Free. No account. Works offline.
A task app that's actually good — and one even we can't read.
Board and list views, drag-and-drop, due dates, priorities, search — the everyday tool first. Then every task is encrypted on your device with AES-256-GCM before it ever touches storage or the network. The key never leaves your browser.
No signup. No servers required. Your data, your device, your key.
Local-first
Everything works fully offline. Storage lives in your browser's IndexedDB — nothing is required to leave your device.
End-to-end encrypted
AES-256-GCM per task, keys derived from your passphrase with 600,000-round PBKDF2. Only ciphertext is ever stored or synced.
Honest about limits
No hidden gaps. docs/THREAT_MODEL.md lists exactly what's defended against and what isn't — including that losing both your passphrase and recovery code means the data is gone. On purpose.
Watch it happen, not just take our word for it
Haven has a page inside the app that shows the real encryption running on whatever you type — the actual bytes that would be stored, generated by the actual code, live. Open the app and click the shield icon in the rail, or use the same live preview when adding a task.
What you type
What gets stored
Optional sync, same rules
If you want your tasks on more than one device, Haven can sync through a small self-hostable
server — but that server only ever sees ciphertext, the same as your own browser's storage.
See docs/ARCHITECTURE.md for the protocol, or run
server/ yourself.