C2PA Checker — Check Content Credentials
Inspect images for C2PA Content Credentials manifests, cryptographic digital signatures, and provenance claims locally in your browser.
Drop your image here to check AI metadata
Drag & drop a JPG, PNG, or WebP file (or up to 30 images for batch checking), or click to browse.
Understanding C2PA & Content Credentials
The Coalition for Content Provenance and Authenticity (C2PA) standard establishes cryptographic assertions to document an asset's history. These manifests may contain author identity, digital certificates, edit actions, or generative AI disclosures.
Platforms like TikTok, Meta (Instagram/Facebook), and LinkedIn are adopting C2PA to automatically label images with "AI Info" or provenance badges. Checking your files prior to publishing ensures you understand what credentials your images carry.
Frequently Asked Questions
What is C2PA?
C2PA stands for the Coalition for Content Provenance and Authenticity. It is an open technical standard developed by Adobe, Microsoft, Intel, Sony, and others that defines how tamper-evident cryptographic metadata (Content Credentials) can be bound to digital media.
Does the presence of C2PA mean an image is AI-generated?
No. C2PA manifests can be created by digital cameras (such as Leica or Sony hardware that signs photos at capture), editing software (like Photoshop), or generative AI engines. A C2PA manifest simply proves where a file came from and how it was processed.
How does this C2PA Checker work?
The tool inspects the image container for JUMBF (JPEG Universal Metadata Box Format) boxes—such as APP11 segments in JPEGs or caDX chunks in PNGs. It reads the manifest headers directly in your browser's local memory.
Can I remove C2PA Content Credentials from my image?
Yes. Our integrated cleaner can strip the C2PA JUMBF container losslessly without re-encoding the visual image data, ensuring your image colors and resolution remain identical.
How does C2PA differ from traditional metadata like EXIF or IPTC?
Traditional EXIF and IPTC are unprotected key-value pairs stored in container headers that any hex editor can alter without detection. C2PA bundles cryptographic claims, public key certificates (X.509), and SHA-256 asset hashes so any unauthorized byte changes immediately invalidate the digital signature.