peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas416 files
crypto-core/
fixtures/
public/
codex/
scripts/
build-noise-core.mjsbuild-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.bun-ambient.d.tsAmbient declarations for the Bun APIs the release scripts use.check-cross-client-adoption.test.tscheck-cross-client-sync.mjscheck-extension-surface.mjscheck-noise-core.mjsPB-26-003: verify the committed Noise WASM still matches crypto-core source.check-sw-static-imports.mjsFails the build if any chunk reachable from the MV3 service worker still contains a runtime
import().ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjscross-client-gradle.init.gradlegenerate-kat.mjsgenerate-kat.mjs — recompute the pinned ciphertext for self-test.ts (PCH-01-020).manifest-parity.test.tsPB-26-610 — the source manifests are security-reviewed; the built manifests are what ships.package-source.test.tspackage-source.tsprocess-readiness.d.mtsTypes for the plain-JavaScript readiness helper (PB-26-904).process-readiness.mjsprocess-readiness.test.tsrelease-firefox.tsrelease-gate.test.tsrelease-gate.tsPB-26-210: Release browser-gate validation.release-lib.test.tsscripts/release-lib.test.ts PB-26-211: release tool hardening — security tests for the argv-based runner.release-lib.tsscripts/release-lib.ts Shared argv-based runner for release tooling (PB-26-211).release.test.tsrelease.tsroot-derivation-gate.test.tsCampaign task 2.4 — no shipping source may derive device key material from the vault root.run-release-browser-gate.tstest-firefox-passkeys.mjstest-firefox-sender-context.mjsweb-accessible-resources.test.tssrc/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten pathclipboard.test.tsclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.codex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.test.tscommands.tsKeyboard command handler — routing for summon-inline: 1.device-identity.test.tsdevice-identity.tsLocal-device identity helpers.entry.lock-port.test.tsThe lock-on-close onConnect listener accepts only our nonce'd "popup-<uuid>" port from the extension page and ignores anything else.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.license.tslicense.verification.test.tsT-009: License Ed25519 signature verificationlocked-sync-spool.test.tslocked-sync-spool.tsmesh-relay-listener.test.tsmesh-relay-listener.tsmessage-policy.test.tsmessage-policy.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.autolock-refresh.test.tsPB-26-107: passive page traffic must not refresh the auto-lock timer.messages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitizationmessages.create-vault-from-root-key.test.tsmessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERYmessages.entry-write-origin.test.tsPB-26-106: content-script entry mutations must be bound to the entry's own domain set.messages.passkey-offer-decline.test.tsPB-26-109: the passkey offer-decline handler is page-relay, so any page's content script may send it.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weightsml.tsnotes.test.tsoffscreen.htmloffscreen.tsOffscreen document script — audit fix HV-2c.pair-secrets.test.tspair-secrets.tspair-secrets.ts — PB-26-213: the reusable rendezvous secret must never sit in plaintext in chrome.storage.local.paired-devices.test.tspaired-devices.tsPaired-device registry — v3 sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.ed25519.test.tsT-015: Ed25519 passkey round-trippasskey.tspending-adoption-holder.test.tspending-adoption-holder.tspending-vouched-devices.test.tspending-vouched-devices.tsPending vouched devices — audit fix MV-7.recovery-pending.test.tsrecovery-pending.tsBackground-owned state set while the user has just created or rotated a vault identity and is confirming their recovery words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.relay-adoption-bg.test.tsrelay-adoption-bg.tsself-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.storage-access.test.tsstorage-access.tsPB-26-203: the session-key escrow is only as trustworthy as the boundary around chrome.storage.session.sync-alarm.test.tssync-alarm.tssync-alarm.ts — the 10-minute background sync tick.sync-alerts.test.tssync-alerts.tsPending sync security alerts.sync-coordinator.test.tssync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.sync-generation.test.tsThe §11 secure-reset contract: the durable generation record, the six states, create-on-miss refusal, archival by generation, crash recovery at every step, and the sync gate.sync-generation.tsThe durable Sync-generation record and its state machine (protocol §11).sync-runner.test.tssync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.sync-settings.test.tssync-settings.tssync-static.test.tsIV.7 — Static safety assertions for vault sync.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.sync-vault-adapter.test.tssync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.vault-createVaultFromRootKey.test.tsvault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.card-decline.test.tsPB-26-108: declined-card metadata must not be offline-enumerable.vault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed rankingvault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)vault.duress-adoption.test.tsvault.entry-id-namespace.test.tsvault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.vault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundaryvault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pendingvault.session-escrow.test.tsvault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.vault.test.tsvault.tombstone-ledger.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.vault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).content/
passkey-toast/
crypto/
argon2.test.tsargon2.tsargon2id.kat.test.tsT-019: Argon2id known-answer test (KAT) + parameter assertioncrypto.test.tsdecompression-bomb.test.tsMV-4: decompression-bomb output bounds on the zstd and pako legs.official-vectors.test.tspeachPayload.binaryreader-bounds.test.tsPCH-02-008 regression tests — BinaryReader must bound every read and fail with the decoder's existing PAYLOAD_TOO_SHORT code on truncated input.peachPayload.bomb.test.tsT-005: peachPayload declared-length decompression bomb (MV-4)peachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.bounds.test.tsPB-26-208: PeachScript normalization before limits.peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.rfc6238.test.tsT-004: TOTP RFC 6238 known-answer vectorstotp.test.tstotp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.multistripe.test.tsT-017: Codex multi-stripe round-tripcodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.clamp.test.tspdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression testpdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scan-limits.test.tsscan-limits.test.ts — PB-26-207 resource bounds on the Codex scan path.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
GeneratorDrawer.test.tsGeneratorDrawer.tsxNoteRow.test.tsx@vitest-environment jsdomNoteRow.tsxNoteToolbar.tsxPairingBirds.tsxPairing birds — the two illustrated characters used on the pairing screens.PairingProRequired.tsxPairingQrCode.tsxPeachMark.tsxRecoveryRuneBackground.tsxRuneBackground.tsxRuneCanvas.tsxSyncModeSelector.test.tsx@vitest-environment jsdomSyncModeSelector.tsxSyncModeSelector — the one place the relay choice is made.
views/
Add.tsxAdoptVaultView.test.tsx@vitest-environment jsdomAdoptVaultView.tsxCodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.test.tsx@vitest-environment jsdomCodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.totp-params.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.test.tsx@vitest-environment jsdomImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.InitialSyncView.test.tsx@vitest-environment jsdomInitialSyncView.tsxLock.test.tsx@vitest-environment jsdomLock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPairDevice.test.tsx@vitest-environment jsdomPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.Panic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxvault-search.test.tsvault-search.tsVault.tsxview-test-utils.tsxWhatsNew.tsxzxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).shared/
noise-core-wasm/
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).initial-sync.test.tsinitial-sync.tslegacy-identity-derivation.test-support.tsRoot→device key derivation, retained for tests only — campaign task 2.4.mesh-peer-role.tsml.tsnoise-blake2s-kat.test.tsnoise-core.tsnoise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for browser-to-browser sync.noise-kk.test.tsnoise-small-order-dh.test.tsPB-26-014 follow-up — the JS-side DH boundaries in noise-js.ts mirror the Rust core's small-order X25519 blocklist (libhydrogen's contributory-behaviour list).noise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.pairing-dial.test.tspairing-dial.tsThe WebSocket seam every relay-facing Peach flow shares.pairing-handshake.tsShared pairing primitives used by the live relay-adoption path.pairing-invitation.test.tspairing-invitation.tspasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.checksum.test.tsT-002: BIP39 checksum rejectionrecovery-words.cross-platform.test.tsrecovery-words.integrity.test.tsT-001: BIP39 word-list integrityrecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.release-notes.test.tsrelease-notes.tsCurated release history and post-update notice selection.rendezvous.test.tsrendezvous.tsshortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-entry-envelope.kat.test.tssync-identity.test.tssync-identity.tsSync identity — vault-scoped primitives.sync-kk-transport.test.tssync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).sync-outcome.test.tssync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.sync-padding.test.tssync-padding.tsE7: frame padding at the relay boundary.sync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.sync-types.tsVault sync — type definitions.sync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)types.tstypes.ts — cross-boundary types and the MessageType union.vault-adopt-snapshot.test.tsvault-adopt.test.tsvault-adopt.tstest/
tests/
fixtures/
history
6b55f8f65d6cremove chirp pairing: audio exchange, ggwave loader and assets, the popup orchestrator, the Capacitor pairing server, the chirp flow UI and its phase types, and the audioCapture permission (v4.0.28)3 months agoad1ba5b1a3e7rebuild vault adoption onto the pairing code: extract the shared dialler, make the receiver dial out instead of listen, add a code field to the pair phase (v4.0.27)3 months ago59b013ae70b4record the pairing-code session: android wire contract, the two mesh bugs found, and the three open items3 months ago6cd9c0819d09accept a device manifest from any directly-paired peer, not only an extension, and sync user-confirmed vouched hosts — mesh introduction reaches the browser through the phone (v4.0.26)3 months agoe94f79e21806route the popup pairing surface at the phone: accept a full pairing code in the code field, one Settings entry point, phone-oriented copy (v4.0.25)3 months agoa4a291aa27a1dial the address carried in a pairing code instead of probing for a host; hello presents the token as hex (v4.0.24)3 months ago4022468191e3add Crockford Base32 pairing-code codec: IPv4 + port + variable-length token, glyph-folding decode (v4.0.23)3 months ago8ada195aad56add platform-flagged CSS override for the mobile viewport: popup.css's fixed 320x520 browser-extension-popup box was rendering as a small floating card instead of filling the phone screen3 months ago604bf4eba4d9fix mobile entry.ts module-evaluation ordering: dynamic-import everything after chrome-shim so Rollup can't reorder a bundled dependency's top-level chrome.* access ahead of the shim install3 months ago8bf8725baf33finish LV-8 zxcvbn-ts migration: fix the Add/Export/Health.tsx imports missed by the original migration (still importing the unmaintained zxcvbn package) — unblocks npm run build:mobile and 4 previously-failing test files3 months agobdd7540953f8add the Ring 1 chrome shim, mobile entrypoint, and its own HTML shell (src/mobile/**) — in-process runtime.sendMessage dispatch, storage.session/local/sync, alarms/idle backed by native lifecycle signals3 months ago8bd20f421175capture DeepSec scan session: refreshed scanner INFO.md and config ignores, partial process run (46 analyzed, 24 findings, 54 pending retry after Codex usage-limit interruption)3 months ago7e7f66365ebechore: bump manifest.json and manifest.firefox.json to 4.0.204 months agoa10d4d3a57d0chore: bump peach-browser 4.0.19 → 4.0.20 for pairing discovery and inFlight fixes4 months ago5e4191499764fix: localhost-first host discovery and cancel inFlight on SAS popup close4 months agocfa12cd81206feat: wire adoption receiver and finalize build (v4.0.19)4 months ago5845cedc6119feat: route adoption grant requests after SAS consent (v4.0.18)4 months agobae5bc004f31feat: add adoption receiver onboarding flow (v4.0.17)4 months agoc902e41fa3dafeat: add adoption consent modal (v4.0.16)4 months agod3b26d4046c9feat: add ADOPT_REQUEST grant protocol (v4.0.15)4 months ago1d6e63e6bfd3feat: add atomic vault creation from adopted root key (v4.0.14)4 months ago8d7e39854a6bfeat: draft vault adoption implementation contract — createVaultFromRootKey, CREATE_VAULT_FROM_ROOT_KEY, ADOPT_REQUEST/GRANT/IDENTITY, consent UI, onboarding receiver flow, source routing tests4 months agocc2414dc0ac2docs: save pending docs relocation before vault adoption drafts4 months ago6c2063ea1afddocs: vault-adoption design spec — root key over SAS-gated pairing (ADOPT_REQUEST/GRANT/IDENTITY), createVaultFromRootKey, vault-less receiver, threat model, cross-platform contract; sign-off open decisions in §84 months ago1707dae72817docs: CONTINUITY — ungate sync + license transfer session (v4.0.13)4 months ago628eb2704cedfeat: sync no longer Pro-gated + Pro license transfers during pairing — anyone can attempt pairing; a Pro device advertises its signed license in PAIR_IDENTITY and the peer activates it (signature-verified) after SAS confirm, either direction; Settings shows Free/Pro + 'one device needs Pro' note; bump 4.0.12→4.0.134 months ago1cd7b3488f2bdocs: CONTINUITY — sync card visual polish + pairing-option clarity (v4.0.10–4.0.12)4 months ago447910153ee1fix: sync pair-a-device options read as buttons — bordered, raised, theme-neutral tappable rows with chevron + hover/active (not flat text, not brown); bump 4.0.10→4.0.114 months ago706c273c6a24fix: sync card styling — pairing options now match the green card as readable tappable rows (drop out-of-place brown peach-pair-method cards + dead CSS); remove the zero-knowledge info notice and the redundant Peach Sync blurb; bump 4.0.9→4.0.104 months ago138e162635bedocs: CONTINUITY — delete dead sync code + device access list session (v4.0.9)4 months agoe3e3441ec3berefactor: delete dead rest/device-list code from ChirpSync (pairing-only view); Settings sync hub shows paired devices with type + revoke (remove) + sync now; bump 4.0.8→4.0.94 months agoaa9010ad3c68docs: CONTINUITY — consolidate sync into settings session record (v4.0.8)4 months agoe74aecb551e9feat: make Settings → Sync the single hub — drop the separate sync-hub screen; pick Chirp/Code and begin, paired-device list + sync now + unpair live in Settings; ChirpSync is pairing-only and returns to Settings on done/cancel (v4.0.8)4 months ago6f1942819ccddocs: CONTINUITY — sync pairing flow simplify session record (v4.0.7)4 months agob97a6418fbf5feat: collapse desktop pairing to two direct options on the sync card — remove method-select screen, Chirp/Code buttons in Settings + rest view deep-link straight into each path; findHost verifies mDNS host before committing (falls back to subnet on stale hit); log real pairing error; bump 4.0.6→4.0.74 months ago9d02d22b70dfchore: add mdns permission to Firefox manifest + bump 4.0.5→4.0.6 (package.json + both manifests), fresh rebuild chrome/firefox/mobile (v4.0.6)4 months ago45f16a5a1dcddocs: CONTINUITY.md — mdns desktop discovery session record (v4.0.5)4 months ago226935702a1bchore: bump peach-browser 4.0.4 → 4.0.5 (package.json + both manifests), rebuild chrome/firefox/mobile (v4.0.5)4 months ago6586a4e0431efeat: mDNS desktop discovery — discoverPeachSync via chrome.mdns parses _peach-sync._tcp TXT (ip/sync-port/pair-port), findHost tries mDNS first then subnet probe, mdns permission + actionable not-found copy + 8 tests4 months ago31792ef38885test+chore: assert method-card copy/icons in ChirpSync.desktop.test, bump 4.0.3→4.0.4 across manifests + package.json, CONTINUITY session record (v4.0.4)4 months ago2c9a1a9d8c4efix: pairing method selection — drop redundant body copy, replace twin orange buttons with warm icon cards (audio-wave + monitor), description per option (v4.0.4)4 months ago27a185c00aeffix: initial sync screen — headline 'Pair a device', local-network body copy, remove redundant chirp hint line + chevron icon, drop dead mic-notice CSS (v4.0.4)4 months ago4bd8406af985fix: sync hub settings — make Sync hub row tappable (remove open button), drop DEVICE FLOW label, rewrite Pair new device copy, warm note style for info box (v4.0.4)4 months agoa9460c1401e0docs: record desktop helper pairing integration in CONTINUITY (v4.0.3)4 months ago216aa7d01f58chore: version bump 4.0.2 → 4.0.3 + build — desktop helper pairing; trash integrated DESKTOP-PAIRING drafts (v4.0.3)4 months agod04f5b124fc2feat: sync coordinator includes desktop peers in sync session attempts (v4.0.2)4 months ago64236f0049f1feat: desktop helper pairing UI — mode in ChirpSync, method-select, birds always animate, code entry + SAS confirm (v4.0.2)4 months ago08e56309a014feat: desktop helper pairing handler — PEACH_HELLO, NK initiator, SAS, persist (v4.0.2)4 months agoef38059b9120feat: probeSubnetForPort — handshake-free subnet probe for desktop pairing (v4.0.2)4 months ago13c7d70db28adocs: annotate desktop DeviceType entry with peach-sync reference (v4.0.2)4 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]