PNG Steganography Workspace

Drop a PNG, add your secret message, and download the stego image instantly.

Browser only

Drop a PNG here or

Recommended: lossless PNG up to 8 megapixels for best quality.

Capacity usage 0 / 0 bytes
No passphrase

Passphrase enables AES-256 encryption. Leave blank for plain text.

Drop a PNG here or

Images created on this tool work best. JPEGs are not supported.

Heads up: If the passphrase is wrong or the image lacks hidden data you will see an error message instead of text.

Advanced options

Reduces payload size for large text. We automatically decompress after extraction.

Encryption runs entirely client-side. When a secure context (HTTPS or localhost) is unavailable, we fall back to AES-CBC with HMAC verification.

Tips

  • Compressing binary data (e.g., Base64) may not shrink the payload. Keep an eye on the capacity meter.
  • Passphrases are strongest when used over HTTPS, where AES-GCM is available.
  • The hide/extract forms remember these options while the page stays open.

How it works

  • Optional encryption

    Set a passphrase to encrypt your message with AES-256 before embedding.

  • Lossless output

    We only work with PNG so the hidden bits survive sharing and re-saving.

  • Smart capacity

    Live capacity tracking helps you stay within safe limits for natural-looking images.

Responsible use

Steganography is provided for educational and privacy-friendly purposes. Do not use it to conceal harmful or illegal content.

Need to decode regular text? Return to the main encoder & decoder.

Steganography FAQ

We use AES-GCM when the browser is running in a secure context (HTTPS or localhost). When that is not available we fall back to AES-CBC with an HMAC integrity check. The capacity meter reflects the active mode.

Text with lots of repetition compresses well and increases the amount you can hide. Already-encoded data such as Base64 or random-looking output will not shrink much. The capacity meter updates as you toggle compression.

No. Everything runs in your browser and the stego image is generated locally. Download the result if you want to share it—no data is uploaded to our servers.