A quiet place for the things you have to do
Coffee Pad is a to-do app for one person — you. It feels like the notepad you already like, and everything in it is encrypted with a key that never leaves your browser.
14 days free, no card required.
This is the real app, running on made-up data. Tick things off, rewrite a note, add a list — nothing is saved, and nothing leaves this page.
Small on purpose. Serious where it counts.
Nobody reads it but you
Every task is sealed in your browser with AES-256 — the Advanced Encryption Standard — before it’s sent. The database holds ciphertext, so even a full dump, or an interface that misbehaves, gives up nothing.
A passphrase, not a promise
Your key is derived from a passphrase we never receive and can't reset. You get a one-time recovery key for the day you forget it.
Three panes, no ceremony
Lists, tasks, and a place to write. No boards, no assignees, no workflow states. It's a pad, and it stays a pad.
Hands stay on the keys
⌘K goes anywhere. N starts a task, ⌘↩ finishes it, ⇧L locks the whole thing behind you. Bare letters on purpose — the browser owns ⌘N.
Light and dark, properly
Warm paper by day, low-glare graphite by night — or just follow the system and never think about it.
Yours alone
One person's pad, not a workspace. No teams, no seats, no per-user pricing — you pay for one pad and that is the whole product.
What the server actually stores
Not the title. Not the notes. Not the due date. Not even whether you’ve ticked it off. A row is an id, a timestamp, and a block of ciphertext — which is exactly what you’d see if you queried the database yourself.
Row-level security keeps rows scoped to their owner as well, but that’s the seatbelt. The encryption is the reason a leak isn’t a leak.
id 9f3c1e8a-4b21-47de-9c0f-2a5d7e61b884
user_id c1a7ee20-0f4d-4a19-8b6e-7d3f9c25a107
list_id 4e8b2c11-93af-4d76-a5e2-61bd0f8c4a39
iv bDk2Rk1uWFo4dGhq
ciphertext 9tQfLm2xR7vKcE0aYh3NpUwZs6BdGj4TiXo1
Vr8CkQzMbA5eHnLyD7fJuP2ItSgW0xR4mNqZ
created_at 2026-08-31 09:14:02+00
Questions worth asking first
- What is an end-to-end encrypted to-do list?
- It means the encryption happens on your device, with a key that never leaves it. The server receives something it cannot read. Most to-do apps encrypt your tasks on their servers instead, which protects them from outsiders but not from the company itself.
- Can you read my tasks?
- No. Your key is derived from a passphrase that is never sent to us. What reaches the database is an id, a couple of timestamps and a block of ciphertext — not the title, not the notes, not even whether you have ticked it off.
- What happens if I forget my passphrase?
- You use the one-time recovery key you were shown at setup. If you have lost that too, your tasks are gone — there is no reset, because a reset would mean we had a way in. That is the trade, and it is worth knowing before you start rather than after.
- How is this different from Todoist or Google Keep?
- Both are better task managers. Neither is end-to-end encrypted: Todoist encrypts tasks at rest but holds the keys, and Google Keep is readable by Google. There is a page comparing six of them, sourced from their own documentation.
- Does it work on my phone?
- It runs in any modern browser, and the layout is built for a phone screen as well as a desktop one. There is no native app to install.
- What does it cost?
- $3 a month, or $30 a year, after 14 days free. The trial asks for no card at all — not a pre-authorisation, not "we won't charge you", nothing to cancel. One plan, no tiers, no per-user pricing.
- What happens to my tasks if I stop paying?
- They are locked, not deleted. The database goes on holding the same ciphertext it always did, nobody reads it, and subscribing again brings it straight back. You can also export everything at any point, including after the trial ends — a paywall around your own writing would be a poor way to ask for money.
One price, and a fortnight to decide
14 days free, and we do not ask for a card to start — not a pre-authorisation, not a “we won’t charge you”. There is nothing to cancel if you decide against it.
Two months free
- Everything in the pad, encrypted end to end
- Export whenever you like, paid or not
- Cancel in one click
- Everything in the pad, encrypted end to end
- Export whenever you like, paid or not
- Cancel in one click
Prices are in US dollars, plus VAT where it applies. Payment is handled by Stripe, so no card details ever reach this app. If you stop paying, your tasks are locked rather than deleted — and you can still export them.
How it compares
Most to-do apps can read your tasks. Here is where six well-known ones actually stand, taken from their own documentation — including the two that encrypt end-to-end just as this one does.
Open it, write it down, get on with your day
No onboarding tour. No workspace to name. Sign in, choose a passphrase, and start typing.
Get started