How to use
- photo.jpgvideo.mp4
Open a file
- Creator app and signerEdit history and AI use
Read the provenance
- Verification listSave as JSON
Verify and show results
Drop an image, video or PDF, or click “Choose file”. “Try a sample” reads a sample file that carries C2PA.
The format is detected from the file contents and the C2PA manifest is read. Reading happens in your browser; the file is not sent anywhere.
Check the creating app and signer under “Creation and signer”, and whether the content still matches the signature under “Signature check”.
Follow any AI-use record and the source material under “AI use and edit history” and “Ingredients”.
The full data is shown as JSON. Click “Save JSON” to keep it.
What it does
Checks the signature against the content
Verifies the C2PA signature and shows whether the image or video changed after it was signed: “no change”, “mismatch” or “cannot judge”.
AI-use records, grouped by type
Reads the digitalSourceType of each edit and separates “generated by AI (trained model)”, “generated by an algorithm (not necessarily AI)”, “captured by a camera” and so on.
Follow the source material
When the file was built from other material, the ingredients are shown as a nested tree, with the creating app and edit history of each source.
Full data as JSON
The whole manifest store is shown as formatted JSON and can be saved as it is, for records or documentation.
No external lookups
The file is read in your browser. Trust lists, certificate revocation checks and remote manifests are not fetched, so nothing is sent to other servers.
Use cases
- Check whether an image you saw in a feed or news story was captured by a camera or generated by AI
- Review the edit history (cropping, colour adjustments) of a photo received from a client
- Confirm what C2PA data your own work carries before you publish it
- Check the provenance of material that needs a record of AI use inside your organisation
Supported formats
Input
Output
Capability matrix
| Feature | Support | Notes |
|---|---|---|
| Shows whether a C2PA manifest is present | Supported | — |
| Shows the creating app, signer, signature algorithm and signing time | Supported | — |
| Checks whether the content matches the signature (tampering) | Supported | Does not judge whether the issuer is trusted |
| Shows the edit history (actions) and ingredients | Supported | — |
| Judges whether the issuer is trusted (trust-list check) | Not supported | Trust lists are not fetched |
| Checks whether a certificate has been revoked | Not supported | No external lookups are made |
| Tells whether a file without C2PA is AI-made | Not supported | Missing credentials say nothing about AI use |
| Detects invisible watermarks | Not supported | — |
| Restores provenance that was removed by sharing (e.g. social media) | Not supported | — |
| AVIF, MP4, MOV and PDF files | Partial | The formats can be read; checks have mainly been done with JPEG, PNG and WebP |
Limits & notes
- Up to 100 MB per file. Larger files are refused before reading.
- The first use loads the C2PA reader (wasm, about 9 MB) from this site. Later uses reuse the browser cache.
- Trust and certificate revocation are not checked. “No change” only means the content is unchanged since it was signed.
- The page shows what the C2PA data says. If the signer wrote something untrue, this tool cannot detect it.
- A file without C2PA is not judged to be “not AI”.
- Works on smartphones. Large videos and PDFs can take a while to read.
Privacy & safety
Reading and analysis all happen in your browser. Neither the file nor its provenance data is sent to or stored on a server, and no trust-list, revocation or other external lookup is made.
FAQ
If a file has no C2PA, does that mean it was not made by AI?
Does “no change” mean the file is authentic?
Can I tell from this whether an image was generated by AI?
Is my file uploaded?
Which formats are supported?
Related tools
Metadata Studio
A workbench for looking at, fixing and comparing the author, company, capture time and location stored in photos, PDFs and Office files. Every edit is re-read and verified, with a before/after diff. To just strip everything, use the dedicated remover tools.
EXIF & GPS Remover
Remove the location (GPS), camera details and timestamps embedded in your photos without touching image quality. Inspect what was inside and verify the result — all in your browser.
Share Safe
Before you hand a file over, see what is hiding in it — listed per file with severity — and get a safe copy with everything removable removed. The copy is re-checked afterwards, and whatever is left comes with manual steps. Files are never uploaded.
HAR Sanitizer
Load a HAR saved from your browser developer tools and save a copy with cookies, auth headers, URL tokens, passwords and JWTs redacted, before you send it to support. A helper only — it cannot guarantee that every secret is found. The HAR never leaves your device.
Crypto Studio — Hash, HMAC, Encryption & Keys
Type text and see 12 hashes — SHA-256, SHA-3, BLAKE3 and more — at once. Verify webhook HMAC signatures, encrypt text with a password, generate key pairs and create or check bcrypt hashes, all on your own device with nothing uploaded.
Password Studio — Generator & Strength Checker
A strong 20-character password is ready when the page opens. Fine-tune symbols and excluded characters, switch to a memorable passphrase, or check a password you already use — all without sending anything off your device.
Last updated: