peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas260 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsTemporary until Vesper (internal tracker) is readydevice-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
fef762d2460dbefore settings stack redesign5 months ago881f8f05a661before Settings Codex Continuum implementation — v3.6.17 baseline5 months ago6a9591d914b5Pro-gate Duress Vault (SETUP_DURESS server gate + setup-button UI redirect) and Canary Entries (UPDATE_ENTRY server gate on first canary enable + toggle UI redirect via onProGate callback). Add ADVANCED SECURITY section header + 2 cells to upgrade screen feature grid. HIBP/canary alert path noted as unconditional. Bump 3.6.175 months agoa622b79eacb5before duress + canary pro gate + website updates5 months ago8d9796d9bb74Pro upsell — add Peach Codex, rename 'Android & iOS' to 'Mobile apps · Android, iOS soon', tighten grid to 3x2 uniform layout, smaller headline + subtitle to fit popup viewport. Bump 3.6.165 months ago27f87865ee6aremove icon from mic notice; bump 3.6.155 months ago33e96fc92fe5add mic permission notice above pair button; bump 3.6.145 months ago8ce923a07412fix mic permission: request audioCapture optional perm before getUserMedia; redesign pro upgrade screen with editorial headline, numbered grid, inline key entry; bump 3.6.135 months ago20c36630394ebump version to 3.6.125 months ago789a749828b6fix chirp sync intro: readable headline (t0), shorter body copy, borderless accent-glow back button5 months ago16f5d5f99514bump version to 3.6.115 months ago6d1a5e56e758remove borders from header icon buttons, always-accent lock, glow hover; redesign pro upgrade hero with ambient glow, larger mark, visible tagline and pricing, borderless key-link5 months ago4ee346a17757before chirp mesh verification + website features copy5 months agof9b2008a842dbump to v3.6.105 months ago35bcc7ef584fmove pair-a-device button to bottom of chirp sync view5 months ago1f05c166db39revert light theme darkening — restore parchment surface values in popup.css5 months agoda5e731e2125license key masked by default with copy+toggle; small text zoom moved to html to fix window gap; light theme surfaces −10% L (bg #DAD8CD, card #E0D1BD, etc). Bump v3.6.85 months agoaa32eb185cb3replace empty globe with InitialsChip — onLoad rejects _favicon/ default by naturalWidth ≤16 (v3.6.7)5 months ago3832fe4333e7remove Chirp Sync footer disclaimer entirely (v3.6.6)5 months ago8d6020bdb17bhide Chirp Sync footer disclaimer once devices are paired — Show wraps footer so it only appears on the empty state (v3.6.5)5 months ago7e64c55333eelight theme warm parchment restoration — bg #EFEEE9, card #F0E9DF, input #EEE7DD, overlay #F5EDE2; text-secondary #3D2E18, placeholder #A8A099; border #DDD5CB; ghost-opacity 0.06; settings label #79766F; btn/lock-secondary to input-well surface; entry row hover to bg-row/bg-elevated. Bump v3.6.45 months ago052e5e8a3e2fbefore light theme parchment restoration — warm parchment brief, supersedes warm toasted linen5 months ago47e80fc88e6flight theme v3 warm toasted linen — bg-base #C9A882 hsl(29,28%,77%), elevated/overlay/sunken surface tokens, glass + lock-panel rgba, btn-secondary to #BC9B72, ghost-opacity 0.12→0.10. Bump v3.6.35 months ago2180e221486ebefore light theme v3 warm toasted linen re-implementation — brief v35 months agobebbb78af591purge remaining old peach paths — popup/index.html pre-hydration splash, Lock.tsx preloaded data: image, content/inject.ts form-field icon; update passkey badge background and RecoveryRune default tint to new peach-dark #E5805C. Bump v3.6.25 months agobce5679f7717fix lock-screen and new-vault peach silhouette being painted sage — the nth-child(2),(3) override was written for the old 4-path icon (body, cleft, leaf, stem); in the new mark path 1 is the leaf and path 2 is the vein, so target those instead. Bump v3.6.15 months ago6bcaeb6fa26cupdate icons/source.svg to 240 viewBox 4-path color mark from brand kit (peach light/dark, leaf, vein, blush highlight); update PeachMark component to match geometry; regenerate 16/32/48/128 PNGs via sharp; bump v3.6.05 months agoe0578a49465arevert popup.css android-only rules per peach-android architectural boundary; move.peach-list-top — native into android-overrides.css instead (sheet CSS already exists there)5 months ago2c12e1f8fe0fadd missing peach-vault-sheet CSS (peek/open/dragging states + drag handle) so the mobile bottom sheet actually peeks instead of overlaying the entry view full-screen5 months ago66c3fd7b35ecredesign sync pro gate with mobile bird + chirp waves, add isNative variant to vault list top bar (no back arrow, search icon, flat counter), bump v3.5.05 months ago86d0c56266c8before android experience wire-up: sync pro gate redesign + vault list initial state5 months ago93e4146ae02eadd initiator role to chirp orchestrator — runChirpPairing(deps, role); new openPairingServer dep; Capacitor adapter src/popup/chirp-pair-capacitor.ts bridges native SyncPlugin events to PairingTransport; ChirpSync auto-picks role via isNativePlatform; tests cover both role-mismatch and missing-dep paths (v3.4.0)5 months ago7eb90f1f2155vendor ggwave-wasm (154KB self-contained) into public/ggwave; register web_accessible_resources in both manifests; add audioCapture to chrome optional_permissions; harden subnet scan with 250ms per-IP timeout (4s worst-case vs minutes); 2860/2860 tests pass (v3.3.7)5 months ago1f8debd1b7dfbefore chirp full-functionality work — 4 parallel agents5 months ago465adf48582ddrop pair-a-device headline/button echo — empty-state headline is now "Bring your phone close" (v3.3.6)5 months agoc3836b4f9329make chirp pairing + settings views position:absolute overlays so they cover the always-mounted EntryView underneath (v3.3.5)5 months agof86ae046b7eccollapse global popup chrome on chirp-sync view; reword rest copy to drop "this Peach" personification (v3.3.4)5 months ago9226c83316f9fix chirp surface contrast — switch all text to --peach-t0/t1/t2 (--peach-text was 4% opacity token); reduce horizontal padding 18px→12px to use full 320px width (v3.3.3)5 months ago3bfb3fea5ecebefore chirp surface contrast + full-width fix5 months ago1cc4551868f2unify Sync rest view with new Chirp surface — bird stage at idle pose, Pair-a-device CTA, paired-devices section with remove confirm; drop old idle card and ChirpHeroBirds (v3.3.2)5 months ago1f2ff58944c2unify chirp surface — warm radial gradient + serif italic title/headline on idle Sync view, kill scrollbar gutter (v3.3.1)5 months ago5c295ba6e302redesign chirp pairing screen — Finch+Swallow stage, chirp arcs, flight wave, connection dot, status copy/action, sr-live region; bump v3.2.2 → v3.3.05 months ago60c812553e03before chirp pairing screen visual redesign — finch+swallow stage, flight wave, connection dot5 months agoed92f78beae5drop light theme saturation 28% → 11% — warm gray linen hsl(29, 11%, 79%) #CEC4BA; rederive all surface tokens; bump v3.2.1 → v3.2.25 months ago298135459a15light theme v3 — warm toasted linen palette (bg-base #C9A882, hsl 29 28% 77%); update all surface, text, border, btn tokens in vars.css and popup.css glass + override blocks; ghost-opacity 0.11; all three builds clean5 months agod012f0061108before light theme v3 implementation — warm toasted linen brief5 months ago671348e439e2light theme v2 surfaces — cool linen palette replaces warm tan; surface, border, btn tokens corrected per brief (v3.2.1)5 months ago8289a18f5761before light theme v2 surface revision5 months ago5513fd26129aChirpSyncView (v3 Settings → Sync) — bird hero, Pair-a-device CTA opens three-act ChirpPairingFlow, paired list with trustSource badge + stale-device warning, Pro gate; remove legacy v2.14 §3.9 + qrcode/jsqr deps; bump v3.1.0 → v3.2.0; typecheck + 3 builds clean5 months ago49bcc955c5cestrip v2.14 legacy — sync-coordinator/network/storage/wire/websocket-transport modules, SyncPairing+InfoSheet+ComingSoonBanner views, RestoreFromPhone tab in Lock, getVaultBlobForSync/applyIncomingVault/getSyncIdentity, all legacy message types and handlers (16 files trashed, 8 cleaned)5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]