexOptions/loadAndValidateRecoveryWords; add CodexProgress milestones to generateCodex; export pickConfirmationPositions5 months agocf09399ea0d6before codex addendum: recovery words flow + remove from PDF5 months ago9cb2afe4cd58session notes v2.42.0 outcome record5 months ago3c93c9cae9ccadd popup codex library: compression+RS erasure+Aztec roundtrip+PDF render+helpers+28 unit tests5 months ago53fdf206c18dscaffold codex types, RS WASM loader, public asset, deps; bump to v2.42.05 months ago096884e49b99before peach codex implementation5 months agof94f15759e0ebump to v2.41.45 months agof87a8eac0debkeepalive interval in renderLocked prevents SW wakeup penalty; popupWidth frozen at open time and re-asserted in updatePosition5 months ago2b147d91d1cfbefore inline popup keepalive and width-freeze fixes5 months agoa9e667c34c70pass detectPasswordPolicy to edit-entry smart generator; fixes missing policy and TS error5 months agoeea1f4fc17e4apply same site-max default and policy-clamped commitLenEdit to inline popup generator5 months agocf4fa3ba4eacimplement site policy constraint behavior: snap to max on fresh open, respect user adjustments, enforce min/max bounds, show constraint note5 months ago915845b2a0adreplace notes flying-title animation with smooth 200ms crossfade (v2.41.3)5 months agocac826341309add password generator toggle to inline popup edit form (v2.41.2)5 months ago906db68f57b8fix identity bucket routing: email-shaped usernames go to email suggestions (v2.41.1)5 months agoa7684e67e614identity helper in Entry.tsx username/email; fix Add.tsx blur race when switching fields (v2.41.0)5 months ago886121cd569cfix handleEditorFocusOut race when switching fields via addOtherIdentity (v2.40.9)5 months ago8420addde960suppress fadein animation on virtual-scroll rows so they appear instantly (v2.40.8)5 months ago801740fc6862remove content-visibility:auto from entry rows; raise BUFFER_ROWS to 20 (v2.40.7)5 months ago14987dd735e4remove NoteRunes from notes TOC and editor views (v2.40.6)5 months ago5b880b67cf3fwire ML_INIT and ML_PREDICT_BATCH: softmax classifier with 45 features, 5 classes (v2.40.5)5 months ago3b1c4dc56a2fre-check passkeyToastActive after each async await in handleFieldInteraction (v2.40.4)5 months agoef55560ab731block autofill while passkey toast active; apply accent color to toast (v2.40.3)5 months agob7a8f8c11f80dismiss autofill selector when passkey toast appears; remove key icon from toast (v2.40.2)5 months agoa8d7ee7ebc11passkey inline unlock: dismiss popup cleanly on vault unlock, skip autofill re-trigger (v2.40.1)5 months agobf4d8ef41f0dfix note not saving on back — await save() before onBack() to prevent premature unmount (v2.40.0)5 months ago062893bfec58passkey locked-vault auto-resume: wait for inline unlock instead of immediate reject (v2.39.9)5 months ago41a04198eca1before passkey locked-vault auto-resume flow5 months agobdc1046cf1f4fold passkey toast domain into headline — sign in to {site}? (v2.39.8)5 months agoc43cfea9877dfix note date grid placement, notesOnly toggle DOM node theft, toolbar onPointerDown (v2.39.7)5 months agodeb44debe166fix notes text wrapping and replace font-size transition with GPU-accelerated scale transform (v2.39.6)5 months ago17a9ede2f7f8fix toast popup-opening bug, shrink toast and PasskeyApproval to sleek size (v2.39.5)5 months ago7d181f9e9ab4before toast popup-bug fix and sizing pass5 months ago727da7022077bump to v2.39.45 months agoac448739efc1fix button clicks (on:click for shadow DOM) and align visual style with PasskeyApprovalView5 months agofb8a429cf180before passkey toast click + styling fixes5 months ago3c8d768311baadd passkey-toast content script to manifests, bump to v2.39.35 months agoae31fd7fa22fwire PASSKEY_AUTH_RESPONSE in messages.ts and toast-based get approval in passkey.ts5 months agob8e642f2990badd PasskeyToast component, styles, and shadow-DOM content script injection5 months ago2199d6be0193before passkey toast content script implementation5 months agodca6b6cdd9dcfade bottom of identity suggestion list in inject.ts inline popup (v2.39.2)5 months ago7feb1ea1db56bump 2.39.0 → 2.39.15 months agoe3f4b72e1bcfremove unused f-input from inline password group; sync slider+count when manually editing generated password in inject.ts and GeneratorDrawer5 months ago7f7e6a624761make generated password editable in-place; editing updates length counter and syncs to parent via onChange5 months ago1a33acf1a948hide password input when generator open; wire onChange for live sync; fade partial rows in identity suggestion list5 months agoa7f3a9978521fix Roman numeral permanence during search — use unfiltered index not filtered position5 months agoe8965044190fimprove expansion animation: flying title shared element with cubic-bezier(0,0,0,1), staggered row fade, collapse reverse5 months ago273bcb437c64add Notes Mode: SAVE_NOTE/DELETE_NOTE handlers, 6 new components/views, Notes button in vault header, crossfade overlay, expansion animation, autosave, swipe gestures (v2.39.0)5 months ago412457316a6bbefore Notes Mode implementation (v2.39.0)5 months ago324ba36bbfbecollapse 3-way routing into one surface: entries → autofill, no entries → signup mode; add 'I already have an account' escape hatch5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]