Envelope budgeting, encrypted on your devices before anything is saved. We hold no key, so nobody else can read it. Not even us.
Budget Bandit is in a private beta. Invites go out a few at a time.


Every envelope, transaction and balance is encrypted in your browser before it's saved. There's no setting to turn on.
The key is made in your browser and stays on your devices. We hold no key, and the server refuses anything that isn't encrypted.
No bank login to hand over. Log spending as it happens, paste rows, or import a CSV.
Download the whole budget as a file any time, or delete everything from Settings.
If you lose every device, your recovery code opens your budget on a new one. We can't recover it for you.
Sorting and month-in-review questions send only what they need, and only when you ask.
New to envelope budgeting? See how it works
Decide what each dollar is for before you spend it: rent, groceries, the trip in May. Set a target and the app says when an envelope is short.
Type what you spent the way you'd say it. The envelope is guessed from the payee.
Every envelope shows what remains. Overspend one and cover it from another. The month closes with a short review.
This runs on this page only. Nothing you type is sent anywhere.
You both see the same envelopes, live. They join at no extra cost.
Add it to your home screen and it opens like an app. Works offline and syncs back.

A budget is about as personal as a document gets. Every budgeting app I've used kept it in plain text on someone else's server. Budget Bandit is the app I built for my own family: it's encrypted before it leaves your browser, I hold no key, and it never touches your bank.
The rest is the envelope method with the arithmetic done for you. If that's the kind of budgeting you want, I'd like you to try it.
Adrien · hello@budgetbandit.app
Leave your email and I'll send an invite. Early testers budget free during the beta and shape what gets built next.
Request an inviteAlready have an account? Sign in