H

Haven

Set a passphrase. This encrypts everything on this device — we never see it. Next you'll get a one-time recovery code as a backup if you forget it.

Passphrase

Confirm passphrase

At least 10 characters. Longer and less guessable beats complex — four random words work well.

Save this recovery code. We never see it. If you lose both your passphrase and this code, your data cannot be recovered by anyone — not even us.

I've saved this recovery code somewhere safe

Enter your passphrase to unlock your tasks.

Passphrase

Enter your recovery code to regain access and set a new passphrase.

Recovery code

Recovery code accepted. Set a new passphrase — your existing tasks stay exactly as they are, only the passphrase changes.

New passphrase

Confirm new passphrase

H

Tasks

/

To Do

0

In Progress

0

Done

0

Task Status Priority Due

Watch encryption happen

Type a task title below. Nothing here is saved — this runs the exact same encryption function every real task on your board goes through, live, so you can see it with your own eyes instead of taking our word for it.

What's in your browser's memory

What a server would ever see

How your data is protected

Every task is encrypted on this device with AES-256-GCM before it ever touches storage. The key that does that encryption is derived from your passphrase and never leaves your browser — it's never sent anywhere, not to us, not to a server, not to anyone. IndexedDB, this browser's local database, holds only what you see below: an ID, a random IV, ciphertext, and a timestamp. If sync is ever turned on, that's also the only thing that would ever be sent — the exact same ciphertext already sitting here.

Nothing here yet

Type a task above and press Enter to get started.

No matching tasks

Try a different search term.

Edit task

Title

Notes

Status

Priority

Due date

Add task

Title

Notes

Status

Priority

Due date

What's in your browser's memory

What a server would ever see

Sync (optional)

Sync keeps tasks in step across your devices through a server that only ever stores ciphertext — same guarantee as this device, nothing new to trust. Leave the token blank to start a fresh, empty bucket, or paste one from a device you've already set up to join it.

Sync server URL

Sync token

Joining an existing bucket needs the recovery code from the device that started it — that's what lets this device decrypt the same tasks, not the token alone. Your passphrase on this device doesn't change; confirming it just re-locks the shared key under it.

Recovery code (from the other device)

Confirm your current passphrase

Sync is on. This token is a bearer capability for your ciphertext bucket — anyone who has it can read and write it, so treat it like a password. Enter this same server and token on another device, along with your recovery code, to sync between them — your recovery code now unlocks this synced task list on any joined device, not just this one, so it's worth treating with the same care.

Server

Sync token