Redmark Forge / Sandbox
Steganography Studio
Explore image steganography, file payload containers, metadata, text hiding, watermarking and integrity checks — all in one browser-first workspace.
✦ Browser-first · No account required
ⓘ
Know what each method actually does
Social platforms may resize or recompress media. PNG LSB data is fragile; appended payloads are detectable and may break file compatibility; metadata can be stripped. Treat social-media recovery as experimental, not guaranteed.
Image LSB · PNG
Encode a small file in PNG pixel bits, or recover it from an encoded PNG.
Use a lossless PNG. JPEG conversion, resizing, filters and social-media processing can destroy LSB payloads.
Encoder and decoder must use the same channel.
Payload is stored as bytes. Large payloads need a large carrier and can create visible/statistical artifacts.
When set, payload bytes are encrypted with AES-GCM using a password-derived key.
Images, PDFs, Office files, archives, audio and video can be used as byte containers. This does not guarantee the carrier will remain playable/openable or the payload will survive re-encoding.
Append mode is not invisible steganography: file size and trailing bytes may reveal it. Some software strips trailing data or rejects modified files.
Zero-width characters can be removed by editors, social platforms, sanitizers or copy/paste. This is not encryption.
Choose a file, then inspect it. Files are read locally in your browser.
This lightweight inspector reports browser-visible file metadata and common signatures. It does not claim to detect every steganography technique or parse every EXIF/XMP/PDF/Office field.
This is a visible watermark. Robust invisible DCT watermarking requires a specialized codec implementation and is not represented as supported by this build.
🔐
Recommended for complete files
Encrypt your whole file in this browser, download the .rfsafe package, upload that package to a byte-preserving host, then share the host link on Instagram. Send the passphrase separately. This app does not upload files or create share links for you.
Any file type is supported: PDF, ZIP, documents, images, audio, video and more. The filename and MIME type are stored inside the encrypted package.
Use at least 10 characters; 14+ is better. Keep it out of the Instagram message that contains the link.
Next, upload the downloaded package yourselfCheck the host's sharing permissions and avoid hosts/settings that transform or preview-repackage the downloaded file. Test downloading the package before sending it.
After uploading the .rfsafe package, paste its share/download link here. Check that the recipient has permission to download it.
Ready. Choose a method above.
Embeds a short text, link or key in 8×8 image-block frequency coefficients, with repeated bits, majority voting and a CRC integrity check. It may survive some JPEG recompression when dimensions and alignment stay stable; resizing, cropping, filters or a changed block grid can still destroy it. Do not rely on it until you test the actual Instagram download.