peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas251 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsTemporary until Vesper (internal tracker) is readydevice-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
1cd43b988080fix Codex PDF restore — decode canvas pixels directly via AztecCodeReader instead of BrowserAztecCodeReader (which silently fails on canvas elements); shrink detached window to 320x550 (v3.6.75)5 months agoe32372210412fix Codex PDF import — crop actual code regions instead of even canvas/6 slices; shrink detached window from 460x720 to 340x560 (v3.6.74)5 months ago0ba54a112996marketing card mirrors new layout — Email · Password · Edit under muted Copy eyebrow5 months ago4760eddc39a7before inline popup demo refresh — marketing card + peachpasswords.com hero5 months ago343f605f656adeep-link detached popup to codex-restore on ?codex=pdf — App.tsx routes past onboarding/lock straight into the restore flow (v3.6.73)5 months ago3d870e4370ebwrap copy actions under a single muted Copy eyebrow — Email/Username/Password buttons replace repetitive Copy email / Copy username / Copy password (inject.ts + marketing card, v3.6.72)5 months ago34cda6281b85measure inline popup card height after render — clip raw to content, no dead space5 months ago23dc656843effix detached popup URL — resolve via manifest action.default_popup instead of hardcoded popup.html (v3.6.71)5 months ago785cca9b28d7detach popup to chrome.windows for PDF import — survive file dialog focus loss, replace emoji icons with SVGs, lift guidance text contrast (v3.6.70)5 months ago0a34bc3ebed3render inline popup raw with real inject.ts tokens — drop shell, match dark theme, IBM Plex Mono labels, peach-accent button5 months ago9cc02dce0a40add inline popup marketing frame (08-inline)5 months ago59def6918680match peachpasswords.com fonts in marketing frames and remove green dot beside url5 months ago569fd42c72a9chore: Export Chrome store images as JPEGs (v3.6.69)5 months agoe18a621e72ffchore: Generate store assets at required sizes (v3.6.68)5 months agob27f0ab87fa3fix: Polish settings and Codex card geometry (v3.6.67)5 months agoe3acfa5fe9f3fix: Prevent folded Pro card subtitle clipping (v3.6.66)5 months ago1b294a2404c2produce peach-3.6.65-source.zip; verified content-identical rebuild from clean checkout5 months ago0e2eb416f250exclude LOG.md from AMO source archive — koh-internal history5 months ago31ee70ec4da4add .amoignore exclusion list and scripts/package-amo-source.sh5 months ago049f4916c04fadd README.amo.md for AMO reviewer reproduction of peach-3.6.65 build5 months ago5ef71af9c9f9before AMO source archive for peach-3.6.655 months agoe5e254e53ce7fix: Add Firefox data collection consent manifest (v3.6.65)5 months ago2af360f19338before firefox addon validation fix5 months ago5496f743042brevert: back to 8d0feb87be79, no changes5 months ago801e34e46347before highlight + benchmark fixes5 months ago8d0feb87be79fix: add padding-top to focused settings card so Peach Pro date is not clipped (v3.6.65)5 months agoc357f3ae06befix: add padding-top to focused settings card so Peach Pro date is not clipped5 months agob97c3e7ecc32before Peach Pro date visibility fix5 months ago4d2b19516c66fix: Update onboarding features and Codex restore (v3.6.64)5 months agod99308b4fb2afix: Polish and harden feedback flow (v3.6.63)5 months ago893de0a2c330feat: wire feedback form to Web3Forms (temporary, pre-Vesper) (v3.6.62)5 months agoa0f34330d095add src/shared/config.ts with WEB3FORMS_KEY constant5 months ago0c8adf9bff2bbefore Web3Forms feedback integration5 months agoefe6b2aee64evault history shows 3 latest inline + older dropdown; center version corner; fix Pro card date clipping; health loading screen for all users + title renamed to Advanced Vault Health; health view stays mounted during entry edit to prevent freeze on cancel (v3.6.61)5 months agocbceefec3283add padding-bottom to settings card scroll body — prevents last-item cutoff (v3.6.60)5 months agoa18bee50abe2remove emoji icons from codex done guidance items (v3.6.59)5 months ago35180c74591dbump to v3.6.585 months ago19624c4eed59replace canvas-based HybridBinarizer round-trip with in-memory GlobalHistogramBinarizer path — no DOM needed, works in both browser and node, eliminates AZTEC_CONTENT_MISMATCH root cause; add 200-payload unit test, 20-envelope integration test, and 100KB vault pipeline test (204 tests passing)5 months ago262165751c44before in-memory BitMatrix round-trip verification rewrite5 months agoe10e3e024e80replace bwip-js browser Aztec encoder with ZXing AztecEncoder — eliminates bwip-js/ZXing mode-encoding incompatibility (AZTEC_CONTENT_MISMATCH root cause), removes 918 kB bwip-js chunk from all browser builds (v3.6.57)5 months agoa86783166653fix email field dropped in sanitizeEntryDraft; identity suggestions include entry.email; aztec retry on content mismatch with diagnostic logging; live Aztec gallery on generating screen (v3.6.56)5 months ago3d77e1828fa3before email-save fix, aztec retry/diagnostics, codex generating UI5 months agoda63b6122caffix Codex generation — bwip-js not bundled due to @vite-ignore on dynamic import (v3.6.55)5 months ago805ccac4d45elight-mode shell border matched to dark-mode visual weight — near-invisible border and adapted shadows (v3.6.54)5 months ago35710e90bb08remove Small text-size option; force Settings html/body and ghost buttons dark regardless of global theme (v3.6.53)5 months agod87a4e8869d5before switching to chrome.windows.update for text-size resize5 months ago4132c0637d08popup reloads when switching to small text size, restores view and entry state after reload (v3.6.52)5 months ago9bc42bcae846before small text-size popup reload and state restore5 months ago03ae61226dd9small text-size zoom moved from html to body — html fills popup frame, no right-edge black strip (v3.6.51)5 months agob781c373cddbbefore small text-size black bar fix — move zoom from html to body5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]