Is PGP Tool safe to use?

Yes. PGP Tool runs 100% in your browser — no data is ever sent to a server. All encryption and decryption happens client-side using openpgp.js. The code is open source under MIT license.

Can I use PGP Tool offline?

Yes. PGP Tool is a Progressive Web App (PWA) that works fully offline once installed. Enable air-gap mode to disable all network requests for maximum security.

What encryption algorithms does PGP Tool support?

PGP Tool supports RSA (2048–4096 bit) and ECC (Curve25519, P-384) for PGP key generation, AES-256-GCM for symmetric encryption and secure paste, and PBKDF2 with SHA-256 for key derivation.

How does the password generator work?

The password generator uses the browser's crypto.getRandomValues() API for cryptographically secure randomness. It supports random character passwords (6–128 chars) and EFF-wordlist passphrases (3–10 words). No passwords are stored or transmitted.

How does Secure Paste work without a server?

Secure Paste encodes the paste content directly into the URL fragment (after the # symbol). Optionally, content is encrypted with AES-256-GCM before encoding. The URL IS the paste — no server or database is involved.

How much data can I hide in an image?

About one bit per color channel per pixel. A 1024×1024 PNG can hide roughly 384 KB of payload (3 channels × 1 bit × 1M pixels / 8). The tool warns if your message is too large for the chosen image.

Will the image look different?

Visually no — flipping the lowest bit changes each color value by at most 1, which is imperceptible. Statistically yes: tools designed for steganalysis can detect LSB modifications via histogram analysis.

JPEG uses lossy compression that destroys LSB data on save. PNG is lossless, so the embedded bits survive intact. The same restriction applies to lossy formats like WebP-lossy.

Can social media platforms read my stego image?

They cannot read it without the extraction tool, but they often re-encode uploaded images (to JPEG, with stripped metadata) which destroys the payload. Send stego-images as direct file attachments, not via image-hosting services.

Is steganography legal?

In most jurisdictions, yes — it is just data manipulation. Some countries restrict cryptography or anonymizing tools more broadly. Do your homework before traveling with stego content.

Hide secret text inside images (LSB steganography)

Embed a hidden message inside a PNG image using least-significant-bit steganography. The image looks identical to the eye but carries a secret payload.

Steganography hides the existence of a message rather than just its contents. The LSB technique replaces the lowest bit of each color channel in a cover image with bits of your secret message — invisible to a casual viewer, recoverable only with the right tool.

Drop a PNG, type or paste the secret text, and download a stego-image that carries the hidden payload. To extract, drop the stego-image back in and click Extract. Optionally encrypt the secret with PGP before embedding for steganography + cryptography.

LSB steganography defeats casual inspection but not a determined analyst with steganalysis tools. Pair it with encryption when the existence of the secret matters — you do not want a forensic tool to extract the LSB and read your plaintext directly.

Frequently asked questions

How much data can I hide in an image?: About one bit per color channel per pixel. A 1024×1024 PNG can hide roughly 384 KB of payload (3 channels × 1 bit × 1M pixels / 8). The tool warns if your message is too large for the chosen image.
Will the image look different?: Visually no — flipping the lowest bit changes each color value by at most 1, which is imperceptible. Statistically yes: tools designed for steganalysis can detect LSB modifications via histogram analysis.
Why PNG and not JPG?: JPEG uses lossy compression that destroys LSB data on save. PNG is lossless, so the embedded bits survive intact. The same restriction applies to lossy formats like WebP-lossy.
Can social media platforms read my stego image?: They cannot read it without the extraction tool, but they often re-encode uploaded images (to JPEG, with stripped metadata) which destroys the payload. Send stego-images as direct file attachments, not via image-hosting services.
Is steganography legal?: In most jurisdictions, yes — it is just data manipulation. Some countries restrict cryptography or anonymizing tools more broadly. Do your homework before traveling with stego content.