stegcloak

StegCloak is a pure JavaScript library that hides a secret string inside ordinary text by encoding it with six Unicode zero‑width characters. The secret is first compressed and then encrypted with AES‑256‑CTR, optionally protected with an HMAC for integrity. Because the encoding uses invisible characters, the resulting cover text appears unchanged in environments such as tweets, emails, or messaging apps.

The package can be used as a Node.js API, a command‑line tool, or a web interface that runs in the browser. The CLI supports reading cover and secret data from files, toggling encryption or integrity checks, and writing the cloaked output to a file or the clipboard. Configuration can be supplied via a file or the STEGCLOAK_PASSWORD environment variable.

Developers who need to embed covert data in plain‑text channels—such as watermarking strings, transmitting hidden scripts, or storing small files as invisible payloads—can employ StegCloak to achieve fast, reversible steganography without altering the visible appearance of the host text.