peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas275 files
public/
codex/
fonts/
models/
scripts/
build-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjspackage-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjs
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.chirp-sync-runner.test.tschirp-sync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.chirp-sync-static.test.tsIV.7 — Static safety assertions for Chirp Sync.chirp-sync-vault-adapter.test.tschirp-sync-vault-adapter.tsProduction adapter that backs runChirpSyncInitiator with the live vault.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxvault-search.test.tsvault-search.tsVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.browser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.config.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
a9e6abd59f84test: Stabilize passkey vault verification locator (v5.1.8)1 month agobbba3918c2dbfix: Upgrade Solid to remove Seroval advisory (v5.1.7)1 month agod8646baeee62fix: Minimize adoption completion payloads (v5.1.6)1 month agoc43ce993a056fix: Keep passkey toast token inside isolated world (v5.1.5)1 month agob211fef3edc9docs: record September 5 assessment remediation plan1 month ago00037996fdf3publish independent security assessment PDF (6 findings, 0 Critical/High/Medium, read-only)1 month ago01bad3f476e6record subtractive audit remediation outcome in CONTINUITY (applied SA-01/02/03/04/07, declined SA-05/06/08)1 month ago08e3c710d51dremove dead cancelledRequests set and markCancelled from passkey handler (audit SA-07)1 month ago0f3dcb89b51bremove dead normalisePeachScript export and its test (audit SA-04)1 month ago7387d7035163remove unused context parameter from applyMergedRemoteEntries and call sites (audit SA-03)1 month agocea601545b08remove duplicate vaultMode assignment and unused _newSalt parameter (audit SA-01, SA-02)1 month agof959b6d9a210suppress whats-new on fresh install so recovery confirmation lands in the vault1 month ago1a82f37bd5defix continue button hover: remove conflicting color overrides, inherit peach-btn--accent styling1 month ago4ed3d3536e9fadd Android update instructions to breaking changelog note1 month agof9f3b4f597b4fix whats-new to fill parent with width/height 100 percent and wrap in overlay view from settings1 month agod94f3204728eswap whats-new order: lead with V4 feature update, breaking Android warning second1 month agoe2c385ca3182fix whats-new view to match ProCelebration sizing pattern, eliminating vault entry bleed-through1 month ago9a913155781areplace invisible url-insert icon button with readable 'use current page' text link1 month ago19afa4f766a8fix whats-new overlay sizing to fill parent, remove scrollbar, condense notes with breaking box first1 month agobe9859f3cd06fix whats-new text colors, add V4 backup/passphrase details, and add settings vault section to revisit changelog1 month agod460a48c5619add build-time what's new screen with V4 breaking-change callout, shown once after unlock per version bump (v5.1.4)1 month agoce280211c5b7skip zxcvbn strength check for passwords 50+ chars to eliminate UI lag on long password generation (v5.1.4)1 month ago40b81cb029a0include the shared V4 vector in source archives1 month ago74a9992f00c6docs: record Vault V4 compatibility and migration1 month ago7c2a3f68a3cdtest: add shared Vault V4 long-password vector (v5.1.3)1 month ago004b3227fc8efeat: add password and passphrase generator modes (v5.1.2)1 month ago1cb20a22a633feat: add EFF passphrase generator and 256-character random passwords (v5.1.1)1 month ago62e1ce2b9167feat: emit Vault V4 while retaining V3 reads (v5.1.0)1 month ago9e704eea3bf4append close PB-26-314 test and findings register session block to continuity handoff1 month ago3e9961eabe52record verified fix locations tests and koh saves for all 24 findings with PB-26-314 left Open1 month agoef28746fa743assert PB-26-314 as an expected-failure trip-wire and skip web-accessible-resource assertions when build artifacts are absent (v5.0.106)1 month agoc083a658d3e6record closure verification for all 24 assessment findings with PB-26-314 and register gaps left open1 month ago87a1a9d722e7hash canary rate-limit key metadata and add plaintext-key regression coverage (PB-26-405, v5.0.106)1 month ago426038f38b49fix FIRE_CANARY_PING test trigger sender bypass and add regression coverage (PB-26-404, v5.0.105)1 month agoa6724549c6f2fix persistSlotA epoch race with lock and add regression coverage (PB-26-403, v5.0.104)1 month agoa860affc314epreserve TOTP parameters through entry patches with regression coverage (PB-26-402, v5.0.103)1 month ago32a6e4e07185bind manual summon recall to attested sender domain with bounded payload validation (PB-26-401, v5.0.102)1 month ago5b4ed4f90c88preserve TOTP parameters in entry patches with regression coverage1 month ago6a896488d3f2add independent security assessment PDF and subtractive audit report at v5.0.1001 month agob3e092842e0crecord green CI baseline and blocked combined browser gate in continuity handoff1 month ago30f870f0f3c7record v5.0.100 form regression fix and remaining browser-gate closeout steps1 month agoe1c5043e4311fix Chrome content-script chunk allowlisting and real-form regression coverage (v5.0.100)1 month ago42cdd29d63cfreattach form icons when fields receive focus and bump browser version to 5.0.991 month agoc3a252b747e2record intermittent Kyoshi Firefox startup blocker after Bun wrapper correction1 month agocfe7d0d287e8run Firefox passkey harness with Bun runtime in combined gate1 month ago98511389266frecord Kyoshi Firefox startup evidence and remaining Chromium wrapper blocker1 month agod54d6b001698fix Firefox 151 headless startup environment and bump browser version to 5.0.971 month agoc0b6176641bfrecord Kyoshi sender evidence and Firefox passkey runtime blocker1 month ago5089d364b523configure geckodriver allowSystemAccess instead of Firefox capability flag1 month ago7b36e1c887f6allow Firefox sender harness chrome context on current ESR runtime1 month ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]