Skip to content

Todo

F-Droid

Open source

Secure offline To-Do & Notes with biometric lock.

Version
1.6.0
Size
28.8 MB
Updated
Mar 15, 2026
Get from Download APK (v1.6.0)
Signing certificate on record

About this app

✨ A simple, private space for your tasks and thoughts.

A clean, straightforward tool for managing your daily tasks and capturing your notes, designed to stay entirely on your device. 📱

✅ Everything in One Place Keep your life organized without switching between apps. Whether you’re checking off a quick grocery list or writing down ideas, everything is right where you need it. 📝

🛡️ Privacy First Your data never leaves your phone. With built-in biometric locking, you can keep your personal thoughts and important lists safe from prying eyes using your fingerprint or face unlock. 🔒

🔇 No Distractions No ads, no tracking, and no internet required. It’s just a reliable, fast, and quiet place to organize your life. 🎯

Licensed under GPL-3.0-only, by KERLOS.

OfficialSignature VerifiedOpen Source

What's New in v1.6.0

Imported from the F-Droid repository index.

  • • Added the ability to customize task and note font sizes.
  • • Improved UI.
  • • Updated dependencies and various bug fixes.

Version history

v1.6.0Latest
Signature continuous

Mar 15, 2026 · 28.8 MB · Android API 3036 · code 12003

Imported from the F-Droid repository index.

  • • Added the ability to customize task and note font sizes.
  • • Improved UI.
  • • Updated dependencies and various bug fixes.
READ_MEDIA_IMAGESUSE_BIOMETRICUSE_FINGERPRINTRECEIVE_BOOT_COMPLETEDSCHEDULE_EXACT_ALARMUSE_EXACT_ALARMUSE_FULL_SCREEN_INTENTPOST_NOTIFICATIONSVIBRATEWAKE_LOCKACCESS_NETWORK_STATEFOREGROUND_SERVICEcom.k.todo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 77e8d32476d9db8870e5705975dead6143115127feef616db96e6637de8aec01

v1.6.0
Signature continuous

Mar 15, 2026 · 25 MB · Android API 3036 · code 12002

Imported from the F-Droid repository index.

READ_MEDIA_IMAGESUSE_BIOMETRICUSE_FINGERPRINTRECEIVE_BOOT_COMPLETEDSCHEDULE_EXACT_ALARMUSE_EXACT_ALARMUSE_FULL_SCREEN_INTENTPOST_NOTIFICATIONSVIBRATEWAKE_LOCKACCESS_NETWORK_STATEFOREGROUND_SERVICEcom.k.todo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 d4abe36e9f72ffc7c92758e21a6d8e3b435b8c338c4bcc53f6c73bda0dc78f5b

v1.6.0
Signature continuous

Mar 15, 2026 · 30.8 MB · Android API 3036 · code 12001

Imported from the F-Droid repository index.

READ_MEDIA_IMAGESUSE_BIOMETRICUSE_FINGERPRINTRECEIVE_BOOT_COMPLETEDSCHEDULE_EXACT_ALARMUSE_EXACT_ALARMUSE_FULL_SCREEN_INTENTPOST_NOTIFICATIONSVIBRATEWAKE_LOCKACCESS_NETWORK_STATEFOREGROUND_SERVICEcom.k.todo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 781daedab3206517d3da1b0983a2996733faef19cb413f58da4775ec165fab00

Will it run on your device?

CompatibilityCheck the requirements

60%

  • Targets newer Android builds, so legacy devices may be excluded.
  • ABI coverage is focused on newer 64-bit devices.
  • Aligned with the latest Android target SDK expectations.
What changed in this release
Size delta
+3.8 MB
Added permissions
None
Removed permissions
None

Installation Guide

1

Open Settings on your Android device

2

Go to Security → Unknown sources (or Install unknown apps)

3

Enable "Allow from this source" for your browser or file manager

4

Open the downloaded APK file from your Downloads folder

5

Tap "Install" and wait for installation to complete

6

Launch the app from your home screen

Make sure to re-enable Unknown Sources restrictions after installation for security.

How to install this safely

How to verify the file you downloaded

Before you install anything, confirm the file is the one described here. On a computer, run shasum -a 256 your-download.apk (macOS or Linux) or certutil -hashfile your-download.apk SHA256 (Windows), then compare the output character-for-character with the SHA-256 on this page. If a single character differs, the file is not the build we recorded — delete it.

What the signing certificate proves

Every Android app is signed with a private key that only its developer holds. The fingerprint on this page is a hash of the matching public certificate, and it proves continuity rather than identity: it tells you a build came from whoever signed the earlier ones. Android enforces this at install time — if a package claiming to be com.k.todo is signed with a different key, the system will refuse to install it over your existing copy. A fingerprint that changes between releases is worth pausing on, because a repackaged app that has been modified by someone else cannot keep the original signature.

How to roll back to an earlier version

If the current release misbehaves, 1.6.0 is the last build before it. Android will not install an older version code over a newer one, so you must uninstall Todo first — which clears its local data unless you have a backup. Reinstall the older APK only if its signing fingerprint matches the build you already trust, and check the API range: an older release may target an Android version your device has moved past.

Why we list sources instead of hosting everything

The official store channel is almost always the right choice: it updates automatically and carries the publisher's own distribution guarantees. A direct APK is useful when a device has no store access, when a rollout has not reached your region, or when you need a specific version — and only when the publisher has authorized that copy. APKBrowse does not list pirated, cracked, or unauthorized rebuilds of Todo, and a listing is removed when the evidence for it stops holding up.

Get Todo

Every source we list for com.k.todo is legality-reviewed. Pirated or cracked builds are never offered.

Other sources

F-Droid listing

official

F-Droid builds this app from source and signs it. This is its official listing, with older builds and full release notes.

Source code

verified publisher

The upstream repository this build is compiled from.

We check legality and signature continuity, but device behaviour still varies. Install at your own discretion.

App Information

Developer
F-Droid
Category
Productivity
Android
11+
Architectures
arm64-v8a
Version
1.6.0 (code 12003)
Size
28.8 MB
Updated
Mar 15, 2026
Package name
com.k.todo

Security Verification

File integrity
SHA-256 recorded
Signing certificate
Fingerprint on record
Official source
Download APK (v1.6.0)

We record provenance; we do not run malware scans. Verify the hash yourself before installing.

SHA-256 Hash

77e8d32476d9db8870e5705975dead6143115127feef616db96e6637de8aec01

Signing certificate

6c423a8bc5f36e69b17dcb01345e31fa4ee0168ffc63099ff1a6f3a6ddc02b6b

Permissions Required

What each permission lets Todo do. A highlighted one is worth a second look — not necessarily wrong, just worth asking whether this app needs it.

READ_MEDIA_IMAGESRead photos and images.
USE_BIOMETRICAuthenticate with a fingerprint or face.
USE_FINGERPRINTAuthenticate with a fingerprint.
RECEIVE_BOOT_COMPLETEDStart automatically when the device finishes booting.
SCHEDULE_EXACT_ALARMSchedule tasks to run at an exact time.
USE_EXACT_ALARM
USE_FULL_SCREEN_INTENTShow full-screen alerts, such as alarms or incoming calls.
POST_NOTIFICATIONSShow notifications.
VIBRATEMake the device vibrate.
WAKE_LOCKKeep the device awake, e.g. to finish a download or play media.
ACCESS_NETWORK_STATECheck whether the device is online and on what kind of connection.
FOREGROUND_SERVICEKeep running in the background with a visible notification.
com.k.todo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Previous Versions

Signature verified

The signing certificate fingerprint for this release is on record, so a build that does not match it did not come from this publisher.

More Productivity apps

More from F-Droid

Report a problem with this listing

A listing is only as good as its corrections. If a source is broken, a signature looks wrong, or this app should not be here, tell the moderation team.

Report a problem