peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas275 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxvault-search.test.tsvault-search.tsVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
94fda772d1b5fix: Show full used-email picker in entry editor (v4.9.9)2 months agod550f48a729dfix: Restore Advanced control for passkey entries (v4.9.8)2 months ago03887ea0c034docs: define cross-platform contract sync policy2 months ago72efe45f61c2record 2fa-icon-spam fix and v4.9.7 gates in CONTINUITY.md2 months agoda74e3f68636collapse OTP-signaling split-digit boxes (no maxlength) to a single icon on box[0] instead of one per box2 months ago2c20a75301a0record six-fix bugfix session and v4.9.6 gates in CONTINUITY.md2 months agoa945b931a1c5bump version 4.9.5 to 4.9.6 across package.json and both manifests2 months agoc54ae32c7d48treat markup-only or zero-width contenteditable bodies as blank so a new note with nothing typed is never saved2 months ago2adb75e4873erun the main content script in all frames so Peach can fill login forms inside overlay/nested iframes2 months ago4488f3459d17detect single-digit OTP boxes by maxlength attribute so type=number 2FA boxes no longer each get a peach icon2 months ago8b8b37f3866fbrighten the Settings version corner to a gentle readable off-white instead of 10% alpha2 months ago5de797f88705suppress keyboard shortcuts on lock screen so typing a password cannot trigger new-entry and escape2 months ago3b0605503593render passkey entries with favicon or coloured initials instead of search-like key icon2 months ago0a86c74f2b4cfix lock action icon to render accent at rest instead of only on hover2 months agoe3cda06167abfeat: Rename paired devices locally (v4.9.4)2 months ago7c75b22961a9fix: Bound cumulative locked sync inbox (v4.9.3)2 months agof5eeec05e167feat: Add opaque locked background sync spool (v4.9.2)2 months agoe40a67cca1a3clear MV3 session key in lock() so a manual lock is not silently undone by the next SW restart2 months ago0e9a9f1e1ac5strip accentGlow machinery from RuneBackground, runes drift subtly on their own at base opacity2 months agoc2d065090bf8bump version to 4.9.1 and rebuild dist-chrome and dist-firefox2 months ago6d22b523c75frestore PeachMark above lock-screen eyebrow, add peach-lock-mark sizing, tighten eyebrow tracking/weight2 months ago501417f17d18slow down accent glow pulse (0.08-0.20 speed, 5-9s lifetime) and tighten rune row spacing (LINE_H 3.8→2.8)2 months agod72d7694ef20bump version to 4.9.0 in package.json and manifests2 months ago96373f8a028dfix indentation in Lock.tsx unlock view after layout changes2 months agob80860877bb4add canvas null check, mock RuneBackground in tests, all tests pass2 months ago9c22e753d364fix unused variables in glow update loop, lint and typecheck pass clean2 months agofe0416317f36center hero content on unlock view, remove hero art CSS, add text-align center to headline2 months ago6a73c5c3a0bbremove LockRuneCanvas and PeachMark hero art from lock screen, add RuneBackground with accentGlow2 months agofa601515c1a3add accentGlow prop to RuneBackground with sine-wave pulse glow slots2 months ago14c3e3aa08fadocs: record v4.8.9 Chrome and Firefox release2 months ago0da75a28a141docs: record combined credential browser verification2 months ago507ed37227b1fix: preserve TOTP during passkey consolidation (v4.8.9)2 months ago752c6edfb19fdocs: continuity — peach-android v2.14.12 mirrors the 64-char device-name cap2 months ago2a311f0d3062docs: continuity — record device-name cap hardening (v4.8.8)2 months ago847806bd2188feat: cap peer device names at 64 chars on every inbound seam (v4.8.8)2 months agoc387e8a41f26docs: continuity — record sync-alert overflow fix outcome (v4.8.7)2 months ago44a2d34bbdddfix: contain device-trust alert banners inside the 320px shell (v4.8.7)2 months ago65feee9c1752docs: Refresh README for Peach Sync and Android beta2 months agoddbf04f40670docs: continuity — record deletion + biome-repair outcomes and save bundling note (v4.8.6)2 months agoac28263c9b98test: revive two orphaned mesh-propagation receiver tests (v4.8.6)2 months ago41b6448ed641refactor: delete dead GET_ADOPTION_MATERIAL/COMPLETE_PAIRING handlers (v4.8.5)2 months agoae66726c3c86docs: continuity — record Codex Security F1/F2/F3 resolution and verification (v4.8.4)2 months agoe3f31d626cb8style: drop lint violations introduced by security fixes (v4.8.4)2 months ago7cf0e6d4b0c4fix: canary webhook filter rejects IPv4-mapped IPv6 private literals (v4.8.4)2 months ago2945bb7a571afix: bind Firefox passkey completion to the pending ceremony (v4.8.3)2 months agoc3c0d13e0280fix: gate key-material and pairing handlers to extension-page senders (v4.8.2)2 months ago1fc1bb91666btest: fix flaky tampered-ciphertext crypto test (v4.8.1)2 months ago351f84bfff6efeat: collapse sync alert toasts by type with counter + flip + dismiss-all; strip mesh diag (v4.8.0)2 months agode56d93b26cefix: treat wsPort/relayUrl null same as undefined in manifest validation + normalise (v4.7.9)2 months agoceeb0d1edf66fix: accept wsPort:0 as valid no-port sentinel in manifest validation (v4.7.8)2 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]