What Is Steganography?
Steganography is the practice of hiding the existence of a message inside ordinary-looking content, such as an image, an audio clip, or a block of text. Unlike encryption, which scrambles a message so it cannot be read, steganography aims to conceal that any secret message is there at all. The word comes from Greek for "covered writing."
The distinction is crucial. Encryption answers "even if you see this, you can't read it." Steganography answers "you don't even know there's anything to look at." An encrypted message is obviously a secret; a steganographic message looks like an innocent photo or a normal paragraph. Used together, they are powerful: encrypt first, then hide the ciphertext.
How steganography works
The core idea is to embed hidden data in the parts of a carrier that a human (or a casual inspection) will not notice. A classic digital technique is least-significant-bit (LSB) embedding in an image: each pixel's color value is stored as a number, and flipping its lowest bit changes the color so slightly that the human eye cannot tell — yet those lowest bits, across thousands of pixels, can carry a hidden payload. Similar approaches exist for audio (tiny changes in samples) and video.
Text and linguistic steganography
Hiding data in text is harder because text has little redundancy, but it is possible. Techniques include using invisible or look-alike Unicode characters, subtle variations in spacing or synonyms, or generating natural-looking sentences whose word choices encode bits. The goal is a message that reads normally to anyone who is not specifically decoding it.
Steganography vs. cryptography
Cryptography protects the content of a message; an observer sees that a secret exists but cannot read it. Steganography protects the existence of the message; ideally an observer never suspects there is a secret. In hostile environments where possessing an encrypted message is itself dangerous or suspicious, hiding the message can matter as much as protecting its contents. Best practice is to combine them: encrypt the payload, then embed the ciphertext.
Why steganography matters
In places where using encryption draws attention — where an obviously scrambled message can trigger scrutiny, device searches, or worse — the ability to communicate through innocuous-looking content is a real safety tool. It supports plausible deniability and lets a message slip past filters that block or flag recognizable encrypted traffic. For journalists, activists, and people under surveillance, blending in can be safer than standing out.
Common misconceptions
- "Steganography is a kind of encryption." They are different goals: hiding existence vs. hiding meaning. Steganography alone does not make the payload unreadable if it is discovered.
- "Hidden means secure." If a hidden message is not also encrypted, anyone who detects and extracts it can read it. Combine the two.
- "It's undetectable." Skilled analysts use steganalysis — statistical tests and tooling — to detect hidden data. Steganography raises the bar; it is not a guarantee.
A brief history of steganography
Hiding messages is far older than computers. The Greek historian Herodotus described a message tattooed on a slave's shaved scalp, hidden once the hair grew back, and another written on a wooden tablet beneath its wax coating. Invisible inks made from lemon juice or milk, revealed by heat, were used for centuries. During the World Wars, spies shrank pages of text into microdots the size of a printed period, and censors watched for messages hidden in the wording of innocent-looking letters. The digital era simply moved the same idea into new carriers: images, audio, video, network traffic, and text. What has remained constant across three thousand years is the goal — not to make a message unreadable, which is cryptography's job, but to make an observer overlook that any message exists. Modern practice combines both: the hidden payload is encrypted, so even discovery does not reveal its meaning.
How OSHI uses steganography
OSHI includes text steganography and covert-channel features that let sensitive content be hidden inside ordinary-looking messages, on top of OSHI's standard end-to-end encryption. The payload is encrypted first and then concealed, following the encrypt-then-hide best practice. See the covert channels feature for details, and the anonymous messaging guide for how it fits a wider privacy strategy. OSHI is open source under the MIT license.
Related guides & features
End-to-end encryption Anonymous messaging What is metadata What is Tor Covert channels All OSHI featuresFrequently Asked Questions
What is steganography?
Steganography is the practice of hiding the existence of a message inside ordinary-looking content such as an image, audio, or text, so that an observer does not even realize a secret message is present.
How is steganography different from encryption?
Encryption hides the meaning of a message, so a viewer knows a secret exists but cannot read it. Steganography hides the existence of the message itself. They are strongest when combined: encrypt first, then hide.
How does steganography hide data in an image?
A common method is least-significant-bit embedding, which changes the lowest bit of pixel color values by an amount too small for the eye to notice, letting those bits across many pixels carry a hidden payload.
Is steganography undetectable?
Not entirely. Analysts use steganalysis, including statistical tests, to detect hidden data. Steganography raises the difficulty of discovery but is not an absolute guarantee, which is why the payload should also be encrypted.
Does OSHI support steganography?
Yes. OSHI includes text steganography and covert-channel features that hide sensitive content inside ordinary-looking messages, with the payload end-to-end encrypted before it is concealed.
Private messaging, by design
OSHI is a free, open-source, Swiss encrypted messenger. No phone number, no ads, no tracking.