StegoToolkit
70+ steganography tools · 4 CTF forensics tools · 7 more coming soon

Free Online Steganography Tools

Two toolkits in one platform: hide & extract hidden data in 20+ file formats, and a CTF Forensics Lab to analyze, inspect, and solve steganography challenges.

AES-256 Encryption
Files Never Leave Your Browser
No Account Required

Popular Steganography Tools

Most-used tools — no sign-up, no uploads

CTF Tool

StegSolve Online

Full StegSolve.jar in your browser — no Java, no install.

28 bit planes across R/G/B/A channels
Chi-square + QR + PNG chunk auto-scan
Open tool
Image

Image Steganography Extractor

Extract hidden data from images. Auto-detect, bit plane viewer, CTF.

Auto-detect 8 algorithm configs
24-plane bit plane viewer
Open tool
CTF Tool

zsteg Online

zsteg-style LSB channel scanner for PNG and BMP. No Ruby, no install.

Every bit/channel/order combination scanned
zsteg's exact output format
Open tool
Analyzer

Steganography Analyzer

Detect hidden steganographic content using Chi-Square, RS Analysis and Sample Pairs.

4 statistical tests + fusion score
Bit plane viewer (24 planes)
Open tool
Image

Text-in-Image Extractor

Extract hidden text from images. Auto-detect, brute-force, CTF flag detection.

Auto-detect algorithm config
CTF flag & entropy detection
Open tool
Other

Steganography Detector

Detect hidden steganography using 3 statistical tests (chi-square, RS analysis, Sample Pairs).

4-algorithm fusion (StegExpose method)
Payload size estimate + method fingerprint
Open tool
Image

LSB Extractor

Extract LSB-encoded hidden data from PNG, JPEG, BMP, or WebP images.

Sequential & PRNG scatter modes
Bit depth 1–4 per channel
Open tool
Audio

Audio Steganography Extractor

Extract hidden data from WAV steganography with CTF flag detection.

Auto-detect LSB bit depth
AES-256 decryption
Open tool
Image

Text-in-Image Hider

Hide secret text inside PNG or JPEG images using sequential LSB, scatter LSB, or edge-priority embedding.

3 embedding algorithms
AES-256 encryption
Open tool
Steghide

Steghide Extractor

Extract steghide-hidden data from a JPEG, WAV, AU or BMP; cross-checked against steghide 0.6.0.

Reads files made by steghide
JPEG, WAV, AU and BMP carriers
Open tool
CTF Tool

Polyglot File Analyzer

Detect multiple file formats hidden in one file — PNG+ZIP, JPEG+PDF, and more.

Binwalk-compatible signature scan
Byte map + file extraction
Open tool
Image

Image Steganography Hider

Hide secret text or files inside PNG, JPG, or BMP images.

LSB, Adaptive LSB, DCT, Spread Spectrum
AES-256 encryption
Open tool

What is Steganography?

Steganography is the art of hiding information inside ordinary files so the hidden data is completely invisible to the casual observer. Unlike encryption — which makes data unreadable — steganography hides the very existence of the secret message.

A message can be hidden by tweaking pixel LSBs in an image, modifying audio sample bits, injecting data into PDF metadata, or embedding bits in whitespace characters of plain text. StegoToolkit pairs all of this with AES-256-GCM so hidden data is both invisible and unreadable without the password.

1
Upload a carrier file
Image, audio, PDF, video, or text — the innocent-looking container.
2
Enter your payload
Type a message or upload a file. Add an AES-256 password for encryption.
3
Embed & download
The steganographic algorithm hides the data. Download your stego file.
4
Share & extract
The recipient uses the matching extractor (and password) to recover the data.

What is the CTF Forensics Lab?

CTF (Capture The Flag) challenges often hide flags inside files using steganography, polyglot tricks, or metadata injection. The CTF Forensics Lab is a set of analysis tools to help you find them — no installation, no command line required.

Instead of hiding data, these tools exposeit. Identify a file's true type from raw magic bytes even when the extension is wrong, extract all printable strings looking for embedded flags, inspect every byte in a hex view, or dissect a PNG's chunk structure to find hidden payloads.

File Type / Magic Byte Detector
Identify any file's real format from its magic bytes — even with a fake extension.
Strings Analyzer
Extract all printable strings. Auto-highlights CTF flags, Base64, and hex patterns.
Hex Inspector
Full hex + ASCII view. Navigate offsets and search byte patterns in any file.
PNG Chunk Analyzer
Inspect every PNG chunk, verify CRC checksums, and detect hidden tEXt payloads.

Why StegoToolkit?

100% Private

Everything runs in your browser — no uploads, no servers, no personal data collected. Your files never leave your device.

20+ File Formats

PNG, JPEG, BMP, GIF, WebP, WAV, MP3, MP4, PDF, SVG, DOCX, HTML, QR — one platform for every steganography use case.

Military-Grade Encryption

AES-256-GCM encryption built into every encoder. Your hidden data stays unreadable without the correct password.

Common Use Cases

CTF Challenges

Create and solve steganography challenges for capture-the-flag competitions. Full CTF toolkit included.

Private Communication

Embed encrypted messages inside ordinary images or audio files shared over public channels.

Document Watermarking

Embed invisible ownership metadata and tamper-evident audit trails in PDFs and documents.

Security Research

Test steganalysis tools, build benchmark datasets, and study steganographic methods.

Frequently Asked Questions

What is steganography?▾
Steganography is the practice of hiding secret information inside ordinary, non-secret files or messages so that only the sender and intended recipient know the hidden data exists. Unlike encryption (which scrambles data so it's unreadable), steganography hides the very existence of the secret message. Common carrier files include images (PNG, JPEG, BMP), audio (WAV, MP3), video, PDFs, and plain text.
Is StegoToolkit free?▾
Yes — every tool on StegoToolkit is completely free to use. There are no accounts to create, no file size limits, and no hidden fees. All processing runs locally in your browser using JavaScript and WebAssembly.
Are my files uploaded to any server?▾
No. StegoToolkit runs 100% in your browser. Your files are processed entirely client-side using JavaScript and WebAssembly — they never leave your device and are never sent to any server. This means complete privacy for sensitive documents.
What is the best file format for image steganography?▾
PNG is the best format for image steganography because it uses lossless compression, meaning the hidden bits are preserved exactly. JPEG uses lossy compression which destroys LSB-embedded data. For JPEG steganography, use DCT-domain methods like F5 or JSteg which embed data in the frequency domain rather than pixel LSBs.
Can I use StegoToolkit for CTF challenges?▾
Yes — StegoToolkit includes several CTF-specific tools: StegSolve Online (bit plane analysis, brute-force extraction), zsteg Online (LSB channel scanner), Steganography Analyzer (chi-square, RS analysis), Steganography Detector (chi-square, RS analysis, Sample Pairs), and Polyglot File Analyzer (binwalk-compatible). All support CTF flag pattern detection.
How do I extract hidden data from an image?▾
Upload your image to the Image Steganography Extractor or StegSolve Online tool. These tools automatically scan common embedding methods (LSB, DCT, spread spectrum) and display any recovered data. For unknown methods, try the Steganography Analyzer first to identify which algorithm was used.
What encryption does StegoToolkit use?▾
StegoToolkit uses AES-256-GCM (Galois/Counter Mode), the same encryption standard used by governments and the military. When you set a password, your payload is encrypted before it's embedded, so even if someone discovers hidden data exists, they cannot read it without the password.
What is the difference between steganography and cryptography?▾
Cryptography scrambles data to make it unreadable (the hidden message is obvious but unreadable). Steganography hides data inside ordinary files (the message is readable but its existence is hidden). The strongest security approach combines both: encrypt the message first, then hide it steganographically — which is exactly what StegoToolkit does with its built-in AES-256 encryption.
What is a CTF challenge and how does StegoToolkit help?▾
CTF (Capture The Flag) is a cybersecurity competition where hidden 'flags' (strings like flag{...}) are concealed inside files using steganography. StegoToolkit includes: StegSolve Online (28 bit planes across R/G/B/A), zsteg Online (LSB channel scanner, no Ruby), Steganography Analyzer (chi-square, RS analysis), and the CTF Forensics Lab (magic byte detector, strings analyzer, hex inspector, PNG chunk analyzer). Everything runs in the browser — no install, no upload.
What is LSB steganography?▾
LSB (Least Significant Bit) steganography hides data in the lowest bit of each pixel's colour value. Since changing 1 bit out of 8 is imperceptible to the human eye, a large message can be embedded with no visible quality loss. It's one of the most common methods in both real-world use and CTF competitions. StegoToolkit's LSB Extractor, zsteg Online, and StegSolve Online can all detect and extract LSB-hidden data across every bit channel combination.
How do I detect if a file has hidden steganographic data?▾
Start with the Steganography Detector or Steganography Analyzer — they run chi-square, RS analysis and Sample Pairs tests to estimate whether LSB steganography is present. For images, use StegSolve Online to view individual bit planes. For any file, the File Type / Magic Byte Detectorchecks for appended data after the file's end marker, and the Strings Analyzer extracts embedded printable text and auto-highlights CTF flag patterns.

Steganography Toolkit

70+ tools — hide and extract secret data in any file format. AES-256 encrypted. No uploads.

Browse steganography tools

CTF Forensics Lab

4 forensics tools — detect file types, extract strings, inspect hex, analyze PNG chunks. Built for CTF challenges.

Open CTF Forensics Lab