diff --git a/doc/todo.md b/doc/todo.md
index c8ed0a1..79dc1cc 100644
--- a/doc/todo.md
+++ b/doc/todo.md
@@ -2,11 +2,12 @@
 
 * ~~Switch to "process" provider for AWS credentials (much less hacky)~~
 * ~~Frontend needs to react when request is cancelled from backend~~
-* Session timeout (plain duration, or activity-based?)
-* Indicate on approval screen when additional requests are pending
+* ~~Session timeout~~
 * ~~Fix rehide behavior when new request comes in while old one is still being resolved~~
-* Additional hotkey configuration (approve/deny at the very least)
 * ~~Switch tray menu item to Hide when window is visible~~
+* Clear password input after unlock fails
+* Indicate on approval screen when additional requests are pending
+* Additional hotkey configuration (approve/deny at the very least)
 * Logging
 * Icon
 * Auto-updates