C2PA Content Credentials Checker
Verify C2PA Content Credentials, JUMBF superbox provenance manifests, hardware camera signatures, and AI generation certificates. Runs 100% privately in your browser.
Upload image to verify Content Credentials
Drag & drop JPG, PNG, or WebP photo or click to browse
Supports JPG, PNG, WebP, AVIF, TIFF • 100% In-Browser Privacy • Max 50MB
Understanding C2PA & Digital Authenticity
A guide to open provenance standards and media verification
C2PA (Coalition for Content Provenance and Authenticity) is an open technical standard founded by Adobe, Microsoft, Arm, Intel, Truepic, and the BBC. It creates an interoperable, cryptographically signed record of an image's origin, creation history, and subsequent edits.
Standard EXIF tags (such as camera model, GPS, or date) are plaintext and can be edited or removed by anyone with basic software. C2PA binds a cryptographic signature and Merkle hash tree to the pixel data. Any alteration to the image invalidates the signature, immediately flagging tampering.
Platforms like Instagram, Facebook, TikTok, and Google use C2PA manifests to automatically attach 'AI Info' or 'Generative AI' badges to uploaded media. When tools like Adobe Firefly, Midjourney, or DALL-E generate images, they embed C2PA manifests recording their synthetic origin.
Professional cameras (such as the Leica M11-P and recent Sony/Nikon firmware) now feature onboard secure hardware chips that sign photos at the exact millisecond of shutter actuation, proving authentic physical capture.
Screenshots or aggressive compression sever the embedded C2PA container. The resulting image arrives with 'No Content Credentials'—it does not gain a false 'camera' verification. Platforms and checkers treat severed manifests as unverified legacy media.
How it works?
Upload or Drop Image
Select any JPG, PNG, or WebP photo or digital asset from your device or camera.
100% In-Browser Manifest Scan
The engine parses ISO JUMBF superbox containers, APP11 binary segments, and XMP packets locally.
Inspect Cryptographic Credentials
Verify the digital signature, signing timestamp, certified issuer (e.g. Adobe, Leica), and generation agent.
Trace Complete Provenance Timeline
Review the chain of custody—from original capture/generation to color adjustments, cropping, and export.