C2PA Verifier — Check Content Credentials

How to use

Drop an image (or click to select one) — verification starts automatically. The C2PA engine loads once as a WebAssembly module and checks the file's Content Credentials entirely in your browser: who signed it, when, which app generated it, whether it declares itself AI-generated, and whether the signature is intact. If the image has no credentials, you get a clear explanation of what that does and does not mean. Your file is never uploaded.

Why use this tool

Since 2026, Claude, ChatGPT, Adobe apps, and several cameras attach C2PA Content Credentials — cryptographically signed provenance metadata — to the files they produce. This verifier lets you inspect those credentials without installing anything and without sending the image to a server: useful for checking whether a picture declares AI generation, verifying it has not been tampered with since signing, and seeing the full manifest that most platforms hide. It verifies signature integrity locally; it does not check the certificate against a trust list, so a valid signature proves the data is untampered, not the signer's identity.

FAQ

What are C2PA Content Credentials?

An open provenance standard from the Coalition for Content Provenance and Authenticity (Adobe, Microsoft, OpenAI, Anthropic, camera makers, and others). A signed manifest travels inside the file and records who created it, with which tool, and what edits were made — including whether it was AI-generated.

The tool says 'no credentials found' — does that mean the image is not AI?

No. Most images on the web have no credentials, because screenshots, format conversion, re-saving, and most messaging apps strip them. Absence of credentials proves nothing in either direction; only their presence carries verifiable information.

Is my image uploaded to a server?

No. The C2PA verification engine runs as WebAssembly inside your browser. The file never leaves your device — you can verify this in your browser's network tab.

Does a valid signature prove who signed the image?

Not by itself. This tool verifies signature integrity — that the manifest has not been altered since signing — and shows the certificate's stated issuer. It does not check the certificate against the official C2PA trust list, so treat the issuer name as a claim, not proof of identity.

Which formats are supported?

JPEG, PNG, WebP, AVIF, and SVG, up to 20MB. These cover the formats that AI generators and cameras commonly sign.

Can it detect AI images that carry no credentials?

No. This is a credentials reader, not an AI-image detector. For pixel-level heuristics, see our AI Image Detector tool — and treat any detector's verdict as probabilistic, not proof.