Show HN: Peach – a local-first zero-knowledge password manager, now on Android

ashasoftware1 pts1 comments

Peach — Free Open Source Password Manager

Skip to content<br>Go Pro — $39

FeaturesNewsSecurityAuditsSourceFAQSupportDownload Go Pro — $39<br>peach

open source | zero-knowledge | e2e encryption

Android now in Beta!<br>keep your secrets.

Peach remembers your passwords and fills them in automatically. Your data stays on your device, encrypted and visible only to you. Free and open source. Pro is $39 once, yours forever.

Install Now No Card or Account required for Free

NOTES<br>B / U H &ldquo; • 1.<br>2FA backup codes<br>GitHub<br>K7HQ-2BPN-XMVR<br>9LTS-4FWC-DZJY<br>Proton Mail<br>WZ3K-8NQE-BPYX<br>M4CL-7VRZ-HJTN

peachscript<br>peachscript<br>PeachScript restore string

312 entries · 2 passkeys<br>Copy Download .peach

Paste the script — or import the .peach file — into Peach on your other device to restore your vault. Won't work anywhere else.

Entry Lock New Entry Vault Settings Notes PeachScript

features<br>Small moments. Carefully handled.

Saved for this site<br>kepr.uk

Kepr<br>email hello@asha.software<br>Fill credentials<br>Copy<br>Email Password Edit

2FA 383 151 Copy

inline popup — saved entry with 2FA, from inject.ts renderSilverPlatter()<br>Fills the form. Gets out of the way.<br>The moment you focus a login field, Peach appears inline — credentials ready, 2FA code already showing. One tap fills everything and exits.

New entry<br>title<br>notion.so

website<br>https://notion.so

username<br>peachdev

peachdev 52×<br>ashajune 31×<br>peachbloom 14×<br>stonecreek 9×<br>quartzdev 7×

email<br>hello@asha.software

password

100<br>A-Z a-z 0-9 !@#<br>site rules &middot; min 8 &middot; max 100

Save entry

inline popup — new entry form, from inject.ts renderInlineEdit()<br>Username, email, password. One popup.<br>Peach surfaces your saved usernames and emails separately so you can pick exactly what each site needs, then generates and fills the password in one tap.

KEY DERIVATION Argon2id | 64MB memory | 3 iterations | OWASP 2025<br>ENCRYPTION AES-256-GCM | authenticated | fresh nonce per write<br>INTEGRITY BLAKE3 | 256-bit digest | length-extension resistant<br>PAIRING Scannable code | Noise NK | ephemeral X25519 | 8-digit confirmation<br>security architecture — compact spec<br>No account. No hosted vault. No one else.<br>Your vault never leaves your device unencrypted, and nothing hosted can access it. No hosted database to breach, no account to lock.

passkeys — native Firefox and Chrome support<br>Native Firefox passkeys. Finally.<br>Peach saves and uses passkeys natively in Firefox and Chrome.

Firefox passkey status &rarr;

password generator<br>k#9mZ$2@Lx!vQ7rP^fT*nW8eA%hB+dU0jY=sC~bE4gN3uF.yR6wX,qK;lH:oD?ts

Fits this site&rsquo;s rules<br>generator — site-aware<br>Passwords fit for every site.<br>Peach reads the page for length limits and character rules before generating. The result fits the first time.

32 entries need attention<br>Check all breaches now<br>6 Breached<br>Minecraft<br>3.1k exposures

FIX ↘<br>vault health — remediation queue<br>No more breaches hiding in the vault.<br>Peach monitors every entry for breaches, weak passwords, and reuse. Pro gets a ranked remediation queue.

src/content/inject.ts showCardSelector() Cards, too.<br>Store cards alongside passwords. Peach autofills checkout forms and copies details with one tap.

△ Destroy vault

Permanently wipes every entry, setting, and license on this device. There is no recovery.

Begin destruction<br>panic — double verified local wipe<br>Panic is there when leaving matters.<br>Peach can irreversibly destroy the local vault after double verification. Explicit, not accidental.

riverstonecedarmaizeemberflintcoralcranesmokeambergrovequail<br>recovery words — 12 words shown once at vault creation<br>A forgotten password is no longer the end.<br>12 recovery words, shown once at vault creation. Write them down — they restore everything.

peach codex — physical vault backup, Pro Print your vault. Restore from nothing.<br>The Peach Codex turns your encrypted vault into a scannable document. Print it, put it in a safe. If every device is lost or stolen, scan the page and enter your passphrase — your vault comes back, complete.<br>No account. No hosted vault. Just paper.

notes.<br>I. 2FA backup codes Today<br>II. wifi passwords Today<br>III. SSH passphrase Jun 2025

notes — encrypted notes list<br>Oh and we didn't forget about Notes.<br>Store anything sensitive next to your passwords — 2FA backup codes, SSH passphrases, private keys. Encrypted the same way, available only to you.

Free to start.<br>$39 for Pro. Once.

Free on Chrome, Firefox, and Android beta — with iOS coming 2027. Pro adds sync across all your devices, passkeys, advanced vault health, and Peach Codex. One-time payment — no subscription, ever.

Free forever<br>Peach

Unlimited passwords, cards, notes, and 2FA codes<br>Inline popup — fill, edit, and create entries without leaving the page<br>Smart autofill<br>Breach monitoring<br>Strong password generation<br>Import from any manager<br>Chrome, Firefox, and Android beta (iOS coming 2027)

One-time. No subscription.<br>Peach Pro<br>$39<br>Everything in Free<br>Peach Sync — end-to-end encrypted, on our relay or your own<br>Native browser passkeys for...

peach vault password entry free passwords

Related Articles