Back to Guide

End-to-End Encryption Guide

KanbanTab offers an optional End-to-End Encryption (E2EE) feature for signed in users. When enabled, your tasks, boards, and notes are fully encrypted locally on your device before they ever touch our servers. Because we use a Zero-Knowledge architecture, your passphrase is never transmitted to us. This means we have absolutely no way to read your data, even if our database were compromised.

How to Enable E2EE

Before you begin, ensure you are logged into your KanbanTab account and that your current device is fully synced with the cloud.

  1. Open KanbanTab and click the Settings icon.
  2. Navigate to the Account tab.
  3. Locate the Privacy section and toggle E2EE on.
  4. Create a strong, memorable passphrase.

Recovery Snapshots

To prevent accidental data loss during the initial encryption process, KanbanTab automatically creates a local, unencrypted Recovery Snapshot of your board right before E2EE is enabled. If something interrupts the sync process (like a sudden loss of internet), you can easily recover your data.

You can download this backup via Settings > Account > Advanced and restore it using the Import tool. Note: This snapshot remains strictly local to your current device and is permanently deleted if you log out.

Your Device
KanbanTab Cloud
Private Board
Medical test results
Top secret
Banking information
Private Board
•••••••• •••••
Medical test results
•••••••••••••••••
Top secret
••••••••••••••
Banking information
••••••••••••••••••••

How it Works (Technical Details)

  • Client-Side Processing: All encryption and decryption happens securely inside your browser's local memory using the native Web Crypto API.
  • AES-256-GCM: Your payload is sealed using industry-standard authenticated encryption, which also prevents anyone from tampering with the ciphertext.
  • PBKDF2 Key Stretching: Your passphrase is run through 100,000 computation cycles to generate the final encryption key, protecting your account against brute-force "dictionary" attacks.

Do not lose your passphrase! Your data is locked by a cryptographic key derived solely from your personal passphrase. If you forget or lose it, your data becomes mathematically impossible to recover. Our support team cannot reset it for you.

FreeNo adsPrivate

Everything you need. Nothing you don't

Your personal to-do list, synced across every device you own.