Phantomby Everything Is 9

Free tool · encrypted notes, hidden in a picture

Hide anything in plain sight.

Write notes, passwords, recovery codes or an AI session you want to carry over. Phantom locks them with your passphrase and tucks them into the pixels of a picture. To anyone else it's just an image. It all happens in this browser tab: nothing is uploaded, and there's no server to hack.

AES-256GCM encryption
600kPBKDF2 rounds
0 bytesSent to a server
±1Most a colour changes

The vault

How it works

  1. Lock

    Your passphrase is stretched 600,000 times into a 256-bit key, and your notes are encrypted with AES-GCM, which also catches any tampering.

  2. Hide

    The locked bytes replace the last bit of each red, green and blue value in the picture. No colour moves by more than 1 out of 255.

  3. Carry

    Keep the PNG anywhere: a drive, an email, a USB stick. Open it here with the passphrase to read, edit and lock again.

Good to know. There's no reset: lose the passphrase and the notes are gone for good. The encryption is strong, but someone with forensic tools could tell a picture carries hidden data (they still can't read it). Phantom is for keeping things private, not for hiding that you have secrets.

Questions

Is it really private?

Yes. Locking and hiding happen in this browser tab with your browser's built-in encryption (the Web Crypto API). Phantom has no server: your notes, passphrase and picture never leave your device.

What if I forget the passphrase?

Then nobody can open the picture, including us. There's no reset and no back door. Keep the passphrase somewhere safe, like a password manager.

Can I send the picture by text or social media?

Send it as a file instead: an email attachment, Google Drive, AirDrop or a USB stick. Texting apps and social media shrink or convert photos, which changes the pixels and wipes what's hidden.

How much can one picture hold?

About 3 bits per pixel, so a 1,000 × 1,000 picture holds roughly 366 KB, which is a lot of text (your notes are compressed first). Skip the cover picture and Phantom makes one just big enough.

Which pictures work?

Any picture your browser can open works as the cover. What you save is always a PNG, because PNG keeps every pixel exactly; JPEG would blur away the hidden bits.