diff --git a/TODO.md b/TODO.md
index 8b9407a..7b51451 100644
--- a/TODO.md
+++ b/TODO.md
@@ -2,3 +2,6 @@
 - mime-type => exec app + value
 - custom buckets (like skate: key@bucket or key+bucket)
 - encryption per bucket, one key for all entries (in that bucket)
+- `-b bucket`, use B for encrypted bucke?
+- edit command
+- env var for password