Password
Your email address and a password. Changing the password needs a code we send to your email, and signs you out on your other devices.
Privacy and security
Your workspace stays yours: hard to get into, and nothing sold out of it.
Your account can ask for a second step whenever you sign in on a new device, the app can be locked behind your face, your fingerprint, or a PIN, and the things that cannot be undone are confirmed by email first. None of it costs extra: it is the same on every plan.
In short A second step when you sign in. Your face or fingerprint to open the app. No ads, no selling your data.
Signing in
Three ways to sign in, whichever suits you.
A code by email
Nothing to remember: we email you a six-digit code and you type it in. It is also how a new account confirms its email address.
Sign in with Apple
On iPhone, iPad, and Mac. You can keep your email address private, and your Apple password stays with Apple.
Two-factor authentication
A password proves you know something. A code from your phone proves you have it.
Turn it on under Account → Security: scan the code shown on screen with your authenticator app, type the code it gives you, and save your recovery codes. From then on, signing in on a new device also asks for the code your app shows at that moment.
Works with the app you already use
Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, or any other authenticator app. The codes appear on your phone even without a connection, and no text messages are involved.
Asked on every new sign-in
Once it is on, signing in on a new device asks for a code, whichever way you sign in. Someone who learns your password, or gets into your email, still cannot get into your account.
Codes that cannot be reused
Each code works once and only for a short time, and repeated wrong guesses are stopped.
Recovery codes for a lost phone
When you turn it on you get ten recovery codes. Each one lets you in once if your phone is lost or replaced. Keep them somewhere safe: they are shown only once, and you can make a new set at any time.
You are kept informed
We email you when two-factor authentication is turned on or off, and when a recovery code is used. Turning it off needs a code from your authenticator app.
Offered, never forced
A new account is offered it right after signing up, then reminded about once a month until it is on, or until you ask us to stop.
App lock
Someone holding your unlocked phone still cannot open your lists.
Also under Account → Security, once you are signed in. The lock belongs to the device it is set on, so a phone and a laptop can each have their own — or not.
Your face, your fingerprint, or Windows Hello
Face ID and Touch ID on iPhone, iPad, and Mac, a fingerprint or face unlock on Android, Windows Hello on Windows. On Linux and in the browser the lock uses a PIN.
A PIN as a backup
You choose a six-digit PIN when you turn the lock on, for the times your face or finger is not recognised.
When it locks
When you open the app, and when you come back to it after more than a minute away. While it is in the background, your lists are hidden from the app switcher. In the browser it locks after five minutes without any activity and whenever the page is reloaded, and unlocking needs an internet connection.
Your face and fingerprint stay on your device
The check is done by your phone or computer, and TASKjiq only learns whether it succeeded. In the apps your PIN never leaves the device. In the browser the PIN is checked by our server, which keeps only a check value that cannot be turned back into the PIN.
Wrong PINs slow things down
After several wrong PINs the app makes you wait before trying again, a little longer each time. Your face or fingerprint still works in the meantime. In the browser there are ten tries: after the tenth wrong PIN that browser is signed out and you sign in again.
Forgot your PIN?
Sign out and sign back in. The lock is removed, and everything in your account comes back.
The rest of the account
The irreversible things are slow on purpose.
Important changes are confirmed
Changing your password or deleting your account needs a code sent to your email, so nobody can do it from your device alone.
Deletion waits a week
A deleted account is kept for seven days first, with reminders by email, so the deletion can still be cancelled.
Error reports without you in them
When the app runs into a problem it can tell us what went wrong — never your content and never who you are. You can switch it off under Account → Error reports.
Nothing to sell
No ads, no profiles, no selling your data, on any plan.
Read the details