c2paview

Who made this file - and has it been changed since?

Cameras, Photoshop, and generative AI tools like Claude, DALL·E and Firefly now sign their output with C2PA Content Credentials - a cryptographic record of who made a file, with what, and every edit since. Drop a file below to read that record. Everything runs in your browser: the file is never uploaded anywhere.

Drop a file here

or · JPEG, PNG, WebP, AVIF, GIF, TIFF, SVG, MP4, MOV, MP3, WAV, PDF and .c2pa sidecars

(a C2PA test-suite fixture, signed with their test certificate)

Questions and answers

What are C2PA Content Credentials?

An open provenance standard from the Coalition for Content Provenance and Authenticity (C2PA), backed by Adobe, Google, Microsoft, OpenAI, Leica, Nikon, the BBC and others. A camera or app cryptographically signs what it produced, the signature covers the file's actual content, and every later edit can be recorded and verified. AI generators use it to label their output; news agencies use it to prove a photo came from the camera that shot it.

How do I check if an image is AI-generated?

Drop it in above. If the generator added Content Credentials (DALL-E, Adobe Firefly, and others do), the actions list will say so - this page flags entries whose digital source type is trained algorithmic media as AI-generated. Absence of credentials does not prove a file is not AI-made: most AI images circulating online have had their metadata stripped by social platforms.

What does a green result prove?

That the file carries Content Credentials, the cryptographic checks pass, and it has not been modified since it was signed. It does not by itself prove the signer is who you think - read the issuer name and judge it as you would the sender of an email. A red result means the file was changed after signing.

Why does my file have no Content Credentials?

That is the normal case. Only recent cameras and apps sign their output, and most websites and messaging apps strip metadata on upload - a signed photo posted to social media usually comes back out unsigned. No credentials means no provenance information either way: it is not evidence of tampering.

Is my file uploaded anywhere?

No. Validation is done by the official C2PA reference implementation compiled to WebAssembly, running in your browser. This site has no backend, no accounts, no analytics and no cookies; the file's bytes never leave your machine. Load the page, go offline, and it still works.

Which file types are supported?

JPEG, PNG, WebP, AVIF, GIF, TIFF, SVG, MP4, MOV, MP3, WAV and PDF, plus detached .c2pa sidecar manifest files - the formats the C2PA specification defines embeddings for.

Can Content Credentials be faked or removed?

They can be removed - they are metadata, and the C2PA standard itself anticipates redaction - but they cannot be forged or altered without detection, because the signature covers the content and any tampering shows as a validation failure. That asymmetry is the point: credentials that are present and green are strong evidence; missing credentials say nothing.

Why does a file from Claude or another AI assistant have Content Credentials?

AI tools increasingly sign what they produce. Anthropic's Claude adds C2PA Content Credentials to some file types it creates or modifies, OpenAI's DALL-E images carry them, and Adobe Firefly signs its output. Drop such a file above to see exactly who signed it, when, and what it declares about how the file was made.

How do I add Content Credentials to my own files?

Use a signing tool. ZeroFake can add C2PA Content Credentials to your files; Adobe's Creative Cloud apps sign exports when Content Credentials are enabled; and the C2PA project's open-source c2patool signs from the command line. This site is read-only by design - it inspects credentials but never alters your file.