Hide Text in Image (Steganography)
Tuck a message into the pixels of a picture so it looks unchanged, and read it back with the same tool.
Your image and message never leave your device. With a password, the message is encrypted with AES-256-GCM (key from PBKDF2-SHA-256, 600,000 rounds) before it is hidden. Without one, anyone using a steganography tool can read it.
How to hide text in an image
- Choose an image and type your message.
- Add a password to encrypt it (recommended), then download the PNG.
- To read it, open Reveal, choose the PNG and enter the password.
Features
- Least-significant-bit hiding in PNG
- Optional AES-256-GCM password encryption
- Capacity meter
- Reveal mode with clear error messages
- Unicode and emoji supported
- Lossless PNG output
Frequently asked questions
How does it work?
It changes the lowest bit of the red, green and blue values of pixels. Each value moves by at most 1 out of 255, which the eye cannot see, and those bits spell out your message.
Why does my hidden message disappear after sending on WhatsApp?
WhatsApp, Instagram and most social apps recompress photos as JPG, which rewrites the pixels and destroys the hidden bits. Send the PNG as a document or file, or by email or Drive, so it stays byte-for-byte the same.
Is the hidden message secure?
Without a password, anyone with this tool can read it. With a password it is encrypted with AES-256-GCM using a key derived by PBKDF2, so the image alone reveals nothing readable.
How much text can I hide?
About 3 bits per pixel. A 1000 × 1000 image holds roughly 370 KB, far more than any message. The meter shows how much of the image you are using.
Related tools
All Security & Privacy →- Text Encryption Turn a private message into unreadable text that only someone with the password can decrypt.
- File Encryption Lock any file with a password before storing it in the cloud or sending it.
- Metadata Remover Remove hidden information like your location and device details from files before you share them.
- API Key Generator Create random API keys, secrets and tokens from the browser’s secure random generator, one at a time or in bulk.
- Bcrypt Generator Hash a password with bcrypt, test whether a password matches an existing hash, or break a hash into its parts.
- Password Generator Create strong, unique passwords for every account.