SteganoVault

Universal LSB steganography suite. Hide AES-256 encrypted payloads, then forensically extract hidden data from any LSB-stego image — regardless of what tool created it. 100% local, zero server contact.

Drop your carrier image here

PNG, JPG, WEBP (Will be converted to lossless PNG)

Uses AES-256-GCM + PBKDF2 key derivation. Highly secure.

How to Use SteganoVault

Four powerful tools in one page. Follow the numbered steps below — each section has an illustration and a plain-English explanation.

1

Hide a Secret Message Inside an Image

Use the Hide Data (Encode) tab to invisibly embed any text into a carrier image using LSB steganography.

carrier.png any PNG/JPG/WEBP "Top secret msg" + optional password AES-256-GCM encrypt LSB embed stego.png looks identical
  1. 1 Click the Hide Data (Encode) tab at the top of the app.
  2. 2 Drag and drop — or click to select — any PNG, JPG, or WEBP image as your carrier. The larger the image, the more text you can hide. A capacity bar shows how full the image is as you type.
  3. 3 Type your secret message in the Secret Message box. You can paste anything — passwords, notes, coordinates, source code, anything text-based.
  4. 4 Optional but recommended: enter a password. The message will be encrypted with AES-256-GCM and a PBKDF2-derived key before being embedded. Without a password, the raw text is embedded (still invisible to the eye, but not encrypted).
  5. 5 Click Encrypt & Embed Data. A PNG file downloads automatically. The image looks visually identical to the original — the secret is in the least significant bits of each pixel's colour channels.
2

Reveal a Hidden Message from an Encoded Image

Use the Reveal Data (Decode) tab to extract and decrypt the payload from a SteganoVault-encoded PNG.

stego.png Read pixel LSBs reconstruct bytes AES-256-GCM decrypt (if pwd) "Top secret msg" ✓ recovered
  1. 1 Click the Reveal Data (Decode) tab.
  2. 2 Drop in the stego PNG that was produced by SteganoVault. Important: it must still be a lossless PNG — if it was re-saved as JPEG the LSB data will have been destroyed by compression.
  3. 3 If the message was encrypted, enter the same password that was used during encoding.
  4. 4 Click Extract & Decrypt Data. The message appears in the green box below. Click Copy to copy it to your clipboard.
3

Visualize Hidden Bit Patterns (LSB View)

Use the Analyze LSB tab to visually reveal whether an image's least-significant bits show signs of tampering.

input image For each pixel: R,G,B LSB × 255 (amplify to visible) clean image → random noise stego image → structured bits
  1. 1 Click Analyze LSB and drop in any image you want to inspect.
  2. 2 Click Visualize Hidden Data Bits. The tool amplifies each pixel's least significant bit to full brightness (0 → black, 1 → white).
  3. 3 Reading the result: a natural photograph will show random salt-and-pepper noise — no pattern. A stego image will show structured regions, smooth gradients of white/black blocks, or unusual geometric patterns where data has been written.
  4. 4 This is a visual-only detection. For a rigorous statistical test, use the Forensic Extract tab (Step 4) which also runs Chi-Square analysis.
4

Forensically Extract Data from Any Stego Image

The Forensic Extract tab is a universal scanner — it brute-forces 80 extraction permutations and runs a Chi-Square statistical attack on any image, regardless of which tool encoded it.

unknown stego image any tool, any format 10 channel orders × 4 bit-depths × 2 scans Chi-Square analysis per channel (R, G, B) File signature scan PNG, ZIP, PDF, EXE… Rank by readability highlight file headers attempt AES decrypt 80 candidates RGB 1-bit row ██░ GBR 2-bit col █░░ R-only 1-bit â–'â–'â–' + hex dump each + χ² verdict
  1. 1 Click the Forensic Extract tab and drop in any suspicious image — it doesn't need to have been encoded by SteganoVault.
  2. 2 Optional: if you suspect the payload is AES-encrypted, enter a candidate password. The scanner will attempt to decrypt any matching payload structure it finds.
  3. 3 Click Run Universal Forensic Extraction. The scanner tries every combination of: 10 channel extraction orders (RGB, RBG, GRB, GBR, BRG, BGR, R-only, G-only, B-only, RGBA), 4 bit depths (1–4 LSBs), and 2 scan patterns (row-by-row and column-by-column). That is 80 total permutations.
  4. 4 The Chi-Square report appears first — it tells you statistically whether any channel has been modified, even if the data cannot be decoded. A ratio below 0.5 is strong evidence of steganography.
  5. 5 Below that, the top 20 extraction candidates are ranked by readability score. Candidates with a detected file signature (PNG, ZIP, PDF, EXE, etc.) are highlighted in purple. Expand any result to see a hex dump or a plain-text preview.
  6. 6 Why must I serve it from a web server? Browsers block canvas pixel-reading (getImageData) when a page is opened as a local file:// URL. Serving from localhost or any https:// host removes this restriction. Run python3 -m http.server 8080 in the folder containing this file, then open http://localhost:8080.

Frequently Asked Questions

What is LSB steganography?

LSB (Least Significant Bit) steganography hides data by replacing the lowest bit of each colour channel in an image pixel. A pixel's colour value changes by at most 1 out of 255 — completely imperceptible to the human eye — but those bits can carry a full message.

How secure is the encryption?

SteganoVault uses AES-256-GCM with a PBKDF2-derived key (100,000 iterations, SHA-256 hash). The salt and IV are randomly generated per message. This is the same encryption standard used by governments and financial institutions. Without the correct password the ciphertext is computationally infeasible to break.

Does any data leave my device?

No. Everything runs entirely in your browser using the Web Crypto API and HTML Canvas. No image, message, or password is ever transmitted to any server.

Why does it only accept PNG for decoding?

JPEG compression alters pixel values to reduce file size, which destroys the precise LSB values the payload is stored in. PNG is lossless — every pixel value is preserved exactly. Always share the stego image as PNG.

Can the Forensic tab detect any stego tool's output?

It covers the vast majority of common LSB implementations — Steghide, OpenStego, SilentEye, StegSolve-style tools, and custom scripts that use sequential RGB encoding. Tools that use DCT-domain embedding (like Outguess or F5 for JPEG) operate differently and are beyond LSB extraction scope, though the Chi-Square analysis will still flag statistical anomalies in those images.

How much text can I hide in an image?

At 1-bit LSB depth (the default), each pixel stores 3 bits (one per R, G, B channel). A 1920×1080 image has roughly 2,073,600 pixels, giving about 777 KB of raw capacity — or roughly 750 KB of text after encryption overhead. The real-time capacity bar in the Encode tab shows exactly how much you have left.

About SteganoVault - Universal LSB Steganography Suite | Hide & Detect Secret Data in Images

SteganoVault - Universal LSB Steganography Suite | Hide & Detect Secret Data in Images is part of Envizion's browser-based tool collection. The page is arranged so the working controls stay at the top, supporting notes sit below the tool, and the shared Yacob Digital footer remains at the bottom of the document. Use the page by choosing the relevant inputs, checking any options, and waiting for the result area or download button before leaving. Most processing is designed to happen locally in the browser where possible, so larger files can take time and the tab should stay open. The notes here are also included to make the page clearer for first-time visitors and easier to understand from search results.

Ad

🔓 Watch this short ad to unlock your download

30s
Sponsored
Sponsored
← Back to Tools