peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas251 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsTemporary until Vesper (internal tracker) is readydevice-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
c36e07074b6aversion label moved from Settings masthead to bottom-right corner as 7px mono text (v3.6.50)5 months agoc8f933fd178bbefore settings version-label relocation to bottom corner5 months ago7b2b774fc03cbefore settings text-size geometry followup5 months ago4021a2198f72fix: Fill same-form 2FA with login credentials (v3.6.48)5 months agob68ab276fa94before same-form 2fa autofill5 months ago7e2247778b35feat: Add inline 2FA field picker (v3.6.47)5 months ago0851645934f7before inline 2fa field picker5 months ago61b35be7f039fix: Stabilize Settings scaling and local Health updates (v3.6.46)5 months agoaa433d6c6c49before fixing small text popup black bar5 months agoad2ecd73807afix: Use full Settings focused-card height (v3.6.45)5 months agoc89a6e60f3e1before settings expanded-card space fix5 months ago246c4b48a712remove: smart password change — feature never worked, cut entirely5 months ago004d1d32f877before removing smart password change5 months agob13822a0ea50fix: Restore Codex engine browser load (v3.6.43)5 months ago3991c2a5cd74fix: Split Codex screen load from generator bundle (v3.6.41)5 months agoc7effb2bc4b1unfix html width when data-text-size=small (was: widening html to backfill). With width:auto, Chrome sizes popup to rendered html (294px) so the popup itself shrinks — no extra background bleed (v3.6.40)5 months ago4b70c6ed3e02move Settings version label into stack mast next to card counter (no more floating-overlay overlap with Feedback CTAs); widen html for data-text-size=small so the popup background fills past the 0.92 zoom (kills the right-edge black bar) (v3.6.39)5 months ago42afffa1831brevert codex-screen-broken trace logs; clean state for next agent. Codex screen-never-loads bug remains unfixed by this session — RS striping + library swap (v3.6.38) verified at code level but blocked from manual repro.5 months ago7f3794c1d4ffupdate Codex tests for v3 envelope shape + stripe-aware large-vault path; all 2862 tests green; chrome/firefox/mobile builds clean (v3.6.38)5 months agoed89dc7be482split Codex encode into ≤ MAX_DATA_SHARDS_PER_STRIPE RS stripes to bypass GF(2^8) 256-shard cap; ChunkEnvelope v3 carries (s, S); generate/restore/types updated5 months ago69508a4a1463before Codex striping refactor — GF(2^8) shard-cap fix5 months ago484017c860f4wip: swap @digitaldefiance → @subspace RS library (MIT, identical API). 2 large-vault tests reveal GF(2^8) 256-shard cap — data+parity > 256 panics encode. Pre-existing limit, not introduced by swap.5 months ago894d7e43bf5ebefore erasure coding verification fix — replacing RS library5 months ago9302d9e9ffbaversion label font-size 7px (v3.6.37)5 months agofd8b764e9bd9version label deep in corner — bottom:6px left:10px (v3.6.36)5 months ago36949a124928version label nudge — bottom:16px, opacity 0.4 (v3.6.35)5 months ago184d4229ee4eversion label: just vX.X.X, bottom-left, z-index above cards (v3.6.34)5 months agoadecac78eb5astk-shell padding-bottom clears version zone; remove stk-deck overflow:hidden — was clipping hover glow to rectangle (v3.6.33)5 months ago34e8a5db6881version label absolute-positioned (no layout shift), left-aligned; settings overlay pure black background (v3.6.32)5 months ago7add513d4fearemove stk-shell solid background — blocked overlay gradient, caused visible bar below deck (v3.6.31)5 months ago8f7820d8391fremove stk-shell background — was blocking overlay gradient, creating visible bar below deck5 months ago4a072a117aa0fix sub-surface back navigation — health/import/export return to settings, add returns to caller (v3.6.30)5 months agoaf020d18934bhealth loading screen, version label, smart change URL fix, overlay header redesign (v3.6.29)5 months ago080e85c872cafix Codex AZTEC_ROUNDTRIP_FAILED — reduce CHUNK_SIZE 1024→800 (was over 1386-char Aztec ceiling); unify overlay header with settings redesign (v3.6.28)5 months ago3cf91c205c62persist derived key in chrome.storage.session; restore vault state on SW restart without user re-unlock, fix onConnect dead code (v3.6.27)5 months ago02cdb92bcff6restore active settings card on return from Codex/Chirp, catch expired SW session on duress setup (v3.6.26)5 months agoa669788a81ddunify vault history and advanced toggles, scroll-down unveils card, scroll-up minimizes with 300ms guard (v3.6.25)5 months ago8a204ae5858dsnappy hover (90ms), deck-level scroll gestures, vault history collapse, extend active card to 258px (v3.6.24)5 months agoe25c0982ba33v3.6.23 — version files updated5 months ago13276198e1d7remove borders from ghost icon buttons, bump to v3.6.235 months agof0411f5db797bump to v3.6.225 months agoc6f2249efdc2remove accent glow on Pro icon, add Duress Vault and Canary Entries to active features list5 months agoa2ae3ccee74dfix tab overlap, add hover lift/glow, scroll-to-expand replaces SECTIONS button5 months ago10b1e40ac44fbefore settings stack UX — overlap fix, hover, scroll-to-expand5 months agod703c0d78d3badd exit animation when leaving settings back to main entry view5 months ago1fd4f7b8c872fix Aztec decode: white-fill canvas before drawImage so transparent quiet-zone pixels composite to white instead of packing as black in ZXing ARGB5 months ago21044a32a4a4fix Codex VAULT_LOCKED redirect and Aztec roundtrip decode failures5 months ago73c8f4c7705dfix ghost word descender clip, card title spacing and line-height, back button two-level settings nav, peach:back dispatches to deck, lock-on-close reads storage on SW restart5 months agobe7d2b7a4585before settings nav, ghost word, card title, lock-on-close fixes5 months agoa80d09ce056dfeat: Reimagine Settings as Stack tray deck (v3.6.21)5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]