Basic and Secure mode
How your data is protected, and what the choice made at setup means.
When you set up your account you choose how your tasks are stored. The choice is made once and can't be changed later.
Basic
Your data is encrypted on its way to our servers (HTTPS), and our server encrypts the titles, notes and subtasks of your tasks before storing them, so a copy of our database shows only ciphertext. Our server holds the key, though, so we could technically read them. If you forget your password, you can reset it without losing anything.
Secure
The titles, notes and subtasks of your tasks are encrypted on your device before they leave it, with a key that only your password unlocks. Our servers store them only in that encrypted form, so a copy of our database reveals nothing about what your tasks say.
Because only your password opens the key, a forgotten password can't be reset – the data it protects can't be recovered. Pick a password you won't lose.
What stays readable
In both modes the server can read what it needs to sync and order your week: dates, times and durations, reminders, colors, whether a task is done, recurrence rules, order, and the names of your shelves and calendar – plus your account data.
The limits of Secure mode
Your password never leaves your browser: it is turned into a separate sign-in key, and only that key is sent to us. The app itself, though, is delivered by our servers. Secure mode therefore protects your stored content and your password, but someone who took over our servers – or we, if we deliberately changed the app – could ship a version that reads your password or your decrypted tasks the next time you use it.
Read more on the security page.