peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas251 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsTemporary until Vesper (internal tracker) is readydevice-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
561b656d9465fix Mayan decoder cy offset — diamond horizontal midpoint is 1 module above code center; shift rune.cy by modulePx before passing to sampleModuleGrid6 months ago3c4de4d66983fix Mayan decoder (estimateModuleSize, findOthalan filter); fix passkey export in PeachScript/Mayan (entryTypeByte + ENTRY_TYPE_PASSKEY encoding for v2.11+ sub-object schema)6 months ago8fa1082f4aaefix Mayan decode via createImageBitmap; reattach toolbar popup after successful import in detached window6 months ago5cf135768dc8restore flow: detached window for file pickers, tab font 11px to fit 320px popup6 months ago101ea06cc166exclude Rust build artifacts from koh tracking6 months agod39515e785b5v2.20.0: restore screen tab redesign — PeachScript/Mayan/CSV/From Phone tabs, import animation, intro popup (v2.20.0)6 months ago976cd94cd777restore screen tab redesign — PeachScript/Mayan/CSV/From Phone tabs, import animation, intro popup, scrollbar suppression6 months agof710b8557c65restore screen scrollable — overflow-y: auto overrides vault-stage clip, hero bottom margin 4px6 months ago3cd2b2a6bcddbefore restore screen tab redesign6 months ago3da8942fcd88v2.19.0: MayanRestoreView wired end-to-end — base64→ImageData→decodeMayan, then backup/master password prompt → parsePayload → CREATE_VAULT (onboarding) → RESTORE_ENTRIES → onUnlock; 301/301 tests, all builds clean6 months agoa95ff8f614c9Export.tsx: replace renderPeachQR with encodeMayan; on-screen 3px/module, PNG 4px/module; size cap raised to MAYAN_MAX_BYTES (65535); printability warning when >A4-sized but no abort6 months ago4e4dbfb98154mayan tests: 10 round-trip + RS recovery tests pass (5/100/500/2000-byte payloads, multi-block, magic-byte rejection, deterministic 0.5% bit-flip recovery)6 months ago561a5913550amayan.ts: encoder + decoder per spec — Othalan rune (23×23 diamond+legs+orientation marker), 27×27 reserved center, 30% RS ECC, mode header 0x4D/v1/u16 length, adaptive binarize via integral image, Chien rotation 0/90/180/2706 months agod35c27a38d5ers.ts: Reed-Solomon GF(2^8) RS(255,178) block codec with Berlekamp-Massey + Forney; corrects up to 38 byte errors per block (30.2% ECC); 8 round-trip tests pass6 months agocaebcae786e5before mayan rollout — rs.ts + mayan.ts encoder/decoder + tests + export/restore wiring6 months ago47377cda36d9v2.18.1: rem migration for body text (8-17px → rem at 16px base, 254 declarations); MainActivity textZoom respects system fontScale; html font-size: 16px anchor; display sizes (>=18px) keep px6 months ago5cf1338dfd8bcamera Mayan scaffold: @capacitor/camera 8.2.0, MayanRestoreView replaces ComingSoon with Scan-with-camera (Android) + Choose-from-gallery; handleMayanDecode stub returns typed result for decoder swap-in6 months ago96bcd2845cabvault virtualization: windowing on >100 entries with top/bottom spacers, ROW_HEIGHT=56, 8-row buffer; scroll listener computes visible slice from filteredEntries6 months agod31f384002e3before deferred-items rollout — virtualization, camera scaffold, rem migration6 months ago9eaf26bd68d0v2.18.0: bump manifests; Projects.md §9 Android adaptive layout; verification matrix — tsc clean, mobile/chrome/firefox builds clean, cap sync clean, 283/283 tests pass6 months ago2528e0ecbe3cperf: verified WebView config + mobile build (no extension code bundled), splash launchShowDuration=0; lock view loading() covers Argon2id wait; vault virtualization deferred (no scale problem)6 months agoc7e727f5191ea11y/font/dark: aria-label on entry rows (TalkBack reads 'Title — username (login)'); text-size-adjust:none opt-out for fonts; color-scheme:dark light for native form widgets6 months ago97e4539146b7camera Mayan scan: deferred — decoder not yet shipped (Lock.tsx renders MayanComingSoonView). Camera dep+UI is a no-op until decoder lands6 months ago88b533dcbc51biometric: verified existing flow — BiometricPrompt + JS biometricUnlock signals SW; SW holds derived key, no Keystore-bound master key (app architecture choice)6 months ago6d5c1ac0357fstatus/nav bar: navigationBarColor set to #0C0A06 in MainActivity; safe-area + keyboard wiring already in place (verified)6 months ago5b013329da52autofill: ranked domain match (subdomain/package), locked-vault auth flow (consume + complete EXTRA_AUTHENTICATION_RESULT), onNewIntent re-fire, appStateChange re-checks save6 months ago51810d467d82back nav: lock view uses double-tap-to-exit instead of immediate exit (parity with entry view); back map verified across views6 months agofa5725c92ff1gestures: long-press context menu (copy username/password/totp/open/trash), swipe-right-to-copy on compact, vibrate haptic, copy-flash + bottom-sheet menu styles6 months agocf2c58c238b2fold: FoldPlugin.kt + WindowInfoTracker posture, src/shared/fold.ts wrapper, App.tsx wires data-posture + --peach-hinge-height; androidx.window 1.3.0 dep6 months ago1a849508944atwo-pane: layoutClass signal, isTwoPaneLayout helper; list overlay scopes to 320px sidebar on medium+, 360px on expanded; selecting entry keeps list mounted6 months agobd35b3ff296dadaptive layout: layout-compact/medium/expanded body class on resize, breakpoints for two-pane + landscape + narrow split6 months agoa145a1c8e968icon: Peach adaptive launcher — #1a1410 background, peach SVG vector foreground at 66% safe zone, both round and square6 months agoe7d5f92559d6manifest: add resizeableActivity, adjustResize, full permissions (VIBRATE/BIND_AUTOFILL/ACCESS_NETWORK/CAMERA); minSdk 24→266 months ago52a82d0950c3before android master spec rollout — 31 tasks across manifest, icon, adaptive layout, gestures, autofill, biometric, camera, perf6 months ago746dc5d164fcandroid show-mode pairing: kotlin TCP byte pump + UDP beacon, JS Noise NK responder + auth + PAIR_REQUEST handler, START_PAIRING_SERVER wired on Capacitor (v2.17.0)6 months agof71a6b2a2091before Android show-mode pairing: TCP server + Noise NK responder + UDP beacon6 months ago5e85d0636133inline popup smart password generator: parity with main UI compact mode — length slider, A-Z/a-z/0-9/!@# pills, regen+copy buttons, site-rules hint, in both signup and create-entry flows (v2.16.5)6 months ago49c3bcb72e5centry URL editor: + add current site button uses active tab URL, fills primary if empty else appends to additional URLs, dedupes (v2.16.4)6 months ago17914c240bb4inline popup: + button in domain header opens create form directly, so users aren't trapped in the search list (v2.16.3)6 months agoa8e7ba480464hide default scrollbar in identity-list inline popup container (v2.16.2)6 months ago28b4a0873932android: SyncPlugin.resolvePeerByCode UDP broadcast + CONNECT_WITH_CODE Capacitor handshake; gate show-mode, hide toggle6 months ago942edd5cbb67bump version to 2.16.0; gate Android pairing handlers with android_pairing_not_yet_supported6 months agoc9f3aba8b8cerebuild SyncPairing UI as show/enter modes; add code/input styles, recent-pair toast, and vault-lock teardown6 months ago76230f557838wire START_PAIRING_SERVER, CONNECT_WITH_CODE, GET_RECENT_PAIRING handlers and auto-accept on active token6 months agof2b923812414add UDP pairing beacon module and StartPairingServer/StopPairingServer/ResolvePeerByCode host messages6 months ago41f5c122d811before pairing-code refactor: replace mDNS pairing with 6-digit code + UDP beacon6 months ago9bc0ec07c892fix: vault history sub-label uses --peach-t2 for legible muted text (v2.15.1)6 months ago4ebb6a4c579eandroid SyncKeyPlugin (Keystore-backed X25519); register in MainActivity; security-crypto dep; clearAndroidSyncIdentity wired into Reset; bump 2.15.0; chrome+firefox builds clean; 281 tests passing6 months ago61a7b6644c68wire SyncPairingView into App.tsx (sync-pairing view); single-mode discovery; Advanced toggle CSS6 months ago240a2e43d433wire lastSyncAt into GET_SYNC_STATE; rewrite renderSync paired devices + trusted networks; vault advanced dropdown; rename formatHistoryTime to formatSnapshotTime6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]