peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas247 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the parser surface only.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
7e401ad4a9dfadd passwordHistory model, capture old password on change in updateEntry, preserve across unlock, strip from passive fill4 months ago761e69236230fix: Copy & fill auto-saves and dismisses — no extra Save click (v3.6.158)4 months ago2adce7cc303efeat: contextual signup wizard — step through email → username → password on multi-field signup forms (v3.6.157)4 months ago3ae3a65f503ffix: detect separate email fields + exclude personal name fields from autofill (v3.6.156)4 months ago46998e6f05b2fix: inline edit mode no longer hijacked by silver-platter type-to-search handler (v3.6.155)4 months ago288ded81074etweak: rename vault sort label 'used' to 'recent' (key unchanged) (v3.6.154)4 months agof70e3c342944revert: remove vault list search-scope toggle (both/emails/usernames) from sort bar; search defaults to full-text 'both' as before (v3.6.153)4 months agoae1591d81f00fix: popup steadiness — will-change top/left, track modal internal scroll, dismiss when anchor leaves DOM (v3.6.152)4 months agodfa5e826f09dfix: shadow root delegatesFocus so modal focus traps see the popup host as focused instead of an opaque closed-shadow node (v3.6.151)4 months ago93a2840e97c4fix: identity helper + suggest list fade is scroll-state-aware (only when overflowing, clears at bottom) instead of an always-on mask that cut short lists (v3.6.150)4 months agoa45e13531957fix: inline popup mounts at document root for non-modal forms + compensates fixed containing-block ancestors (backdrop-filter/transform); renders on-field instead of clipped off-screen (v3.6.149)4 months ago5233be9a5934feat: Add vault search MRU scope toggle (v3.6.148)4 months agoccffed5200abfix: Add identity search, MRU sort, and username-aware fallback (v3.6.147)4 months ago70b8eecdabd3add internal notes — complete 12-part reference for Android team5 months agof907c7a5cc9fdocs: Record explicit-summon fix (v3.6.146)5 months ago7834ef7ed3cffix: Make explicit login-form icon clicks open Peach (v3.6.146)5 months ago5ede1338abb9release v3.6.145 to Chrome Web Store and Firefox AMO5 months agoadc8a19b4e39extend globe-detection to entry view domain row — DomainFavicon component, shared titleInitials/titleBackground, fix contracts mock5 months agob0f705a676edshow InitialsChip instead of Chrome globe for entries without a real favicon — canvas-based globe detection, no flash (v3.6.145)5 months agod12779c5867cfix passkey entry editability — isPasskeyOnly excludes TOTP/email, + 2FA always visible on login entries5 months agoab5496be14e8fix passkey Google origin timing bug and passkey+TOTP real-time merge5 months agoa885fa9c118abump version to 3.6.1425 months ago528a807295c0swallow Chrome Missing GetResponseDetails.responseJson error in GET pass-through paths5 months ago3aafd13289fbpass through GET requests with no matching Peach credential instead of rejecting NotAllowedError5 months agoea3d3ceb520adocs: session notes OUTCOMES — v3.6.140 end-to-end passkey create+get proof, orthogonality of null-buffer harness artifact, smoke now green5 months agoda331121f21ftest: prove passkey create+get end-to-end — extend compile-stripped E2E Pro bypass to provider-enable and get gates, drive smoke setup over messages (create/unlock/enable, lockOnClose off), approve in fresh popups; smoke now green (v3.6.140)5 months ago071b1347e42ddocs: session notes OUTCOMES — v3.6.140 passkey document-is-not-defined root cause and fix5 months ago6e876e9e1422fix: disable Vite modulePreload so the service worker's dynamic import() helper no longer touches document — passkey get/create no longer throws ReferenceError mid-flow (v3.6.140)5 months ago21fbb6627cdduse font-display block + preload RegularItalic so entry names keep Cormorant after pre-lock removal, no Times fallback (v3.6.139)5 months ago5847a1a7137dremove static #pre-lock splash so unlocked popup no longer flashes the lock screen on open (v3.6.138)5 months agoec66f22212b6test: add atomic-persist regression — a slot-B write failure must restore slot A so no phantom entry is left on disk (covers v3.6.137)5 months agoebb7bd2456e6fix: make vault persist atomic — restore prior slot A if a later write fails, so a failed save never leaves disk ahead of memory; eliminates phantom/duplicate entries (v3.6.137)5 months ago34691b7eed91fix: add unlimitedStorage + surface real save errors + plain-text note paste; cap vault history 10→5 — resolves intermittent STORAGE_QUOTA_EXCEEDED save failures (v3.6.136)5 months agoc3a13ed2e2c4before investigating intermittent entry/note save failures5 months agodeb59054482erelease v3.6.135 to Chrome Web Store and Firefox AMO5 months ago797d654ef572before v3.6.135 store release5 months ago3a5e85455435replace blur-based list dismiss with mousedown watcher — focus traps can't close the list (v3.6.135)5 months ago062f87c4a7e5resist focus-trap blur in identity suggest list + popup auto-close after inline unlock (v3.6.134)5 months ago42176e8b1f29broaden modal detection to form ancestor + position:fixed fallback (v3.6.132)5 months ago91ca0c3fee4eappend popup inside modal ancestor so focus traps don't intercept Peach's internal inputs (v3.6.131)5 months agob1774d59b9e2before modal-anchor popup fix5 months ago293e14f7664efix(sw): register onMessage handler synchronously at SW startup + gate unlock-dependent handlers on a restore-ready promise — fixes cold-start race where the popup's HAS_VAULT hit a listenerless worker and flashed onboarding; preserves the no-spurious-lock fix (v3.6.130)5 months agod4136f2febfddocs: independent security audit report — findings, resolutions, verification, safety rating (8.5/10), and codebase recommendations5 months ago3352fb2a8b40independent security audit complete — all 18 confirmed findings resolved (v3.6.129); mobile resynced (peach-android v1.0.39)5 months ago07ce1ae7d42cfix(security): recovery words no longer exported to world-readable Android public Downloads — native offers a clipboard copy, desktop keeps user-chosen-location .txt (MEDIUM #7); document Web3Forms key as an intentionally-public anti-spam token (INFO #11) (v3.6.129)5 months agocf426553736efix(security): CSV export neutralizes spreadsheet formula injection (MEDIUM #8); 2FA toast no longer renders the live code into page-readable DOM (LOW #10); password generator uses rejection sampling to remove modulo bias (INFO #12) (v3.6.128)5 months agoc9f2283eb546fix(security): duress pads both vault slots to a fixed 256KiB ceiling so ciphertext lengths never reveal a hidden decoy vault exists — restores plausible deniability across real-vault growth (MEDIUM #5) (v3.6.127)5 months ago935ae427d7eefix(security): pairing now gates persistence on a user-confirmed Short Authentication String (SAS) derived from the shared Noise handshake hash — both devices show it, user confirms match before enrolling; defeats LAN/audio-range initiator impersonation (HIGH #4, extension+shared) (v3.6.126)5 months ago2da1a2aff52cfix(security): inline locked bubble no longer collects the master password in page DOM — routes to the trusted popup via OPEN_POPUP; removes page-observable keystroke surface and the trim/no-trim inconsistency (HIGH #3 + LOW #9) (v3.6.125)5 months agoc0204fa478dffix(security): CSV/JSON import requires a real master password when no vault exists; CREATE_VAULT handler rejects empty password — no more empty-key vault with zero at-rest protection (HIGH) (v3.6.124)5 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]