Features

How StegoSafe protects a personal secret: Face ID or Touch ID with device-bound protection, k-of-n threshold recovery, AES-256-GCM, and storage that never leaves your devices.

Core Security Features

🙂 Face ID, Touch ID and device-bound protection

The strongest mode binds access to this Apple device and its current enrolled biometrics. Authentication is handled locally by Apple; StegoSafe never receives biometric data.

Device-bound access with Face ID or Touch ID
Changing the enrolled biometrics invalidates device-bound access
Optional PIN adds a second factor
Portable password mode remains available for cross-device recovery

🔐 AES-256 Encryption

Authenticated encryption (AES-256-GCM): a wrong key does not produce wrong plaintext, it fails.

Advanced Encryption Standard with 256-bit keys
PBKDF2-SHA256 key derivation, 600,000 iterations
GCM authenticated mode — a damaged or altered image is detected, never silently decrypted into the wrong data

🔄 Shamir Secret Sharing

Spread one secret over several photos: any k of n bring it back, and fewer than k reveal nothing at all.

Threshold cryptography (k-of-n sharing)
Polynomial interpolation over finite fields
Configurable share requirements (2-of-3, 3-of-5, etc.)

🖼️ Deniable image format

The secret is written into the least-significant bits of the pixels — and nothing else is. No header, no marker, no signature. A side effect of how it is stored, not the reason to use it.

No header or marker for a scanner to match on
Wrong password, plain photo and damaged file fail identically
PNG output (lossless); reads any common input format
Capacity shown before you hide

🛡️ Privacy by Design

No cloud storage, no data collection, completely offline operation.

Zero telemetry or analytics
Local-only processing
No network requirements for core functionality

Platform-Specific Features

📱🖥️ iPhone, iPad & Mac — one purchase

$49.99 USD
  • Universal iOS + iPadOS app (available now)
  • Native macOS app (available now)
  • Face ID / Touch ID protection
  • Face ID / Touch ID + PIN
  • Single image or split across several photos (k-of-n)
  • Deniable image format (2.1)
  • Native SwiftUI interface

🔒 Built for secrets you cannot afford to lose

Standard, well-reviewed primitives — AES-256-GCM, PBKDF2-HMAC-SHA256, Shamir over GF(2⁸) — with the keys held on your own devices and nothing sent anywhere.

Get Started Today

Technical Specifications

Supported Image Formats

  • Input: PNG, JPEG, BMP, HEIC, and other mainstream formats
  • Output: PNG format (lossless compression, optimal for steganography)
  • Processing: Automatic format conversion for optimal steganography results

Encryption Standards

  • Algorithm: AES-256-GCM (authenticated encryption)
  • Key Derivation: PBKDF2-SHA256
  • Salt: 16-byte cryptographically secure random
  • Iterations: 600,000
  • Integrity: GCM authentication tag over the payload, with the container header bound as additional authenticated data

Secret Sharing

  • Algorithm: Shamir’s Secret Sharing over GF(2^8)
  • Threshold: Configurable k-of-n schemes
  • Polynomial: Secure random coefficient generation
  • Reconstruction: Lagrange interpolation

System Requirements

  • iOS / iPadOS: iOS 15.0+ (iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later) - Available Now
  • macOS: macOS 12.0+ (Monterey and newer) - Available Now
  • Windows / Linux: not offered. StegoSafe’s device-bound modes are built on the Apple keychain’s biometric access control — a key marked this-device-only and released solely by the current enrolled Face ID or Touch ID, so changing the enrolled set invalidates it. Nothing outside Apple’s platform offers that guarantee; a version without it would be a different, weaker product.