File Entropy Analyzer
Analyze a file's Shannon entropy and byte-frequency distribution to detect encryption, compression, or packing.
Drop a file or click to select
File never leaves your browser - all analysis runs locally
How it works
Shannon entropy measures the average information content per byte: H = -Σ p(x) × log₂(p(x)). Maximum is 8 bits/byte (perfectly random). Reference values: plain text ~3–5, source code ~4–6, compressed or
encrypted data ~7.5–8.
Packers and obfuscators often raise entropy in executable sections. Low entropy in a ciphertext indicates a weak or repeating key. Per-chunk analysis helps identify packed sections within larger files.
Security note
Entropy > 7.5 strongly suggests encryption or compression. Malware commonly uses entropy analysis as a packing detection signal. This tool helps identify encrypted payloads, key material, or compressed sections in binary files
during forensic analysis.