peach-browser

@june

A free, open source, local-first password manager for Chrome, Firefox, and Android.

TypeScript

v5.3.12 · 1,780 saves · 70,179 lines · updated 3 weeks ago

381 files
8de15d6aae62
back to HEAD
crypto-core/62.5 KB · 3 months ago
icons/6.4 KB · 5 months ago
public/468.8 KB · 3 months ago
scripts/63.9 KB · 2 months ago
src/3.7 MB · 2 months ago
background/1.0 MB · 2 months ago
aes.test.ts2.2 KB · 6 months agoaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.4.5 KB · 3 months agoalarms.test.ts5.3 KB · 5 months agoalarms.ts2.3 KB · 5 months agoclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten path7.1 KB · 4 months agoclipboard.test.ts10.1 KB · 4 months agoclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.8.5 KB · 4 months agocodex-handlers.test.tsTests for src/background/codex-handlers.ts.7.7 KB · 2 months agocodex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.9.7 KB · 2 months agocommands.tsKeyboard command handler — routing for summon-inline: 1.2.5 KB · 6 months agodevice-identity.test.ts2.7 KB · 3 months agodevice-identity.tsLocal-device identity helpers for the sync architecture.6.5 KB · 2 months agoentry.lock-port.test.tsLV-5: the lock-on-close onConnect listener accepts only our popup port (legacy bare "popup" or nonce'd "popup-<uuid>") and ignores anything else.4.3 KB · 4 months agoentry.ts5.0 KB · 2 months agohealth.test.ts4.2 KB · 5 months agohealth.tshealth.ts — Pro advanced vault health analysis.5.1 KB · 5 months agolicense.ts4.9 KB · 5 months agolicense.verification.test.tsT-009: License Ed25519 signature verification10.1 KB · 4 months agolocked-sync-spool.test.ts5.6 KB · 2 months agolocked-sync-spool.ts7.4 KB · 2 months agomesh-relay-listener.test.ts2.0 KB · 3 months agomesh-relay-listener.ts7.1 KB · 2 months agomessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.42.4 KB · 2 months agomessages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitization7.1 KB · 4 months agomessages.create-vault-from-root-key.test.ts3.0 KB · 4 months agomessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERY9.0 KB · 4 months agomessages.test.ts47.3 KB · 2 months agomessages.tsmessages.ts — the only background message handler.71.8 KB · 2 months agoml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weights7.7 KB · 4 months agoml.ts6.0 KB · 5 months agonotes.test.ts9.3 KB · 5 months agooffscreen.html310 B · 4 months agooffscreen.tsOffscreen document script — audit fix HV-2c.1.8 KB · 4 months agopaired-devices.test.ts13.5 KB · 2 months agopaired-devices.tsPaired-device registry — v3 sync.17.2 KB · 2 months agopasskey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.30.3 KB · 5 months agopasskey-crypto.test.ts6.0 KB · 6 months agopasskey-crypto.ts11.1 KB · 5 months agopasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-0092.8 KB · 5 months agopasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.17.2 KB · 5 months agopasskey.ed25519.test.tsT-015: Ed25519 passkey round-trip9.4 KB · 4 months agopasskey.ts50.1 KB · 2 months agopending-vouched-devices.test.ts1.9 KB · 2 months agopending-vouched-devices.tsPending vouched devices — audit fix MV-7.3.3 KB · 2 months agorecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.1.2 KB · 5 months agorecovery-words.test.ts20.6 KB · 3 months agorecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.19.5 KB · 4 months agorelay-adoption-bg.test.ts35.6 KB · 2 months agorelay-adoption-bg.ts22.8 KB · 3 months agoself-test.test.ts1.2 KB · 4 months agoself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.3.8 KB · 4 months agosync-alarm.test.ts4.0 KB · 3 months agosync-alarm.tssync-alarm.ts — the 10-minute background sync tick.3.8 KB · 3 months agosync-alerts.test.ts1.9 KB · 2 months agosync-alerts.tsPending sync security alerts.2.7 KB · 2 months agosync-coordinator.test.ts19.1 KB · 3 months agosync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.21.5 KB · 2 months agosync-runner.test.ts12.3 KB · 3 months agosync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via setSyncRunner.7.5 KB · 2 months agosync-settings.test.ts3.6 KB · 3 months agosync-settings.ts4.9 KB · 3 months agosync-static.test.tsIV.7 — Static safety assertions for vault sync.4.7 KB · 3 months agosync-trigger.test.ts14.1 KB · 3 months agosync-trigger.tssync-trigger.ts — central sync dispatcher.12.0 KB · 3 months agosync-vault-adapter.test.ts44.9 KB · 3 months agosync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.23.4 KB · 2 months agovault-createVaultFromRootKey.test.ts8.2 KB · 3 months agovault-history.test.tsVault history tests.10.1 KB · 4 months agovault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.34.2 KB · 4 months agovault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed ranking8.9 KB · 2 months agovault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)9.6 KB · 4 months agovault.duress-adoption.test.ts4.3 KB · 3 months agovault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.2.3 KB · 4 months agovault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundary9.7 KB · 4 months agovault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pending8.9 KB · 3 months agovault.session-escrow.test.ts6.4 KB · 2 months agovault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.5.9 KB · 3 months agovault.test.ts54.2 KB · 2 months agovault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.118.9 KB · 2 months agovault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).7.1 KB · 4 months ago
content/475.3 KB · 2 months ago
passkey-toast/19.6 KB · 5 months ago
_setup.tsShared test harness for the AUTOFILL-TESTS draft suite.9.2 KB · 4 months ago_smoke.test.ts@vitest-environment jsdom995 B · 4 months agocontent-ml-detector.ts6.1 KB · 6 months agocontent.adversarial.test.ts@vitest-environment jsdom21.5 KB · 4 months agocontent.detect.test.ts@vitest-environment jsdom20.9 KB · 2 months agocontent.dismissal.test.ts@vitest-environment jsdom12.2 KB · 4 months agocontent.field-icon.test.ts@vitest-environment jsdom5.7 KB · 4 months agocontent.field-interaction.test.ts@vitest-environment jsdom9.1 KB · 4 months agocontent.fill.test.ts@vitest-environment jsdom8.8 KB · 4 months agocontent.initial-scan.test.ts@vitest-environment jsdom5.8 KB · 4 months agocontent.interaction.test.ts@vitest-environment jsdom5.3 KB · 4 months agocontent.message-routing.test.ts@vitest-environment jsdom7.9 KB · 4 months agocontent.orchestration.test.tsT-011 through T-014: index.ts autofill orchestration8.5 KB · 2 months agocontent.policy.test.ts@vitest-environment jsdom5.3 KB · 4 months agocontent.save.test.ts@vitest-environment jsdom6.4 KB · 4 months agocontent.selector-ui.test.ts@vitest-environment jsdom5.3 KB · 4 months agocontent.totp-group-icon.test.ts@vitest-environment jsdom3.4 KB · 2 months agocontent.totp-toast.addendum.test.ts@vitest-environment jsdom2.3 KB · 4 months agodetect.test.ts@vitest-environment jsdom7.5 KB · 2 months agodetect.ts17.8 KB · 2 months agofill.test.ts@vitest-environment jsdom5.2 KB · 6 months agofill.ts4.7 KB · 4 months agoidentity-helper.test.ts2.0 KB · 4 months agoidentity-helper.ts1.7 KB · 4 months agoindex.ts49.6 KB · 2 months agoinject.keyguard.test.ts@vitest-environment jsdom2.5 KB · 4 months agoinject.tsinject.ts — autofill icon + selector overlay, injected into pages.180.3 KB · 2 months agointeraction.test.ts@vitest-environment jsdom2.0 KB · 5 months agointeraction.ts1.8 KB · 4 months agopasskeys-firefox-relay.test.ts@vitest-environment jsdom2.7 KB · 2 months agopasskeys-firefox-relay.tspasskeys-firefox-relay.ts — extension-world relay for the MAIN-world passkey proxy (passkeys-firefox.ts).3.0 KB · 2 months agopasskeys-firefox.tspasskeys-firefox.ts — MAIN-world WebAuthn interception for Firefox.12.2 KB · 6 months agopolicy.test.ts@vitest-environment jsdom3.6 KB · 6 months agopolicy.tspolicy.ts — page-scraping helpers for password requirements.5.8 KB · 2 months agosave.ts8.7 KB · 4 months ago
crypto/102.8 KB · 3 months ago
popup/1.3 MB · 2 months ago
codex/223.6 KB · 2 months ago
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.12.7 KB · 5 months agobrowser-bundle.test.ts674 B · 5 months agocodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.25.3 KB · 4 months agocodex.multistripe.test.tsT-017: Codex multi-stripe round-trip8.9 KB · 4 months agocodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.9.9 KB · 5 months agocodex.test.ts19.0 KB · 3 months agoconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.601 B · 5 months agoerasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.13.9 KB · 5 months agogenerate.test.ts17.1 KB · 5 months agogenerate.tsgenerate.ts — full Codex generation pipeline.16.9 KB · 4 months agohelpers.tshelpers.ts — shared utilities for Codex generation and restoration.8.2 KB · 4 months agonode-wasm.tsNode-only WASM byte loader for Vitest.1.1 KB · 5 months agopdf-import.clamp.test.ts2.5 KB · 4 months agopdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression test4.6 KB · 4 months agopdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.13.7 KB · 4 months agopdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.25.7 KB · 2 months agopdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.1.4 KB · 5 months agopdf.tspdf.ts — render the printable Codex PDF.8.1 KB · 5 months agoreed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.5.2 KB · 4 months agorestore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.11.0 KB · 5 months agorestore.tsrestore.ts — Peach Codex restoration library (popup-side).12.9 KB · 4 months agors-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.2.4 KB · 5 months agoscanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.1.8 KB · 5 months ago
components/85.7 KB · 2 months ago
styles/290.7 KB · 2 months ago
views/602.5 KB · 2 months ago
Add.tsx31.3 KB · 2 months agoAdoptVaultView.test.tsx@vitest-environment jsdom12.2 KB · 2 months agoAdoptVaultView.tsx12.4 KB · 3 months agoCodexGenerateView.test.tsx@vitest-environment jsdom2.1 KB · 5 months agoCodexGenerateView.tsxPeach Codex — generation view.21.2 KB · 2 months agoCodexRestoreView.test.tsx@vitest-environment jsdom6.6 KB · 4 months agoCodexRestoreView.tsxPeach Codex — restoration view.23.9 KB · 2 months agocontracts.test.tsx@vitest-environment jsdom59.1 KB · 2 months agoEntry.tsx81.5 KB · 2 months agoExport.csv.test.ts@vitest-environment jsdom1007 B · 2 months agoExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (if (signal()) return <X/>).20.3 KB · 2 months agoHealth.test.tsx@vitest-environment jsdom2.5 KB · 5 months agoHealth.tsx21.2 KB · 4 months agoImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.34.6 KB · 4 months agoInitialSyncView.test.tsx@vitest-environment jsdom1.3 KB · 3 months agoInitialSyncView.tsx1.7 KB · 3 months agoLock.tsx49.0 KB · 2 months agoNoteEditor.toHtml.test.ts@vitest-environment jsdom3.6 KB · 5 months agoNoteEditor.tsx7.6 KB · 2 months agoNotesEditor.tsx7.5 KB · 2 months agoNotesMode.tsx2.9 KB · 5 months agoNotesTOC.tsx4.6 KB · 2 months agoOnboarding.tsx7.4 KB · 2 months agoPairDevice.test.tsx@vitest-environment jsdom7.7 KB · 3 months agoPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.11.0 KB · 2 months agoPanic.tsx6.0 KB · 6 months agoPasskeyApproval.tsx2.1 KB · 6 months agoProCelebration.tsx646 B · 6 months agoRecoveryWordDisplay.tsx8.2 KB · 2 months agoRecoveryWordEntry.tsx11.4 KB · 4 months agoSettings.tsx97.7 KB · 2 months agoTrashView.tsx5.7 KB · 6 months agovault-search.test.ts3.3 KB · 4 months agovault-search.ts4.8 KB · 4 months agoVault.tsx26.1 KB · 2 months agoview-test-utils.tsx1.1 KB · 4 months agozxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).1.2 KB · 4 months ago
App.tsx78.9 KB · 2 months agocopy.tsPopup-side copy helper.1.1 KB · 6 months agofirefox-passkey.tsfirefox-passkey.ts — popup-context WebAuthn caller for the Firefox path.4.0 KB · 6 months agogenerator-policy.ts2.2 KB · 5 months agoimport.csv.formulainjection.test.tsT-021: CSV formula-injection on import (round-trip)6.1 KB · 4 months agoindex.html1.1 KB · 5 months agoindex.tsx155 B · 2 months agopairing-qr-scanner.ts620 B · 3 months ago
shared/895.9 KB · 2 months ago
noise-core-wasm/455.0 KB · 3 months ago
backup.nfc-fallback.test.tsT-006: backup/import NFC raw-fallback decrypt (LV-1 / PCH-01-001 sibling)6.2 KB · 4 months agobackup.test.ts3.1 KB · 4 months agobackup.ts9.2 KB · 4 months agobridge.ts1.6 KB · 5 months agobrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.6.5 KB · 5 months agobrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.1.3 KB · 6 months agocodex-types.tscodex-types.ts — shared shapes for the Peach Codex.10.8 KB · 4 months agoconfig.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).827 B · 3 months agoconstant-time.test.ts1.9 KB · 3 months agoconstant-time.tsCompare fixed-format cryptographic values without data-dependent early exit.823 B · 3 months agodebug.tsCompile-time debug flag.387 B · 3 months agodevice-manifest.test.ts9.8 KB · 2 months agodevice-manifest.tsDevice manifest — v2 brief §4.3.10.0 KB · 2 months agodomain.homograph.test.tsLV-2: homograph detector tests.906 B · 4 months agodomain.ts1.5 KB · 2 months agofavicon.test.ts1.2 KB · 6 months agofavicon.tsResolves a favicon URL for a given domain.3.4 KB · 5 months agogenerate.empty-pool.test.tsT-025: generate.ts empty-pool guard, 128-char boundary, minLength > maxLength5.6 KB · 4 months agogenerate.test.ts2.6 KB · 5 months agogenerate.ts2.6 KB · 5 months agoimport-limits.tsImport-path resource bounds — audit fixes MV-4 (decompression bomb) and MV-5 (unbounded file/string allocation).1.4 KB · 2 months agoimport.test.ts15.1 KB · 4 months agoimport.tsany is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).17.2 KB · 4 months agoinitial-sync.test.ts911 B · 3 months agoinitial-sync.ts667 B · 3 months agomesh-peer-role.ts1.7 KB · 3 months agoml.ts1.4 KB · 6 months agonoise-blake2s-kat.test.ts3.6 KB · 3 months agonoise-core.ts4.8 KB · 3 months agonoise-js.test.tsNoise NK auth proof regression test.9.7 KB · 4 months agonoise-js.tsNoise NK initiator for browser-to-browser sync.11.5 KB · 2 months agonoise-kk.test.ts5.2 KB · 3 months agonoise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.2.4 KB · 3 months agopairing-dial.tsThe dialling half of code pairing — shared by device pairing and vault adoption.9.5 KB · 3 months agopairing-handshake.test.ts7.7 KB · 3 months agopairing-handshake.tsPairing handshake — Noise NK, the SAS, and the PAIR_IDENTITY frame.14.1 KB · 3 months agopairing-handshake.vault-id.test.tsChange 1 — vault_id in the PAIR_IDENTITY frame.4.3 KB · 3 months agopairing-invitation.test.ts3.7 KB · 3 months agopairing-invitation.ts3.3 KB · 3 months agopasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.2.1 KB · 6 months agopasskey-utils.test.ts1.2 KB · 5 months agopasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.2.2 KB · 5 months agorecovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.20.1 KB · 5 months agorecovery-words.checksum.test.tsT-002: BIP39 checksum rejection4.6 KB · 4 months agorecovery-words.cross-platform.test.ts2.4 KB · 3 months agorecovery-words.integrity.test.tsT-001: BIP39 word-list integrity2.6 KB · 4 months agorecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)6.7 KB · 4 months agorecovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.6.3 KB · 4 months agorendezvous.test.ts3.1 KB · 3 months agorendezvous.ts5.9 KB · 3 months agoshortcuts.test.ts@vitest-environment jsdom4.0 KB · 6 months agoshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.6.7 KB · 6 months agostorage.ts537 B · 5 months agosync-identity.test.ts3.0 KB · 3 months agosync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.7.4 KB · 3 months agosync-kk-transport.test.ts14.8 KB · 2 months agosync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).4.0 KB · 2 months agosync-outcome.test.ts6.0 KB · 3 months agosync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.6.1 KB · 3 months agosync-padding.test.ts4.9 KB · 3 months agosync-padding.tsE7: frame padding at the relay boundary.4.6 KB · 3 months agosync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.20.0 KB · 2 months agosync-types.tsVault sync — type definitions.9.2 KB · 2 months agosync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)10.9 KB · 2 months agotypes.tstypes.ts — cross-boundary types and the MessageType union.18.6 KB · 2 months agovault-adopt-snapshot.test.ts8.2 KB · 3 months agovault-adopt.test.ts33.8 KB · 3 months agovault-adopt.ts22.5 KB · 3 months ago
tests/424.5 KB · 2 months ago
.amoignore1.1 KB · 2 months ago.gitignore270 B · 2 months ago.nvmrc8 B · 5 months agobiome.json1.0 KB · 2 months agobun.lock134.2 KB · 2 months agokepr.build102 B · 3 months agoLICENSE34.3 KB · 4 months agomanifest.firefox.json2.2 KB · 2 months agomanifest.json1.6 KB · 2 months agopackage.json2.9 KB · 2 months agoplaywright.config.ts808 B · 6 months agoREADME.mdA free, open source, local-first password manager for Chrome, Firefox, and Android.2.0 KB · 2 months agotsconfig.background.json490 B · 5 months agotsconfig.json521 B · 2 months agotsconfig.tests.json122 B · 6 months agovite.config.ts3.1 KB · 3 months agovitest.config.ts559 B · 2 months ago
9dbaabc827acconsolidate native helpers in messages.ts: import isNativePlatform/nativePlugin from shared/native; resolve Capacitor SyncPlugin at call time via syncBridge(); fix buildIdentitySuggestions to surface real entry email per username5 months agod1b56b8c77deremove dead handlers START_PAIRING/START_PEER_DISCOVERY/STOP_PEER_DISCOVERY/INITIATE_PAIR_WITH_PEER/CONNECT_WITH_CODE; drop desktopTriggerSync stub; strip MessageType; simplify SyncPairing.tsx — show-code-only flow5 months ago8d53fdb48f58remove dead sync code: sync-coordinator.{ts,test.ts}, sync-wire.{ts,test.ts}, and unused SyncMessage/PairingStep/NoiseHandshakeResult/SyncState types5 months ago2b0132a81b0bremove 5 orphaned files: content/palette.ts, content/field-scoring.ts, popup/components/{Pip,Ring,TOTP}.tsx5 months ago0b15ab269010before phase 2 — pre-release audit cleanup5 months ago1270aea8b3c2add auditmay82026.md — phase 1 read-only audit report (no source changes)5 months ago336c0344b937lower flick velocity threshold 0.4→0.2 px/ms for more responsive bottom-sheet swipe-up5 months ago7c377a164f3ffix verify-words button text vertical alignment: drop padding-top:16px override that broke .peach-btn's symmetric padding; bump 2.35.3 → 2.35.45 months agoc240545ec276fix recovery rune mask: drop bottom band (was 430-520px) so runes never overlap verify-words button; bump 2.35.2 → 2.35.35 months agoe4ad9ea87ac1bump version 2.35.1 → 2.35.2 across manifest.json, manifest.firefox.json, package.json5 months ago40f29777e553fix undefined CSS vars: replace dead --ac-r/g/b with color-mix(--peach-accent); add aliases for --peach-t4, --peach-text-dim, --peach-bg-card, --peach-border, --peach-mono5 months ago60d971d11986fix stale Export menu test (two formats not three) and guard document.fonts in RecoveryRuneBackground for jsdom — 261/261 passing5 months ago25d2a3259624drop 7 unused npm deps: @stablelib/random, eff-diceware-passphrase, webextension-polyfill, onnxruntime-web, @noble/{ciphers,curves,hashes}5 months ago067a4c1040d9remove unused message handlers (CHECK_BREACH, GET_PASSKEYS, DELETE_PASSKEY, CANCEL_PAIRING) and vault.hasDecoyVault export5 months ago9afd3558b9e8rewrite stale Rust host comment references in noise-js, noise-js.test, sync-types5 months ago923817147387remove dead INCOMING_PAIRING_REQUEST listener branch in App.tsx; remove debug console.log on settings tap5 months ago46415895f157merge duplicate TRIGGER_SYNC + START_PAIRING_SERVER cases; remove dead startSubnetScan stub and activeDesktopPairing vars5 months ago0cee4e9ef31cdelete orphaned sync files: src/sync/, capacitor-sync-transport, sync-identity-glue, ml-detector, DiscoveredPeer type5 months ago18b8a770ad1ebefore peach-browser pre-release audit5 months agoad87fee15001fix bottom-sheet positioning + Settings unreachable: render mobile vault sheet via Solid Portal at document root (was inside .peach-shell whose CSS animations apply transform, trapping position:fixed); add chrome.runtime.getManifest() stub to chrome shim (Settings.tsx calls it at module init, throwing TypeError that left Suspense fallback hung forever); sheet now hidden off-screen at rest5 months ago264e3339f4cdimplement progressive bottom-sheet drag for vault list on native: always-mounted .peach-vault-sheet wrapper with rest position translateY(calc(100% - 60px)) (peek bar visible) and is-open class for translateY(0). Touch handlers in App.tsx track 1:1 finger position via sheetTranslate signal, disable transition during drag, snap to open/closed at touchend by velocity (>0.4 px/ms) or position (50% threshold). Horizontal swipes >16px without matching vertical motion abort so entry-nav stays usable. Also instrument settings gear click with console.log to diagnose unreachable setting nav5 months ago9a83c9b80541App.tsx onMount: on native, treat unconfirmed-recovery + locked + vault-exists as a failed creation — wipe vault slots + recovery-pending flag and restart onboarding. Per user spec: vault creation is atomic with recovery-words confirmation, partial creations don't strand the user behind a password screen. Desktop keeps the resume-via-unlock flow (closing a popup is too easy to do accidentally)5 months agof23a453c4bdaApp.tsx: bottom-sheet swipe gesture on native — touchstart in bottom 40% + swipe up >60px reveals vault list (setView 'list'); touchstart in top 35% of list + swipe down dismisses (setView 'entry'); horizontal moves >30px abort so entry-swipe-nav still works5 months agob39a7b800795RecoveryWordDisplay: replace navigator.share (no-op without @capacitor/share) with a true file download via base64 data URL on native (caught by MainActivity.setDownloadListener and written to public Downloads via MediaStore); button label always reads 'download as .txt'5 months ago4bb8cb4b18bcfix onboarding state persistence: Onboarding.tsx no longer writes peach_onboarded='true' on completion (caused stranded users mid-vault-creation with no back path on Android); App.tsx still persists when vault actually exists, so the flag tracks reality not intent. Also wire peach:back event handler in App.tsx to take the user back to onboarding from create-vault, and to handle in-app surface back nav (settings/add/etc) on Android5 months agoc03f67121dd8vite.config.mobile.ts: define __PEACH_E2E_PASSKEYS__ = false. Without it passkey.ts threw ReferenceError at module init, blocking the dynamic import of background/messages and leaving the chrome shim's _handler null5 months ago96f9b36fbbafpopup/index.tsx: import and call setupMessageHandler on native — Android has no MV3 service worker so the popup itself owns message routing; without this the chrome shim's _handler stayed null and every sendMessage timed out as SERVICE_WORKER_UNAVAILABLE5 months ago1febc9d6daf1RecoveryWordDisplay: route save through navigator.share on native (Capacitor WebView ignores <a download>); button label flips to 'share recovery words' on mobile; desktop keeps <a download> fallback5 months ago2ce7d020ae13add biometricsEnabled to VaultSettings type5 months ago800fef2eb834add BIOMETRICS section in Settings security panel: enable/disable toggle wired to GET_DERIVED_KEY -> KeystorePlugin.storeMasterKey/clearMasterKey + biometricsEnabled UPDATE_SETTINGS; only renders on native + supported devices5 months agoa1d75b982320add biometric unlock path to LockView: hasMasterKey + isAvailable check on mount, auto-prompt 400ms after, BiometricPlugin.authenticate -> KeystorePlugin.retrieveMasterKey -> UNLOCK_WITH_KEY; biometric button rendered when available; biometric_key_invalidated falls back to password and clears biometricsEnabled5 months ago3872f604f17dadd shared/native.ts (isNativePlatform, nativePlugin); App.tsx subscribes to Capacitor App appStateChange and locks vault when background elapsed >= autoLockMinutes5 months ago16db45928fa3register __peachRegisterMessageHandler in setupMessageHandler so chrome shim can route sendMessage on Android; implement publishInMemoryVault and clearInMemoryVault via Capacitor.Plugins.InMemoryVaultPlugin; call from UNLOCK and LOCK5 months agoce27a78ad3c7before mobile bridge wiring (handler reg, autolock, biometric)5 months agod07b72217b9dharden recovery confirm against full browser restart: peach_recovery_pending moves to chrome.storage.local; handleUnlock checks flag after fresh password unlock and re-routes to recovery surface; LockView Match accepts forceRecoveryWords override (v2.35.1)5 months ago56ac0e7edbd8prevent vault auto-lock and lock-on-close while user is mid-recovery-confirmation: peach_recovery_pending session flag, set on CREATE_VAULT, cleared on confirm; popup re-route to recovery display via forceRecoveryWords; alarms tests await async listeners (v2.35.0)5 months agoc24f786299c5recovery word display: Arabic numerals (right-aligned tabular), download .txt button, layout fills surface; csv button text + accent button contrast/weight; peachscript placeholder shortened (v2.35.0)5 months agoa8f9afdd5aa7remove all Mayan code (encoder, decoder, RS, peachQR, restore tab, export panel, CSS); free up mobile→desktop transfer (drop Pro gate on START_PAIRING_SERVER and ACCEPT_PAIRING); convert remaining SW dynamic imports to static so vite preload helper never fires off-document; restore screen no longer pops out to a detached window; onboarding back button on cards 2-3; refine Two keys copy to acknowledge password reset via recovery words; Pro list now mentions advanced vault health (v2.34.0)5 months ago7d40cd620602convert recovery-words dynamic imports to static in vault.ts and messages.ts — SW has no document for vite preload helper (v2.33.7)5 months agoe774d43ad6dedrop mobile from Pro feature list — mobile is free (v2.33.6)5 months agocbd07363a87aupdate One rule -> Two keys card and create-vault warning to reflect recovery words backup path (v2.33.5)5 months agobaaa5658dee6fix data loss in +add migration: source migration patch from saved entry value not draft; only commit drafts that are non-empty and changed (v2.33.4)5 months ago4c8f4b2cdb09fix +add username race: only reset edit state on actual entry id change, not on same-entry refresh after onFieldSaved (v2.33.3)5 months ago6ea3c83640b8split identity into username + email blocks; +add button label and click handler match field semantics; legacy email-shape username migrates to entry.email when adding a separate username (v2.33.2)5 months ago0e1121ba9dd4bump manifest version to v2.33.15 months ago5c89a5298422conditional label: +add email/username flips based on what exists (v2.33.1)5 months ago9918ef3154edrevert email to conditional +add inside username edit mode (v2.33.1)5 months ago617375e08945entry view: show only set identity fields; +add email/username appears inside edit mode only, label flips based on what exists5 months agoee903becfbb0recovery screen: remove wordmark, rune mask top/bottom bands, visible input lines, button pinned to bottom5 months agoe67430a671b1v2.33.05 months ago

← newerolder →

details

Peach

A free, open source, local-first password manager for Chrome, Firefox, and Android.

Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.

peachpasswords.com


Features

  • Passwords, cards, and secure notes — keep your private data together in one encrypted vault
  • Inline autofill — fill and save credentials without leaving the page
  • TOTP built in — generate two-factor codes without a separate authenticator
  • Password health — find weak, reused, and exposed passwords
  • Portable backups — export and restore with PeachScript or a .peach file

Peach Pro adds:

  • Peach Sync — end-to-end encrypted sync across paired devices
  • Passkeys — save and use passkeys in Chrome and Firefox
  • Peach Codex — print an encrypted, scannable backup of your vault
  • Advanced vault health, Canary Entries, and duress tools

See the Peach website for current availability and Pro details.


Install


Open Source

Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.

The source is hosted on Kepr, Asha Software's version control platform.


Security

Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.

Implementation details live alongside the code:


Building

bun install --frozen-lockfile
bun run build

Builds are written to dist-chrome/ and dist-firefox/.


Built by Asha Software · [email protected]