peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas547 files
.deepsec/This directory holds the deepsec config for the parent repo.
data/
peach-browser/
files/
src/
background/
aes.ts.jsonchirp-identity.ts.jsonchirp-sync-coordinator.ts.jsonchirp-sync-vault-adapter.ts.jsonclipboard.ts.jsoncodex-handlers.ts.jsondesktop-pairing-bg.ts.jsondesktop-pairing-mdns.ts.jsondesktop-pairing-probe.ts.jsondesktop-pairing.ts.jsonhealth.ts.jsonlicense.ts.jsonmessages.ts.jsonoffscreen.ts.jsonpasskey-crypto.ts.jsonpasskey.ts.jsonrecovery-pending.ts.jsonself-test.ts.jsonsync-alerts.ts.jsonsync-trigger.ts.jsonvault.ts.json
content/
popup/
codex/
components/
views/
Add.tsx.jsonAdoptVaultView.tsx.jsonChirpSync.tsx.jsonCodexGenerateView.tsx.jsonCodexRestoreView.tsx.jsonEntry.tsx.jsonExport.tsx.jsonHealth.tsx.jsonImport.tsx.jsonLock.tsx.jsonNoteEditor.tsx.jsonNotesEditor.tsx.jsonNotesMode.tsx.jsonNotesTOC.tsx.jsonOnboarding.tsx.jsonPanic.tsx.jsonRecoveryWordDisplay.tsx.jsonSettings.tsx.jsonvault-search.ts.jsonVault.tsx.json
shared/
backup.ts.jsonchirp-adopt.ts.jsonchirp-handshake.ts.jsonchirp-pairing.ts.jsonchirp-payload.ts.jsonchirp-sync-transport.ts.jsoncodex-types.ts.jsonconfig.ts.jsondevice-manifest.ts.jsondomain.ts.jsongenerate.ts.jsonimport.ts.jsonlocal-network.ts.jsonnative.ts.jsonnoise-js.ts.jsonpasskey-utils.ts.jsonrecovery-word-list.ts.jsonrecovery-words.ts.jsonshortcuts.ts.jsonsync-identity.ts.jsonsync-types.ts.jsontypes.ts.json
runs/
crypto-core/
public/
codex/
fonts/
models/
scripts/
build-noise-core.mjsbuild-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.check-sw-static-imports.mjsFails the build if any chunk reachable from the MV3 service worker still contains a runtime
import().ci.tsclean-chrome-dist.mjsclean-firefox-artifacts.mjsgenerate-kat.mjsgenerate-kat.mjs — recompute the pinned ciphertext for self-test.ts (PCH-01-020).package-amo-source.shpackage-amo-source.sh — produce peach-3.6.65-source.zip for AMO review.release-firefox.tsrelease.tssetup-chrome-release.sh───────────────────────────────────────────────────────────────────────────── Peach — Chrome Web Store Release Setup Run this once to configure Chrome publishing.sync-chrome-dist.mjssrc/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten pathclipboard.test.tsclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.codex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.device-identity.test.tsdevice-identity.tsLocal-device identity helpers for the sync architecture.entry.lock-port.test.tsLV-5: the lock-on-close onConnect listener accepts only our popup port (legacy bare "popup" or nonce'd "popup-<uuid>") and ignores anything else.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.license.tslicense.verification.test.tsT-009: License Ed25519 signature verificationlocked-sync-spool.test.tslocked-sync-spool.tsmesh-relay-listener.test.tsmesh-relay-listener.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitizationmessages.create-vault-from-root-key.test.tsmessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERYmessages.test.tsmessages.tsmessages.ts — the only background message handler.ml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weightsml.tsnotes.test.tsoffscreen.htmloffscreen.tsOffscreen document script — audit fix HV-2c.paired-devices.test.tspaired-devices.tsPaired-device registry — v3 sync.passkey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.ed25519.test.tsT-015: Ed25519 passkey round-trippasskey.tspending-vouched-devices.test.tspending-vouched-devices.tsPending vouched devices — audit fix MV-7.recovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.relay-adoption-bg.test.tsrelay-adoption-bg.tsself-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.sync-alarm.test.tssync-alarm.tssync-alarm.ts — the 10-minute background sync tick.sync-alerts.test.tssync-alerts.tsPending sync security alerts.sync-coordinator.test.tssync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.sync-runner.test.tssync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via
setSyncRunner.sync-settings.test.tssync-settings.tssync-static.test.tsIV.7 — Static safety assertions for vault sync.sync-trigger.test.tssync-trigger.tssync-trigger.ts — central sync dispatcher.sync-vault-adapter.test.tssync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.vault-createVaultFromRootKey.test.tsvault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed rankingvault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)vault.duress-adoption.test.tsvault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.vault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundaryvault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pendingvault.session-escrow.test.tsvault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.vault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).content/
passkey-toast/
crypto/
argon2.test.tsargon2.tsargon2id.kat.test.tsT-019: Argon2id known-answer test (KAT) + parameter assertioncrypto.test.tsdecompression-bomb.test.tsMV-4: decompression-bomb output bounds on the zstd and pako legs.official-vectors.test.tspeachPayload.binaryreader-bounds.test.tsPCH-02-008 regression tests — BinaryReader must bound every read and fail with the decoder's existing PAYLOAD_TOO_SHORT code on truncated input.peachPayload.bomb.test.tsT-005: peachPayload declared-length decompression bomb (MV-4)peachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.rfc6238.test.tsT-004: TOTP RFC 6238 known-answer vectorstotp.test.tstotp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
drafts/
PCH-02-FIXES/Drafts for all 10 findings of peach-code-review.md (Fable 5, 2026-06-12): 1 Low (PCH-02-001), 9 Informational.
clipboard.hash-match.test.tsPCH-02-010 regression tests (Option B only) — the auto-clear must compare the live clipboard hash (computed inside the offscreen document) against the parked SHA-256 before wiping, and must stay conservative when the comparison is unavailable.INTEGRATION-CONTRACT.mdSource of truth for integrating these drafts.PCH-02-001-vault-patch-sanitizers.patch.mdSeverity: Low (the only non-Informational finding in PCH-02) Target file:
src/background/vault.ts — sanitizeEntryPatch, lines 2375–2388 Report: peach-code-review.md, Finding PCH-02-001PCH-02-003-sas-trust-model-comment.patch.mdSeverity: Informational Target file: src/shared/chirp-handshake.ts:125-154 (the SECURITY block) Report: peach-code-review.md, Finding PCH-02-003PCH-02-004-exact-pin-deps.patch.mdSeverity: Informational Target files: package.json:40-46, bun.lock (regenerated), new WASM-PROVENANCE.md (see deviation note) Report: peach-code-review.md, Finding PCH-02-004PCH-02-005-legacy-pbkdf2-doc.patch.mdSeverity: Informational Target files: src/shared/backup.ts:146 (derivePeachExportKey), src/popup/views/Import.tsx (re-export notice) Report: peach-code-review.md, Finding PCH-02-005PCH-02-007-hibp-add-padding.patch.mdSeverity: Informational Target file: src/background/vault.ts:230 (checkBreach) Report: peach-code-review.md, Finding PCH-02-007PCH-02-008-binaryreader-bounds.patch.mdSeverity: Informational Target file: src/crypto/peachPayload.ts:940-969 (BinaryReader) Report: peach-code-review.md, Finding PCH-02-008PCH-02-010-clipboard-hash-match.patch.mdSeverity: Informational Target files: src/background/clipboard.ts:124-178 (clearClipboardNow), src/background/offscreen.ts, manifest.json (⚠ permission), comment in clipboard.ts:18-19 Report: peach-code-review.md, Finding PCH-02-010peachPayload.binaryreader-bounds.test.tsPCH-02-008 regression tests — BinaryReader must bound every read and fail with the decoder's existing PAYLOAD_TOO_SHORT code on truncated input.README.mdDrafts for all 10 findings of peach-code-review.md (Fable 5, 2026-06-12): 1 Low (PCH-02-001), 9 Informational.vault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.vault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).WASM-PROVENANCE.mdPeach's vault security rests on a small set of third-party packages that either ship WebAssembly blobs or sit directly on a security path.TEST-EXPANSION/
argon2id.kat.test.tsT-019: Argon2id known-answer test (KAT) + parameter assertionbackup.nfc-fallback.test.tsT-006: backup/import NFC raw-fallback decrypt (LV-1 / PCH-01-001 sibling)clipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten pathcodex.multistripe.test.tsT-017: Codex multi-stripe round-tripcontent.orchestration.test.tsT-011 through T-014: index.ts autofill orchestrationgenerate.empty-pool.test.tsT-025: generate.ts empty-pool guard, 128-char boundary, minLength > maxLengthimport.csv.formulainjection.test.tsT-021: CSV formula-injection on import (round-trip)INTEGRATION-CONTRACT.mdGenerated by session:
test coverage expansion Agent: claude-sonnet-4-6 Priority 1: T-001–T-010 (10 files), Priority 2: T-011–T-024 (11 files, T-011–T-014 in one file), Priority 3: T-025, T-030, T-037 (3 files)license.verification.test.tsT-009: License Ed25519 signature verificationmessages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitizationmessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERYml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weightspasskey.ed25519.test.tsT-015: Ed25519 passkey round-trippdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression testpeachPayload.bomb.test.tsT-005: peachPayload declared-length decompression bomb (MV-4)recovery-words.checksum.test.tsT-002: BIP39 checksum rejectionrecovery-words.integrity.test.tsT-001: BIP39 word-list integrityrecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)sync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)totp.rfc6238.test.tsT-004: TOTP RFC 6238 known-answer vectorsvault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed rankingvault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)vault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundaryvault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pendingmobile/
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.multistripe.test.tsT-017: Codex multi-stripe round-tripcodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.clamp.test.tspdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression testpdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
GeneratorDrawer.test.tsGeneratorDrawer.tsxLockRuneCanvas.tsxNoteRow.tsxNoteRunes.tsxNoteToolbar.tsxPairingBirds.tsxPairing birds — the two illustrated characters used on the pairing screens.PairingProRequired.tsxPairingQrCode.tsxPeachMark.tsxRecoveryRuneBackground.tsxRuneBackground.tsxRuneCanvas.tsxSyncModeSelector.test.tsx@vitest-environment jsdomSyncModeSelector.tsxSyncModeSelector — the one place the relay choice is made.
views/
Add.tsxAdoptVaultView.test.tsx@vitest-environment jsdomAdoptVaultView.tsxCodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.test.tsx@vitest-environment jsdomCodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.csv.test.ts@vitest-environment jsdomExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.InitialSyncView.test.tsx@vitest-environment jsdomInitialSyncView.tsxLock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPairDevice.test.tsx@vitest-environment jsdomPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.Panic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxvault-search.test.tsvault-search.tsVault.tsxview-test-utils.tsxzxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).shared/
noise-core-wasm/
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).initial-sync.test.tsinitial-sync.tsmesh-peer-role.tsml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-blake2s-kat.test.tsnoise-core.tsnoise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-kk.test.tsnoise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.pairing-dial.tsThe dialling half of code pairing — shared by device pairing and vault adoption.pairing-handshake.test.tspairing-handshake.tsPairing handshake — Noise NK, the SAS, and the PAIR_IDENTITY frame.pairing-handshake.vault-id.test.tsChange 1 — vault_id in the PAIR_IDENTITY frame.pairing-invitation.test.tspairing-invitation.tspasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.passkey-utils.test.tspasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.checksum.test.tsT-002: BIP39 checksum rejectionrecovery-words.cross-platform.test.tsrecovery-words.integrity.test.tsT-001: BIP39 word-list integrityrecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.rendezvous.test.tsrendezvous.tsshortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-kk-transport.test.tssync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).sync-outcome.test.tssync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.sync-padding.test.tssync-padding.tsE7: frame padding at the relay boundary.sync-transport.test.tsSubnet-probe rate-limit tests.sync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.sync-types.tsVault sync — type definitions.sync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)types.tstypes.ts — cross-boundary types and the MessageType union.vault-adopt-snapshot.test.tsvault-adopt.test.tsvault-adopt.tstests/
fixtures/
history
2f6adfd23117move Destroy vault out of Settings home and into Settings → Vault below the Replace vault row, where the other irreversible vault operations live; bump v2.11.76 months ago08214da8ecc2redraw extension icon: drop the dark rounded-square wrapper that was swallowing detail at 16px, peach + leaf now fill the icon canvas; bump v2.11.66 months agoc520b474a1f3spec-align .peach: filename peach-backup-YYYY-MM-DD.peach (date-only), CSV/file picker accepts .peach + isPeachScript-content sniff, FileImport routes .peach to PeachScript subview via prefill, bump v2.11.56 months agof6e79034f2cdadd Download .peach button to PeachScript export, accept .peach file in PeachScript import (works in both merge and replace modes since Lock-screen restore uses the same view), bump v2.11.46 months ago6dd10798c332flatten nested glass borders across settings views: rune canvas, script input, settings inputs, feedback textarea now use translucent inset fill instead of double borders inside the glass card; bump v2.11.36 months ago6ff9bfed174fmerge passkey-only entries into matching login entries on read (consolidates duplicates from pre-v2.11 registrations); fix isPasskeyOnly to check password not username; permit empty-password updates on logins that have a passkey attached; bump v2.11.26 months agod5f614d9f6b0filter passkey-only + notes from inline autofill selector, add passkey badge to entries with both password and passkey, move tags section above TOTP so it stays discoverable when 2FA is present, bump v2.11.16 months agoca652c13429fbump v2.11.0, Projects.md §3.10 rewritten for new architecture, session notes ship outcome6 months agod8f1032bb523Entry.tsx adds passkey section + gates login fields for passkey-only, App.tsx routes all entries through EntryView, popup Vault/Health/Export/Import use entry.passkey, delete unused PasskeyEntryView + PasskeyEntry interface6 months agodf243b15db9dpasskey.ts: attach passkey to existing login entry at same domain (or create new login entry); read/write via entry.passkey sub-object; flip GET_PASSKEYS / GET_PASSKEY_FOR_DOMAIN to new shape6 months agocad47b22243cvault read-migrate type=passkey + flat fields to type=login + passkey sub-object, persist on next save, update sanitize/dupe key/messages handlers6 months ago85dda211aed3add PasskeyData sub-object + entry.passkey field to VaultEntry, hasPasskey/isPasskeyOnly helpers, keep flat fields as deprecated for migration6 months agoa86e59d61c04before passkey-as-subobject unification (Path B, v2.11.0)6 months agod3b325e8e06dshow tag chips on passkey entry view to match login entry pattern, bump v2.10.56 months agoc24fc253fd97move passkey delete to trash icon next to title (matches login entry pattern), remove buried bottom button, bump v2.10.46 months agocdb8aed8a54aadd diagnostic log for passkey get assertions to surface any handler-side issues6 months ago4823bacb5348fix ES256 passkey signature DER encoding so RPs accept assertions, suppress redundant State 11 banner on Chrome same-browser entries, dedupe State 11 across navigations via session storage, bump v2.10.36 months ago886a0cd205b0fix vault getRandomValues entropy overflow on >64KB vaults, defensive entries reload + celebration replay on license activation, tighten passkey approval card layout, bump v2.10.26 months ago0527a541c2cfadd Firefox 150+ popup credential flow, inline States 11+12, cross-browser banner, decline storage, bump v2.10.16 months ago4309fdecba8dbump to v2.10.0, add passkey + panic invariants to Projects.md, log to session notes6 months agoedc59d2b2a37add Firefox MAIN-world passkey detector + manifest content_scripts entry6 months ago698feaf6f97cadd Panic three-step flow, DESTROY_VAULT handler, Settings danger zone, panic CSS6 months ago3e34a4a87aa1add browser + transports fields to PasskeyEntry, export detectBrowser, tag chrome creates6 months ago6b53ab782017before passkeys cross-browser + vault panic (v2.10.0)6 months ago6152c18a0700bump to v2.9.16 months ago31a6f1479013pro upgrade page layout — key entry always visible, tighter hero and features6 months agob773702b0bf3bump to v2.9.06 months ago9bf731ef9119pro screen redesign, canary in security, trash polish, account nav label6 months agofba638254319fix license activation — remove toUpperCase, error above button, centered error style6 months ago5e086a0d6860rotate Ed25519 signing key — new keypair, public key updated in license.ts6 months ago2b750981a679fix rune glow transition — zero text-shadow base so accent color interpolates smoothly6 months ago371604b7dc54center rune string in empty space — flex: 1 spacer between hero and panel6 months agoa0ab75fd9e93lock screen rune string — static 9-char span row, occasional single glow, between hero and panel6 months agod109a2559fe3slow rune particles — gentle gravity, slow drift, long fade-in for passive magic feel6 months ago8a31f36f18f1lock rune canvas — particle funnel effect, runes drawn toward password input6 months ago3cd2c71bbf8dfix light theme and rune density — transparent canvas, 8% density, theme-aware idle color6 months ago7581d519f206fix lock rune canvas — cyclic string scroll matching onboarding mechanic, 30% density6 months ago26c99f63f576settings glass surface — backdrop blur groups with warm accent gradient background6 months ago2d677f90e079lock screen rune background — sparse slow canvas behind unlock form with glass panel6 months agoce3d87b6878cbefore lock screen runes and settings glass surface6 months ago450e326d3f5cadd light backdrop-filter blur under onboarding and new-vault cards for text readability over runes (v2.8.3)6 months agobe2a58d2eba5space rune background out — 60% fewer visible runes, opacity restored to 0.07 (v2.8.2)6 months agoc18389e80430drop onboarding rune opacity 60% and rework new vault screen to share onboarding card visual language (v2.8.1)6 months ago80afc813ba15rebuild dist-firefox to keep it in sync with v2.8.06 months ago9b947c544f7cbump version to 2.8.0 — first-run onboarding feature6 months ago177541d96a99gate Onboarding view ahead of NewVault on first install via peach_onboarded storage flag6 months agoaa954418fa8fadd onboarding card, dot, and rune-background styles with entrance animations6 months agoa4900d4d1c92add Onboarding view with three-card welcome flow6 months agoe056e5981747add RuneBackground component for atmospheric rune drift behind onboarding6 months agoe7cf01cbd96cbefore first-run onboarding implementation6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]