peach-browser
A free, open source, local-first password manager for Chrome, Firefox, and Android.
TypeScript
timeline
atlas179 files
public/
fonts/
models/
scripts/
src/
background/
aes.test.tsaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.alarms.test.tsalarms.tsclipboard.test.tsclipboard.tscommands.tsKeyboard command handler — routing for summon-inline: 1.entry.tshealth.test.tshealth.tshealth.ts — Pro advanced vault health analysis.index.tslicense.tsmessages.test.tsmessages.tsmessages.ts — the only background message handler.ml.tspairing-server-state.tsTracks the active 6-digit pairing-server session.passkey-crypto.test.tspasskey-crypto.tspasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.passkey.tsrecovery-pending.tsPersistent flag set while the user has just created a vault and is reading their 12 recovery words but has not yet typed the 3 confirmation words.sync-coordinator.test.tssync-coordinator.tssync-network.tssync-storage.tsvault-history.test.tsVault history tests.vault.test.tsvault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.
content/
passkey-toast/
crypto/
argon2.test.tsargon2.tscrypto.test.tspeachPayload.test.tspeachPayload.tspeachPayload.ts — binary payload format shared by PeachScript and the Peach QR matrix code (spec §2).peachScript.test.tspeachScript.tspeachScript.ts — PeachScript encoding/decoding.totp.tszstd.tsThin wrapper around @bokuweb/zstd-wasm that defers WASM load until the first compress/decompress call and memoises the init promise.
popup/
components/
views/
Add.tsxcontracts.test.tsx@vitest-environment jsdomEntry.tsxExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (
if (signal()) return <X/>).Health.tsxImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.Lock.tsxNoteEditor.tsxNotesEditor.tsxNotesMode.tsxNotesTOC.tsxOnboarding.tsxPanic.tsxPasskeyApproval.tsxProCelebration.tsxRecoveryWordDisplay.tsxRecoveryWordEntry.tsxSettings.tsxSyncPairing.tsxTrashView.tsxVault.tsxview-test-utils.tsxshared/
backup.test.tsbackup.tsbridge.tsbrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.domain.tsfavicon.test.tsfavicon.tsResolves a favicon URL for a given domain.generate.test.tsgenerate.tsimport.test.tsimport.tslocal-network.tsml.tsnative.tsMobile platform detection helpers used by popup views to gate Capacitor-only paths.noise-js.test.tsNoise NK auth proof regression test.noise-js.tsNoise NK initiator for Android / Capacitor.passkey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.recovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.recovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.shortcuts.test.ts@vitest-environment jsdomshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.storage.tssync-types.tssync-wire.tstypes.tstypes.ts — cross-boundary types and the
MessageType union.websocket-sync-transport.tstests/
fixtures/
history
b11107fix: peach brand icon stays peach across all accents (v1.7.2)6 months agoa1c947chore: codebase audit and commentary pass (v1.7.1)6 months ago1a7d31feat: credit and debit card support — vault, autofill, save offer, decline memory (v1.7.0)6 months ago271721feat: keyboard shortcut summon + recall system for missed forms (v1.6.0)6 months ago971d0dfix: require confirm-password in encrypted export before enabling download (v1.5.3)6 months agoaa90dbfix: autofill selector reopen + submit-button icon (v1.5.2)6 months ago43d2fdfeat: trash entries included in CJK and JSON vault exports (v1.5.1)6 months ago47559cfeat: 12 pastel accent colors with full-surface propagation (v1.5.0)6 months agod94d9efeat: hoist note formatting toolbar inline into tabs row + inline Entry.tsx note editor (v1.4.56)6 months agofd0858feat: expanded note toolbar (U, S, H, lists, rule) + 250px editor body (v1.4.55)6 months agofb33e4fix: note editor — Portal to #hd-shell, NoteEditorInline in Add, position:absolute (v1.4.54)6 months ago975a4edocs: document full-popup note editor architecture and migration path (v1.4.53)6 months ago4e3d50feat: full-popup note editor with rich text toolbar (v1.4.53)6 months ago772de5docs: CONTINUITY entry for v1.4.526 months ago6eb04afeat: notes-only filter toggle in vault sort bar (v1.4.52)6 months ago76a8b7docs: CONTINUITY entry for v1.4.516 months ago5d439dstyle: softer TOTP glow (1.3x brightness) + near-neutral search seam tint (v1.4.51)6 months agofef244docs: CONTINUITY entry for v1.4.506 months ago8473ccstyle: TOTP digit glow — filter brightness over 3s, no boxy shadow (v1.4.50)6 months ago534ff6build: rebuild dist at correct v1.4.49 (version bump was before build)6 months ago99505adocs: update CONTINUITY for v1.4.49 TOTP polish6 months agof326b4style: remove accent ring + band glow, digit flare on reset, kill copy button border (v1.4.49)6 months ago548580style: inner ember — search seam bloom + TOTP band urgency glow (v1.4.48)6 months agoce399efix: natural search typing and inline totp editing (v1.4.47)6 months agoa7a1c1fix: darken shell frame for totp ring contrast (v1.4.46)6 months ago294cdcfix: rebalance totp accent ring visibility (v1.4.45)6 months ago914b09fix: soften totp accent ring animation (v1.4.44)6 months ago58b08afix: inline edit dismissal and totp accent ring (v1.4.43)6 months ago9caa1bfix: popup polish and firefox packaging refresh (v1.4.42)6 months agoc8201dtest is this thing on?6 months ago
details
Peach
A free, open source, local-first password manager for Chrome, Firefox, and Android.
Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.
Features
- Passwords, cards, and secure notes — keep your private data together in one encrypted vault
- Inline autofill — fill and save credentials without leaving the page
- TOTP built in — generate two-factor codes without a separate authenticator
- Password health — find weak, reused, and exposed passwords
- Portable backups — export and restore with PeachScript or a
.peachfile
Peach Pro adds:
- Peach Sync — end-to-end encrypted sync across paired devices
- Passkeys — save and use passkeys in Chrome and Firefox
- Peach Codex — print an encrypted, scannable backup of your vault
- Advanced vault health, Canary Entries, and duress tools
See the Peach website for current availability and Pro details.
Install
Open Source
Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.
The source is hosted on Kepr, Asha Software's version control platform.
Security
Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.
Implementation details live alongside the code:
Building
bun install --frozen-lockfile
bun run build
Builds are written to dist-chrome/ and dist-firefox/.
Built by Asha Software · [email protected]