Todosian is an open-source (Apache-2.0) Android app by isotjs. The APK we host is 4.9 MB, it needs Android 11 or newer, and it declares 6 permissions.
The file on this page is Todosian 2.1, 4.91 MB, and it installs on Android 11 and newer.
We compared the signing certificate of this build with the certificate recorded the first time com.isotjs.todosian entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest declares 6 permissions, none of which cover contacts, location, SMS, the camera or the microphone.
Its licence is Apache-2.0. We took this build from F-Droid, and the source for this exact version is linked below.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 2.1
- Size
- 4.91 MB
- Requires Android
- API 30
- Package
- com.isotjs.todosian
- Signature checked on
- Sep 18, 2026
- Where this file came from
- F-Droid
- Licence
- Apache-2.0
- Source code
- Source for this version
File SHA-256: 9b15698cca38bd413081c18e1c1635fcd84007dfb2451a33f45047300ad4a75c
Signing certificate (SHA-256): a348c52917ecc4936cb2cbe2e2349454f058ca3e6e163bb1173edb1eca132db2
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- POST_NOTIFICATIONS
- RECEIVE_BOOT_COMPLETED
- WAKE_LOCK
- ACCESS_NETWORK_STATE
- FOREGROUND_SERVICE
- com.isotjs.todosian.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Screenshots


