Homoglyphic Text Steganography
Conceal watermarks, copyright notices, and leak-tracking markers inside ordinary text by substituting visually identical characters across alphabets (Latin ↔ Cyrillic). The text looks 100% identical to the human eye, but carries an extractable cryptographic signature.
Message length: chars
If specified, only holders of this secret key can extract the message.
✨ Watermarked Steganographic Text
Hidden Watermark Discovered!
Digital signature verified. Checksum matched successfully.
Sanitized & Normalized Text (Watermark Eradicated):
Detected Character Substitutions (First 50):
| Position | Character | Unicode Code | Script | Replaced With | New Unicode |
|---|---|---|---|---|---|
What are Homoglyphs (Confusables)?
Homoglyphs are characters from different Unicode scripts that share visually identical glyphs in standard computer fonts. For example, Latin "a" (U+0061) and Cyrillic "а" (U+0430) look 100% indistinguishable. By strategically alternating between them, text can store arbitrary binary data without changing how it appears.
Why are Homoglyphs superior to Zero-Width Spaces?
Zero-width spaces (U+200B) are frequently stripped by modern markdown sanitizers, Telegram, or Twitter. Homoglyphs are genuine alphanumeric letters that pass transparently through messaging apps, documents, and LLMs without triggering security warnings.
Frequently Asked Questions (FAQ)
How much carrier text is needed to hide a message?
Each byte of payload requires 8 homoglyph positions plus a small 3-byte protocol header (24 bits). For a short ID or tag like "ID:42", 1–2 normal paragraphs provide ample capacity.
Can the watermark be password-encrypted?
Yes. When an encryption key is provided, the payload bits are encrypted with a stream cipher seeded by SHA-256. Anyone without the key will only see invalid data or checksum errors.
How can I remove or neutralize such a watermark?
Open the "X-Ray & Sanitize" tab and click "Run Analysis & Normalization". Our normalizer converts all mixed homoglyphs into a single uniform alphabet, permanently removing the steganographic trail.
What is an IDN homograph attack?
Attackers register domain names or send links where Latin letters are replaced with identical Cyrillic ones (e.g. pаypal.com using Cyrillic "а"). Our X-Ray detector instantly exposes these spoofs.