TaskVault is a local-first task manager. It works fully offline with no account at all — and if you turn on sync, your tasks are encrypted on your device before they ever leave it. Our server stores ciphertext it has no way to open.
no account needed
Poly1305 authenticated
derived on your device
bring your own
Everything, with nothing to trust us on.
The free tier is a complete, fully offline app. No account, no server dependency, no feature paywalled behind a connection.
+Turn on sync to keep devices in step. Every blob our server stores is ciphertext — it cannot read a single task, title, or note.
+A lost passphrase can't be reset server-side. Instead you get a one-time recovery phrase, shown once, at setup.
+Files attached to a task are encrypted client-side before upload, same as task content — never plaintext on our server.
+Optional category, priority, and subtask suggestions, sent directly from your device to your own Anthropic or OpenAI key — never through us.
+What your device holds, and what ours does.
The server stores encrypted blobs it cannot decrypt. That's the starting point of the design, not a feature added on top.
Your encryption key is derived on-device via Argon2id and never leaves it. The server sees only what it needs to verify you're you, and nothing that could recreate your key.
Every change touching encryption, auth, or storage goes through an independent security pass first, on purpose.
TaskVault is currently in closed testing ahead of a public release on Google Play. It isn't publicly downloadable yet. Want in early, or have a question?
info@bytebleeder.com →