Peach

Keep your secrets.

Peach is a password manager that minds its own business. Free, open source, and local-first for Chrome, Firefox, and Android — your vault lives on your device, locked with your passphrase. No cloud account, no hosted database, nothing for anyone to aim at. You set it up, it gets out of your way.

How it works

Your vault is encrypted with AES-256-GCM and an Argon2id key, then checked with BLAKE3 — all before it leaves your device. Want your logins on more than one device? Peach Pro adds Peach Sync: your devices meet over an encrypted tunnel through a relay that only forwards ciphertext it can’t read. The relay sees that two of your devices are talking. It never sees your vault.

Features

• Passwords, cards, and secure notes in one encrypted vault
• Inline autofill — fill and save credentials without leaving the page
• TOTP built in — one-time codes, no separate app
• A password generator that respects each site’s rules
• Password health — flags weak, reused, and exposed logins
• Portable backups — export and restore with PeachScript or a .peach file
• 12-word recovery backup
• Biometric unlock and one-tap copy from Quick Settings on Android

Peach Pro — $39 once, no subscription

• Peach Sync — end-to-end encrypted sync across your paired devices
• Passkeys — save and use them in Chrome and Firefox
• Peach Codex — print an encrypted, scannable backup of your vault
• Advanced vault health
• Canary entries — a quiet ping when a guarded entry is opened
• Duress tools — a duress passphrase opens a decoy vault, or wipes yours if that’s what you’d rather

Open source

Peach is GPL v3, and all of it is public on Kepr — Asha’s own version control platform: the browser extension, the Android app, and the relay that powers sync. Read it, audit it, build it. Nothing is hidden.

A thank you offer

Use code justpeachy at checkout for 100% off a Pro license — 39 licenses available, first come first served.

Miss it? Code thankyou gets you lifetime Pro for $25.