CJaraTech /

TECH TOOL / 05

Image SteganographyHide Photos Inside Photos

Securely conceal images inside other images, directly in your browser.

🔒 100% Browser-Based — Images Are Never Uploaded
Hide an image
01

Choose a cover.

Up to 12 megapixels and 32 MiB. The cover is converted to PNG; its original file stays unchanged.

02

Choose a secret.

Up to 8 MiB and 12 megapixels. Original file bytes are preserved unless you explicitly prepare a smaller copy below.

Secret too large? Prepare a smaller copy.

Optional: resize or re-encode the secret photo. This changes the recovered file. JPEG/WebP compression can reduce quality; JPEG flattens transparency onto white. PNG resizing is lossless only with respect to the resized pixels, not the original file.

Check the fit.

1 BIT / RGB CHANNEL
Cover resolution
Choose a cover
Embedding capacity
—
Secret file size
Choose a secret
Payload with metadata
—

Choose both images to check whether the secret fits.

Capacity comes from pixel dimensions and available opaque RGB channels—not the cover’s compressed file size. Partially transparent pixels are skipped to preserve PNG round trips. Header, metadata, and integrity/encryption overhead count toward usage.

03

Choose protection.

Anyone with this tool can reveal a passwordless payload. Use encryption when the contents need to remain private.

How Secure Is This Tool?

Concealment and encryption do different jobs. Steganography hides information in another image. Passwordless mode provides concealment, not cryptographic confidentiality. It uses a SHA-256 integrity check to detect corruption; this does not stop someone from replacing the payload.

Password-protected mode uses AES-256-GCM authenticated encryption. A key is derived using PBKDF2-HMAC-SHA256 with 600,000 iterations, a fresh random salt, and a unique random nonce for each operation. A strong, unique password matters. No password is stored in the PNG, and the website cannot recover a lost password.

Hidden does not mean undetectable. Steganalysis may detect that an image contains hidden data. Compatible metadata identifies this tool’s format; this is not an anonymity tool.

Preserve the PNG. Editing, resizing, screenshotting, color conversion, or recompression may destroy the payload. Keep the original PNG downloaded from this tool for reliable recovery.

All processing is local. Photos, passwords, and recovered images are not uploaded, logged, saved to a database, or placed in browser storage by this tool. Reset and leaving the page release image URLs and clear accessible working buffers and password fields where possible. Browser-managed memory and downloaded files cannot be securely erased by a web page.

Supported files: non-animated PNG, JPEG, and WebP. Encoding produces PNG only. Files are limited to 12 megapixels and 8,192 pixels per side, with a 32 MiB limit for covers/encoded PNGs and 8 MiB for secret inputs. Browsers may have lower practical memory limits; try smaller images if processing fails.

Read the versioned payload specification ↗