peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas247 files
public/
codex/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tschirp-identity.tsLocal-device identity helpers for the chirp-sync architecture.chirp-sync-coordinator.test.tschirp-sync-coordinator.tsChirp Sync — Phase 2 manifest-diff coordinator.clipboard.test.tsclipboard.tscodex-handlers.test.tsTests for src/background/codex-handlers.ts.codex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.commands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.messages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tsnotes.test.tspaired-devices.test.tspaired-devices.tsPaired-device registry — v3 chirp-sync.passkey-crypto.test.tspasskey-crypto.tspasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-009passkey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.recovery-words.test.tsrecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.self-test.test.tsself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.vault-history.test.tsVault history tests.vault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
codex/
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.browser-bundle.test.tscodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.codex.test.tsconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.erasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.generate.test.tsgenerate.tsgenerate.ts — full Codex generation pipeline.helpers.tshelpers.ts — shared utilities for Codex generation and restoration.node-wasm.tsNode-only WASM byte loader for Vitest.pdf-import.test.tspdf-import.test.ts — coverage for the parser surface only.pdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.pdf.tspdf.ts — render the printable Codex PDF.reed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.restore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.restore.tsrestore.ts — Peach Codex restoration library (popup-side).rs-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.scanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.
components/
views/
Add.tsxChirpSync.tsxChirpSync — the v3 Settings → Sync surface.CodexGenerateView.test.tsx@vitest-environment jsdomCodexGenerateView.tsxPeach Codex — generation view.CodexRestoreView.tsxPeach Codex — restoration view.contracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.test.tsx@vitest-environment jsdomHealth.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.toHtml.test.ts@vitest-environment jsdomNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.chirp-handshake.test.tschirp-handshake.tsPost-chirp pairing handshake.chirp-pairing.test.tschirp-pairing.tsAudio pairing driver — orchestrates the two-chirp exchange that bootstraps trust between two devices in the same room.chirp-payload.test.tschirp-payload.tsAudio pairing payload — 64 bytes on the wire.chirp-sync-transport.test.tsSubnet-probe rate-limit tests.chirp-sync-transport.tsWebSocket sync transport — v3 chirp-sync Phase 2.codex-types.tscodex-types.ts — shared shapes for the Peach Codex.device-manifest.test.tsdevice-manifest.tsDevice manifest — v2 brief §4.3.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsggwave.test.tsggwave.tsggwave loader — thin async wrapper around the ggwave-wasm module.import.test.tsimport.ts
any is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).local-network.tsLocal network discovery — minimal helper used by chirp pairing.ml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.noise-xx.test.tsnoise-xx.tsNoise XX (mutual auth) — used for every Phase-2 WebSocket connection after the audio chirp pairing has stamped each side into the other's paired-device registry.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-identity.test.tssync-identity.tsSync identity — long-term X25519 keypair tied to the vault, not the device installation.sync-types.tsChirp Sync — type definitions (Master Brief v2).types.tstypes.ts — cross-boundary types and the MessageType union.tests/
fixtures/
history
8f070c5ee2b9repair Firefox manifest version JSON for remote release build1 month ago9046733615a8allow Firefox WebDriver chrome context on current ESR runtime1 month ago32766db268fcrecord browser gate host blockers and defer findings register closure1 month agof52b546d4612run one release wrapper for Chrome sentinels and both Firefox security harnesses1 month ago5d2f2da905fcfix: return Firefox passkey bridge promises to page scope (v5.0.92)1 month ago7ccc4df96a51record remaining Firefox browser evidence and release-register closure work1 month agob8cda065ac42stabilize Firefox Docker sender-context isolation evidence1 month ago3e5264a63ea1add Firefox Docker content-script session-storage isolation evidence1 month ago37deb9d907b8fix Firefox Docker sender-context relay and verify real authorization boundaries1 month ago469a2ef18467fix Firefox Docker gate probe and remove invalid relay self-observation1 month agoc10663875c60wip: isolate Firefox automation binary and disable renderer sandboxes; macOS still blocks plugin-container Marionette startup1 month agod2729979c240wip: diagnose Marionette startup as Firefox sandbox failure; geckodriver status is ready but Firefox never creates MarionetteActivePort1 month ago6b2631c739d9wip: Playwright Firefox project launches but existing helpers still use Chromium; extension passkey parity cannot replace geckodriver without supported Firefox add-on loading1 month ago2bec8ee07597wip: add Firefox software-rendering sandbox environment and wire firefox-release security gate; sender-context Marionette still blocked1 month ago86f2b6727bf4wip: fix PB-26-203 test sequencing; full CI blocked by Firefox Marionette startup (v5.0.90)1 month agof0f75ccf82d8fix in-flight unlock and password-change escrow races with epoch and ordered session mutations (PB-26-306, v5.0.89)1 month ago7b6b2aaa225eprevent page-forged toast UI signals with per-toast tokens and remove inactive Firefox observer listener1 month ago0b702b354fb3fix passkey backup eligibility flags across Chrome and Firefox ceremonies with regression coverage (PB-26-318, v5.0.87)1 month ago6d01667c8d96fix JNI key copies to zeroize on drop and bump product version to v5.0.861 month ago5e594fa15b5dbump receiver SAS confirmation test update to v5.0.851 month ago298ca7b2797bupdate policy and popup tests for explicit receiver SAS confirmation (v5.0.84)1 month agoc68215129f49require explicit matching receiver SAS confirmation before adoption (v5.0.84)1 month agob871817e8ecesanitize release child environments and bump version to 5.0.831 month ago0555937cf5dafix: randomize Chrome web-accessible chunk URLs and assert scoped hashed Firefox resources (v5.0.82)1 month ago1c0220b12de9remove deterministic test constructors from production Noise WASM/JNI exports and add provenance gate (v5.0.81)1 month agoe766cc954210fix: enforce SYNC_MANIFEST entry and tombstone count limits with regression coverage (v5.0.80)1 month agod12b636cf3a3require fresh master-password proof for cleartext vault export and bump v5.0.791 month agoaaadb859cc90guard lock-screen CSV/JSON restore files before text reads and bump v5.0.781 month agoa0473016f16erestrict COPY to trusted extension pages and bump v5.0.771 month agod0a3b01669b4route shortcut and swipe password copies through canary reporting and bump v5.0.761 month ago637ebc6baf50enforce release browser gate with validated Playwright JSON and bump v5.0.751 month ago31cfb64b6d95guard unlock and password change state publication against lock epoch1 month ago07bf0e84d1dbfix popup port authentication to require extension-page sender origin and reject content scripts (v5.0.73)1 month ago37b22166bab5scope auto-lock refresh to extension pages and secret-touching fill1 month agoaf7feb6fddafminimize page GET_SETTINGS to theme accent and attested summon record (v5.0.71)1 month agodb62c59f8b55fix: enforce PSL-aware Firefox rpId validation with co.uk and github.io regressions (v5.0.70)1 month agoaf297f42b5d9bind passkey approval responses to originating tab and origin (v5.0.69)1 month ago2c4fb1e1da46add 2026-09-03 independent assessment: 19 findings (7M/10L/2I) with support package and prior-campaign re-verification1 month ago9d8e082b10c8record PB-26-208 through PB-26-212 remediation outcomes in CONTINUITY.md1 month ago07cd947496bbconsolidate source archive behind one packager with crypto-core, SOURCE-MANIFEST, and reproducibility (PB-26-212, v5.0.68)1 month ago700030ce6645replace shell-based release tools with argv runner, credential isolation, and online-resolution ban (PB-26-211, v5.0.67)1 month ago40265d95b2a3add mandatory chrome and firefox release-browser gate with fail-closed meta-tests (PB-26-210, v5.0.66)1 month agofec1978916ddreplace forgeable firefox passkey postmessage relay with exportFunction privileged bridge (PB-26-209, v5.0.65)1 month ago2d18f733b547bound peachscript parser before normalize/decode and guard file.size before file.text() (PB-26-208, v5.0.64)1 month ago26e37ef0c30cbound codex scanner input before parse/decode/hash (PB-26-207, v5.0.63)1 month agoc7f4ca8b97d2bound adoption snapshot with aggregate budget and sync fallback (PB-26-206, v5.0.62)1 month agoa7d691b51e23bound pairing relay inbox with frame/inbox ceilings (PB-26-205, v5.0.61)1 month agoe5dc1e260ba7record PB-26-204, PB-26-203, and PB-26-213 remediation in CONTINUITY.md1 month agoda79fbcb8f0eencrypt pair rendezvous secrets under vault-root wrapping key (PB-26-213, v5.0.60)1 month agob8f0394669b3harden session storage to trusted contexts with fail-closed escrow (PB-26-203, v5.0.59)1 month ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]