Hide Text Inside an Image

Image steganography is the art of hiding a message inside a picture so completely that no one would guess the message is even there. Where encryption scrambles text into obvious gibberish, steganography does something subtler: it conceals the very existence of the secret. The photo looks like an ordinary photo, and only someone who knows to look — and how — can pull the words back out.

What “hiding text in an image” really means

A digital image is a grid of pixels, and each pixel is a set of numbers: how much red, green and blue it contains, each from 0 to 255. Those numbers have plenty of room to spare. The difference between a red value of 200 and 201 is utterly invisible — your screen cannot show it and your eye cannot see it. Steganography exploits exactly that slack: it borrows the tiniest, least-noticeable part of each pixel to store a message, leaving the picture looking unchanged.

This tool uses the classic and most widely understood technique, called LSB, short for least-significant bit. Every colour value is a byte made of eight bits, from the most significant (worth 128) down to the least significant (worth just 1). LSB steganography replaces only that lowest bit with a bit of your message. Because it is worth a single level out of 256, flipping it changes the colour so slightly that the result is indistinguishable from the original.

How the encoding works, step by step

When you type a message, the tool first turns your text into bytes using UTF-8, the standard encoding that handles every language and emoji. It then adds a small header — a marker that says “a message lives here” plus the message length — so that the extractor later knows where to start and where to stop. The combined bits are written one at a time into the red, green and blue channels of each pixel, skipping the transparency (alpha) channel so nothing visible shifts.

To read a message back, the process runs in reverse. The extractor walks the same pixels in the same order, collects the lowest bit from each colour channel, reassembles the bytes, checks for the marker, and decodes the UTF-8 text. If the marker is missing, it means the image carries no hidden message, and the tool tells you so rather than returning nonsense.

Adding a password

Hiding a message keeps it secret as long as nobody thinks to check the pixels. For real privacy, combine concealment with encryption by adding a password. When you do, the tool derives a key from your password using PBKDF2 — a deliberately slow function that makes guessing passwords expensive — and uses it to scramble the message before it is written into the image.

The payoff is twofold. First, without the correct password the recovered bytes are meaningless, so even someone who suspects there is a message cannot read it. Second, encryption makes the hidden bits look like random noise, which makes the message far harder to detect in the first place. A random 16-byte salt is stored alongside the message so the same password always reproduces the right key, while two identical messages never produce identical hidden data.

Why the download must be a PNG

This is the single most important thing to understand about image steganography: the output is always a PNG, and it must stay a PNG. PNG is a lossless format — it records every pixel exactly as it is, including the lowest bits that carry your message. JPG, by contrast, is lossy: to make files small it throws away detail and rearranges pixels in blocks. That process obliterates the hidden bits. If you take a steganographic PNG and re-save it as a JPG, the message is gone, with no way to recover it.

How much can you hide?

Capacity scales with the number of pixels. Each pixel offers three usable bits (one per colour channel), so eight pixels store one byte — roughly one character of plain text. An 800×600 image therefore holds about 180,000 characters, and a typical phone photo holds millions. The tool shows a live capacity meter as you type, so you will know immediately if a message is too long for the image you chose. If you run out of room, pick a larger picture.

Practical uses and honest limits

People use image steganography for fun puzzles and scavenger hunts, for passing private notes in plain sight, for invisibly marking their own artwork, and for sending a short secret to a friend without it being obvious that a secret was sent at all. Paired with a password, it is a genuinely strong way to keep a short message confidential.

It is not magic, though. LSB steganography is well known, so a determined analyst with the right tools can sometimes detect that an image has been modified, even if they cannot read an encrypted payload. Heavy image processing — resizing, filtering, re-compression — will damage or destroy the message. And as with any tool, the weakest link is usually how the file is shared: send the PNG directly, not through a service that re-encodes it.

Hiding and extracting with this tool

The tool has two modes. In Hide message, you drop a cover image, type your secret, optionally set a password, and download the resulting PNG. In Extract message, you drop an image that may contain a message, enter the password if one was used, and reveal the text — ready to copy. Everything runs in your browser on your own device, so you can experiment freely. Drop in a photo above and try hiding a short note to see how completely it disappears.