StegoToolkit

Audio Steganography Hider

Hide text or files inside WAV or MP3 audio with AES-256 encryption, Reed-Solomon ECC, capacity meter, and SNR quality report. 100% client-side.

WAV + MP3
LSB / Echo / Phase / Spread
AES-256 + Reed-Solomon
100% client-side

Drop a WAV or MP3 file here or click to browse

PCM WAV (8/16/24/32-bit) · MP3 (auto-converted) · Max 500 MB

MP3 files are decoded to PCM locally via Web Audio API

100% Client-Side Processing

Your audio is processed entirely in this browser tab. Nothing is uploaded. MP3 files are decoded to PCM locally via the Web Audio API.

How to Hide a Message in Audio (4 steps)

  1. Upload a WAV or MP3 carrier file — MP3 is auto-converted to WAV in your browser
  2. Enter a text message or attach any file as the hidden payload
  3. Choose an algorithm — LSB Audio (fastest & highest capacity), Echo Hiding, Phase Coding, or Spread Spectrum
  4. Optionally enable AES-256 encryption and Reed-Solomon error correction — then click Encode and download

Audio Steganography Algorithms — What This Tool Handles

MethodTechniqueQuality / CostBest For
LSB Audio (1–4 bit)Replaces N least-significant bits per sample~52 dB SNR at 1-bit — inaudibleDefault — fastest, highest capacity
Echo HidingAdds imperceptible echoes at bit-specific delays~40–46 dB SNR — inaudibleMP3-safe — survives lossy compression
Phase CodingEncodes bits in absolute FFT phase of segments~48–54 dB SNR — inaudibleMP3-safe, medium capacity
Spread SpectrumSpreads payload across full frequency spectrum~58–65 dB SNR — excellentHardest to detect statistically
AES-256-GCMPBKDF2 + random salt/IV encryption+32 bytes overheadAvailable on all algorithms

Frequently Asked Questions

Will the audio sound different after encoding?

No. At LSB 1-bit the SNR is ~52 dB — completely inaudible. Echo Hiding and Phase Coding are also imperceptible. Spread Spectrum adds noise at amplitude 0.002, well below the hearing threshold.

Which algorithm should I use?

LSB Audio for most use cases — fastest and highest capacity. Echo Hiding or Phase Coding if you need the encoded file to survive MP3 compression. Spread Spectrum if statistical detectability matters (CTF, security research).

What audio formats can I use?

PCM WAV (8/16/24-bit, mono or stereo) and MP3 (auto-converted to WAV via ffmpeg.wasm). Convert FLAC/OGG to WAV first. If you need the encoded output to survive MP3 re-compression, use Echo Hiding or Phase Coding — LSB data is destroyed by lossy compression.

Is my audio uploaded anywhere?

Never. All encoding runs entirely in your browser using WebWorkers and the Web Crypto API. Your audio never leaves the device.

How much data can I hide?

Depends on algorithm. LSB: ~660 KB in a 1-min 44.1 kHz stereo WAV at 1-bit. Echo Hiding: ~1 KB per minute. Phase Coding: ~2 KB per minute. Spread Spectrum: ~15 KB per minute. The capacity meter updates live as you configure.

What is Spread Spectrum seed?

The seed controls which pseudorandom chip sequence is used to spread the payload. The decoder must use the same seed. Think of it as a second independent security layer beyond encryption.

How do I decode the result?

Open the Audio Extractor tool, upload the encoded WAV, select the same algorithm (or use Auto-Detect), and enter the password if you used one.

Can audio steganography be detected?

LSB can be detected by chi-square analysis at high capacity. Spread Spectrum is statistically indistinguishable from thermal noise. Using AES-256 encryption before embedding makes statistical analysis harder regardless of algorithm.