Hidden data in images: the curious world of steganography
We've written before about the hidden metadata your photos carry — the invisible record of when and where a picture was taken. But there's a stranger, older idea lurking near that one: the deliberate hiding of secret information inside an ordinary image, tucked into the picture itself so that nothing looks amiss. This is called steganography, and it's one of the more fascinating corners of how images and secrecy intersect.
Hiding in plain sight
Steganography comes from Greek words meaning "covered writing," and its goal is different from what most people picture when they think of secrecy. It isn't about scrambling a message so nobody can read it. It's about hiding the fact that there's a message at all. A steganographic image looks exactly like a normal photo of a cat or a sunset — because it is one — while quietly carrying concealed information that a casual observer would never suspect is there.
The distinction that makes it click: encryption hides the contents of a message; steganography hides its existence. Encryption produces obvious gibberish that announces "a secret is here, you just can't read it." Steganography leaves no such trace — it looks like nothing is going on at all.
An ancient idea, not a modern one
Long before computers, people were hiding messages in plain sight. Ancient accounts describe messages tattooed on a messenger's shaved scalp, then covered by regrown hair; secret writing in invisible ink between the lines of an innocent letter; and microscopic text shrunk down to the size of a dot and hidden in ordinary correspondence. The impulse is timeless: sometimes the safest secret is one nobody knows to look for. Digital images simply gave this old idea a vast new hiding place.
How the digital version works, in principle
You don't need to be technical to grasp the core trick. A digital image is a grid of pixels, and each pixel's colour is described by numbers. Those numbers carry far more precision than your eye can perceive — the difference between two almost-identical shades of blue is completely invisible to a human looking at a photo.
Steganography exploits that headroom. By making tiny adjustments to the least significant part of those colour numbers — changes so small the image looks identical — information can be woven into the pixels themselves. The picture appears untouched, but the pattern of those minuscule tweaks spells out hidden data to anyone who knows to reassemble it. Because photographs are already full of natural, random-looking variation, these tiny changes blend in and leave the image looking perfectly ordinary.
That's the concept at a high level. The practical details of doing it are a field of their own — this article is about understanding the idea, not a manual for carrying it out.
Where it's used — for better and worse
Like most powerful techniques, steganography is neither good nor bad in itself; it depends entirely on who's using it and why.
On the legitimate side, related ideas power digital watermarking, where imperceptible markers are embedded in images, music, or film to trace ownership and catch piracy. Researchers and privacy advocates study it to understand how information can move unseen. It has a place in the history of protecting communication under oppressive regimes, where the mere existence of an encrypted message could be dangerous, and hiding it entirely was safer.
On the darker side, the same invisibility is attractive to people with something to hide. Steganography has been used to smuggle stolen data out of organisations without tripping alarms, to conceal instructions within innocuous-looking images, and by malicious software to disguise its communications. This is precisely why it's an active subject in cybersecurity: defenders need to understand the technique to detect its misuse.
Can you tell if an image is hiding something?
Not by looking — that's the entire point. A well-made steganographic image is visually indistinguishable from an ordinary one. Detecting hidden data is a specialised discipline called steganalysis, which uses statistical analysis to spot the faint, telltale fingerprints that hiding data can leave in a file's underlying numbers. It's a genuine cat-and-mouse game: as hiding methods grow more sophisticated, so do the tools built to catch them, and neither side ever fully wins.
Why it's worth knowing about
You're unlikely to encounter steganography in everyday life, and this isn't a reason for alarm about the photos in your camera roll. But it's a striking reminder of a theme that runs through all digital images: a file can carry far more than the picture you see. Sometimes that's harmless metadata quietly noting your camera model. Sometimes it's location data you'd rather not share. And, occasionally, it's information someone deliberately concealed. The image on your screen is often only the part that's meant to be seen.
That larger idea — that images quietly carry more than meets the eye — is exactly why it's worth understanding what your own photos contain, and being able to check.
See what your own photos are carrying
Our EXIF viewer shows the hidden metadata in a photo — camera, date, and location — and lets you strip it out, all in your browser with nothing uploaded.
Open the EXIF viewer & remover →