I tried the todo.txt approach, but found I wanted to have secure access from any device (including devices I don't own), so went with an easy cloud option: https://five.today