peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas541 files
.deepsec/This directory holds the deepsec config for the parent repo.
data/
peach-browser/
files/
src/
background/
aes.ts.jsonchirp-identity.ts.jsonchirp-sync-coordinator.ts.jsonchirp-sync-vault-adapter.ts.jsonclipboard.ts.jsoncodex-handlers.ts.jsondesktop-pairing-bg.ts.jsondesktop-pairing-mdns.ts.jsondesktop-pairing-probe.ts.jsondesktop-pairing.ts.jsonhealth.ts.jsonlicense.ts.jsonmessages.ts.jsonoffscreen.ts.jsonpasskey-crypto.ts.jsonpasskey.ts.jsonrecovery-pending.ts.jsonself-test.ts.jsonsync-alerts.ts.jsonsync-trigger.ts.jsonvault.ts.json
content/
popup/
codex/
components/
views/
Add.tsx.jsonAdoptVaultView.tsx.jsonChirpSync.tsx.jsonCodexGenerateView.tsx.jsonCodexRestoreView.tsx.jsonEntry.tsx.jsonExport.tsx.jsonHealth.tsx.jsonImport.tsx.jsonLock.tsx.jsonNoteEditor.tsx.jsonNotesEditor.tsx.jsonNotesMode.tsx.jsonNotesTOC.tsx.jsonOnboarding.tsx.jsonPanic.tsx.jsonRecoveryWordDisplay.tsx.jsonSettings.tsx.jsonvault-search.ts.jsonVault.tsx.json
shared/
backup.ts.jsonchirp-adopt.ts.jsonchirp-handshake.ts.jsonchirp-pairing.ts.jsonchirp-payload.ts.jsonchirp-sync-transport.ts.jsoncodex-types.ts.jsonconfig.ts.jsondevice-manifest.ts.jsondomain.ts.jsongenerate.ts.jsonimport.ts.jsonlocal-network.ts.jsonnative.ts.jsonnoise-js.ts.jsonpasskey-utils.ts.jsonrecovery-word-list.ts.jsonrecovery-words.ts.jsonshortcuts.ts.jsonsync-identity.ts.jsonsync-types.ts.jsontypes.ts.json
runs/
crypto-core/
public/
codex/
fonts/
models/
scripts/
build-noise-core.mjsbuild-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.check-sw-static-imports.mjsFails the build if any chunk reachable from the MV3 service worker still contains a runtime
import().ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjsgenerate-kat.mjsgenerate-kat.mjs — recompute the pinned ciphertext for self-test.ts (PCH-01-020).package-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjssrc/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten pathclipboard.test.tsclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.codex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.device-identity.test.tsdevice-identity.tsLocal-device identity helpers for the sync architecture.entry.lock-port.test.tsLV-5: the lock-on-close onConnect listener accepts only our popup port (legacy bare "popup" or nonce'd "popup-<uuid>") and ignores anything else.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.license.tslicense.verification.test.tsT-009: License Ed25519 signature verificationmesh-relay-listener.test.tsmesh-relay-listener.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitizationmessages.create-vault-from-root-key.test.tsmessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERYmessages.test.tsmessages.tsmessages.ts — the only background message handler.ml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weightsml.tsnotes.test.tsoffscreen.htmloffscreen.tsOffscreen document script — audit fix HV-2c.paired-devices.test.tspaired-devices.tsPaired-device registry — v3 sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.ed25519.test.tsT-015: Ed25519 passkey round-trippasskey.tspending-vouched-devices.tsPending vouched devices — audit fix MV-7.recovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.relay-adoption-bg.test.tsrelay-adoption-bg.tsself-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-alarm.test.tssync-alarm.tssync-alarm.ts — the 10-minute background sync tick.sync-alerts.tsPending sync security alerts.sync-coordinator.test.tssync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.sync-runner.test.tssync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.sync-settings.test.tssync-settings.tssync-static.test.tsIV.7 — Static safety assertions for vault sync.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.sync-vault-adapter.test.tssync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.vault-createVaultFromRootKey.test.tsvault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed rankingvault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)vault.duress-adoption.test.tsvault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.vault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundaryvault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pendingvault.session-escrow.test.tsvault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.vault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).content/
passkey-toast/
crypto/
argon2.test.tsargon2.tsargon2id.kat.test.tsT-019: Argon2id known-answer test (KAT) + parameter assertioncrypto.test.tsdecompression-bomb.test.tsMV-4: decompression-bomb output bounds on the zstd and pako legs.official-vectors.test.tspeachPayload.binaryreader-bounds.test.tsPCH-02-008 regression tests — BinaryReader must bound every read and fail with the decoder's existing PAYLOAD_TOO_SHORT code on truncated input.peachPayload.bomb.test.tsT-005: peachPayload declared-length decompression bomb (MV-4)peachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.rfc6238.test.tsT-004: TOTP RFC 6238 known-answer vectorstotp.test.tstotp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
drafts/
PCH-02-FIXES/Drafts for all 10 findings of peach-code-review.md (Fable 5, 2026-06-12): 1 Low (PCH-02-001), 9 Informational.
clipboard.hash-match.test.tsPCH-02-010 regression tests (Option B only) — the auto-clear must compare the live clipboard hash (computed inside the offscreen document) against the parked SHA-256 before wiping, and must stay conservative when the comparison is unavailable.INTEGRATION-CONTRACT.mdSource of truth for integrating these drafts.PCH-02-001-vault-patch-sanitizers.patch.mdSeverity: Low (the only non-Informational finding in PCH-02) Target file:
src/background/vault.ts — sanitizeEntryPatch, lines 2375–2388 Report: peach-code-review.md, Finding PCH-02-001PCH-02-003-sas-trust-model-comment.patch.mdSeverity: Informational Target file: src/shared/chirp-handshake.ts:125-154 (the SECURITY block) Report: peach-code-review.md, Finding PCH-02-003PCH-02-004-exact-pin-deps.patch.mdSeverity: Informational Target files: package.json:40-46, bun.lock (regenerated), new WASM-PROVENANCE.md (see deviation note) Report: peach-code-review.md, Finding PCH-02-004PCH-02-005-legacy-pbkdf2-doc.patch.mdSeverity: Informational Target files: src/shared/backup.ts:146 (derivePeachExportKey), src/popup/views/Import.tsx (re-export notice) Report: peach-code-review.md, Finding PCH-02-005PCH-02-007-hibp-add-padding.patch.mdSeverity: Informational Target file: src/background/vault.ts:230 (checkBreach) Report: peach-code-review.md, Finding PCH-02-007PCH-02-008-binaryreader-bounds.patch.mdSeverity: Informational Target file: src/crypto/peachPayload.ts:940-969 (BinaryReader) Report: peach-code-review.md, Finding PCH-02-008PCH-02-010-clipboard-hash-match.patch.mdSeverity: Informational Target files: src/background/clipboard.ts:124-178 (clearClipboardNow), src/background/offscreen.ts, manifest.json (⚠ permission), comment in clipboard.ts:18-19 Report: peach-code-review.md, Finding PCH-02-010peachPayload.binaryreader-bounds.test.tsPCH-02-008 regression tests — BinaryReader must bound every read and fail with the decoder's existing PAYLOAD_TOO_SHORT code on truncated input.README.mdDrafts for all 10 findings of peach-code-review.md (Fable 5, 2026-06-12): 1 Low (PCH-02-001), 9 Informational.vault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.vault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).WASM-PROVENANCE.mdPeach's vault security rests on a small set of third-party packages that either ship WebAssembly blobs or sit directly on a security path.TEST-EXPANSION/
argon2id.kat.test.tsT-019: Argon2id known-answer test (KAT) + parameter assertionbackup.nfc-fallback.test.tsT-006: backup/import NFC raw-fallback decrypt (LV-1 / PCH-01-001 sibling)clipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten pathcodex.multistripe.test.tsT-017: Codex multi-stripe round-tripcontent.orchestration.test.tsT-011 through T-014: index.ts autofill orchestrationgenerate.empty-pool.test.tsT-025: generate.ts empty-pool guard, 128-char boundary, minLength > maxLengthimport.csv.formulainjection.test.tsT-021: CSV formula-injection on import (round-trip)INTEGRATION-CONTRACT.mdGenerated by session:
test coverage expansion Agent: claude-sonnet-4-6 Priority 1: T-001–T-010 (10 files), Priority 2: T-011–T-024 (11 files, T-011–T-014 in one file), Priority 3: T-025, T-030, T-037 (3 files)license.verification.test.tsT-009: License Ed25519 signature verificationmessages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitizationmessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERYml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weightspasskey.ed25519.test.tsT-015: Ed25519 passkey round-trippdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression testpeachPayload.bomb.test.tsT-005: peachPayload declared-length decompression bomb (MV-4)recovery-words.checksum.test.tsT-002: BIP39 checksum rejectionrecovery-words.integrity.test.tsT-001: BIP39 word-list integrityrecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)sync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)totp.rfc6238.test.tsT-004: TOTP RFC 6238 known-answer vectorsvault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed rankingvault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)vault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundaryvault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pendingmobile/
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.multistripe.test.tsT-017: Codex multi-stripe round-tripcodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.clamp.test.tspdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression testpdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
GeneratorDrawer.test.tsGeneratorDrawer.tsxLockRuneCanvas.tsxNoteRow.tsxNoteRunes.tsxNoteToolbar.tsxPairingBirds.tsxPairing birds — the two illustrated characters used on the pairing screens.PairingProRequired.tsxPairingQrCode.tsxPeachMark.tsxRecoveryRuneBackground.tsxRuneBackground.tsxRuneCanvas.tsxSyncModeSelector.test.tsx@vitest-environment jsdomSyncModeSelector.tsxSyncModeSelector — the one place the relay choice is made.
views/
Add.tsxAdoptVaultView.test.tsx@vitest-environment jsdomAdoptVaultView.tsxCodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.test.tsx@vitest-environment jsdomCodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.InitialSyncView.test.tsx@vitest-environment jsdomInitialSyncView.tsxLock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPairDevice.test.tsx@vitest-environment jsdomPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.Panic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxvault-search.test.tsvault-search.tsVault.tsxview-test-utils.tsxzxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).shared/
noise-core-wasm/
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).initial-sync.test.tsinitial-sync.tsmesh-peer-role.tsml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-blake2s-kat.test.tsnoise-core.tsnoise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-kk.test.tsnoise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.pairing-dial.tsThe dialling half of code pairing — shared by device pairing and vault adoption.pairing-handshake.test.tspairing-handshake.tsPairing handshake — Noise NK, the SAS, and the PAIR_IDENTITY frame.pairing-handshake.vault-id.test.tsChange 1 — vault_id in the PAIR_IDENTITY frame.pairing-invitation.test.tspairing-invitation.tspasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.checksum.test.tsT-002: BIP39 checksum rejectionrecovery-words.cross-platform.test.tsrecovery-words.integrity.test.tsT-001: BIP39 word-list integrityrecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.rendezvous.test.tsrendezvous.tsshortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-kk-transport.test.tssync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).sync-outcome.test.tssync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.sync-padding.test.tssync-padding.tsE7: frame padding at the relay boundary.sync-transport.test.tsSubnet-probe rate-limit tests.sync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.sync-types.tsVault sync — type definitions.sync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)types.tstypes.ts — cross-boundary types and the MessageType union.vault-adopt-snapshot.test.tsvault-adopt.test.tsvault-adopt.tstests/
fixtures/
history
b375e5f9a3earecovery word grid: 3-col → 2-col, min-width:0 on inputs, align-items:stretch on container, overflow-x:hidden5 months agod389c9f486fbfix forgot-password button: move recovery word entry match before hasVault match so it isn't shadowed5 months ago808ea0e592b9v2.32.0 — sync Firefox to Chrome version5 months ago8a823f06122bbroaden policy scraper: deeper DOM walk, label/div selectors, range/exact/min-only pattern forms, between/exactly text phrases5 months agod08bf4e3dd8aadd email field to entries; smart email/username label; +Add Email button; inline popup label fix5 months ago3640600d7a5cbefore email field and identity label changes5 months ago952ee75b2c6eshow fresh recovery words in Settings after password change5 months ago62761aef1e41fix BIP39 byte extraction and rotate root key on password change5 months ago9a7231c2c15eadd RecoveryWordDisplay view (one-time show after create) and pre-v2.12 migration path5 months ago85a75322611cadd recovery word entry UI and RecoveryRuneBackground5 months ago7efc46dd7ed8add recovery message handlers: VALIDATE_RECOVERY_WORDS, GET_RECOVERY_WORDS, RECOVER_WITH_WORDS5 months agobc7ce39e8e32add root key generation and recovery word wrapping in vault.ts5 months ago0f4c072b3db1add recovery word list and BIP39 encoding utilities5 months ago13906d7cd444before recovery word system save5 months ago46eb00d0cb2fbump manifest version to 2.30.2 (v2.30.1 was set before this session)5 months agoe5574b086b37add mobile build to ci.ts: build:mobile step after Firefox5 months agodb528eefa8a6add build:mobile script to package.json and create vite.config.mobile.ts for Android/iOS WebView bundle5 months ago4ec3741cd316add mobile message handlers to messages.ts: UNLOCK_WITH_KEY, GET_DERIVED_KEY, SCAN_PAIRING_QR, GET_LOCAL_IP, START_PAIRING_SERVER, TRIGGER_SYNC, GET_IDENTITY_SUGGESTIONS, POPULATE_INLINE_VAULT5 months ago817f71790ba4add vault.ts unlockWithKey (bypass Argon2id, use pre-derived key) and getDerivedKeyHex5 months ago567532481e30add mobile message types to MessageType union: UNLOCK_WITH_KEY, GET_DERIVED_KEY, SCAN_PAIRING_QR, GET_LOCAL_IP, GET_IDENTITY_SUGGESTIONS, POPULATE_INLINE_VAULT5 months ago231409f05d0abefore mobile message types and build config5 months ago50d4e457800fadd scripts/ci.ts — bun CI runner for typecheck, tests, chrome and firefox builds5 months agocc7196b4e72abump to v2.30.1, rebuild chrome and firefox5 months ago7767a36970cdpeach-browser clean — android, native sync host, and mobile-only dead code removed (v2.30.0)5 months ago1882919c9260remove all Android/Capacitor code, native sync host, and mobile-only dead code — browser extension only (v2.30.0)5 months agocba62ca5b081remove all Android/Capacitor code from popup views — App, Settings, Lock, SyncPairing, Onboarding5 months ago31184beaf504sync.ts and sync-lifecycle.ts removed — all importers fixed5 months agoeae5d6dc3a8bandroid/, native/, mobile scripts, and nativeMessaging permission removed5 months agob48bbea6d7efbefore cleanup — removing android and dead code5 months agoe0ec1767f8ccv2.29.3 clean baseline — before android implementation spec5 months ago71bd41b42835v2.29.3 audit complete — clean baseline confirmed5 months ago3cab4edce2f2before android master spec v2 full implementation6 months ago964f286213ccsilver platter + button, freeze popup width at init, nowrap action buttons (v2.29.3)6 months agoce749ba3a1e9clean extension baseline — pre-android restart6 months agoa91c0ac7e2f6Advanced toggle changes to − Advanced when expanded so it can be collapsed (v2.29.2)6 months ago77495c3a8024create-form grid overflow fixed — minmax(0, 1fr) on create-body and f-group tracks (v2.29.1)6 months ago084ea5aa4cd2inline popup: + button, always-show 2FA tray, cap width at 400px (v2.29.0)6 months agoa1ec5abcd016canary and passkey collapsed under + Advanced toggle in entry view (v2.28.0)6 months agob3757502a1b3pro upgrade UI — no sync hero icon, no color-mix drop-shadow on mark, narrow CTA buttons (v2.27.2)6 months agof0787b007df5breach status clears immediately on password change — optimistic clear before async HIBP check (v2.27.1)6 months ago9578774143bfpre-pluck baseline — android build cache and dist-mobile removed (regeneratable)6 months ago4f6535d225c9before native Peach autofill bottom sheet (PeachFillActivity)6 months ago0dea80b147f3fix settings crash (getManifest shim), replace peach emoji with PeachMark SVG in bloom canvas / ProCelebration / pairing banner (v2.27.0)6 months ago2ac38e92f4debefore settings fix + emoji-to-PeachMark replacements (v2.27.0)6 months ago136af2969805mobile gestures: swipe-up → vault list, swipe-L/R → navigate, wordmark → settings, gesture welcome card (v2.26.0)6 months ago7d83d974d418android: Kotlin plugin + lifecycle-ktx deps + peach launcher icons + PEACH_E2E_PASSKEYS mobile define6 months ago3673ad98ff49feat(mayan): v2 — corner anchors, homography decoder, RS(255,204), v1 dropped (v2.25.0)6 months ago47945ca845b0before mayan v2 rewrite — corner anchors, homography, RS(255,204)6 months agoa01510e32b46wip: pre-v2 — added 5KB and 20KB image-pipeline round-trip tests6 months ago36d1d3899c98fix Mayan image-decode failure: rune scan was eating data dark blobs adjacent to rune left vertex; switched findOthalan to sliding-window peek + multi-row averaging6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]