diff --git a/devdocs/todo.txt b/devdocs/todo.txt
index fada3281..d4e86077 100644
--- a/devdocs/todo.txt
+++ b/devdocs/todo.txt
@@ -6,6 +6,10 @@
 
 TODO: post to server and test
 
+TODO: restrict server so randos can't login since the client now has all the logins helpfully pre-loaded on it
+	not sure how to do that and still support phone via cellular network or other people's wifi from logging in
+	Firewall settings I guess of some kind or maybe require a manual edit to the password, like add a 1 to the end of all of them or something?
+
 todo: add backup turn off setting
 	environment variable
 todo: add backup master time out setting