forensics.media Subscribe

Content Credentials · image

What do this image's Content Credentials say?

Content Credentials (the C2PA standard) are a signed record some cameras and AI tools attach to an image: what made it, whether it was AI-generated, and the edits along the way. Drop in a picture and this pulls that manifest out of the file and reads it back in plain language.

Runs entirely in your browser. Your image is never uploaded or stored.

What Content Credentials are

Content Credentials are the consumer name for a manifest defined by the C2PA specification. It is a small signed record tucked inside the file that lists the claim generator (the app or device that produced the image), a set of assertions such as the actions taken on it, and a cryptographic signature over the whole thing. Adobe, Leica, Sony, OpenAI and others write these, which is why an image from those tools can carry a verifiable history while a plain screenshot carries nothing.

The AI-generation signal

The most-watched field is digitalSourceType, an IPTC code that says how the content originated. The value trainedAlgorithmicMedia means it was produced by a generative model; compositeWithTrainedAlgorithmicMedia means AI content was mixed into it. This tool surfaces that field directly and flags it, so you are not reading a raw URL out of a strings dump to find out.

What a manifest does and does not prove

A present, well-formed manifest tells you what the signer claimed and, if you trust the signer, that the pixels have not changed since signing. This tool reads the claim; it does not verify the signature or check the certificate against a trust list, so treat the signing details as reported, not proven. Just as important, the absence of a manifest proves nothing: most images have never carried one, and a manifest can be stripped by any re-save or screenshot. Pair it with the metadata viewer and hidden text scan for the rest of the picture.

Sources

  • C2PA, Content Credentials: C2PA Technical Specification (coalition for content provenance and authenticity).
  • ISO/IEC 19566-5, JPEG Universal Metadata Box Format (JUMBF).
  • IETF RFC 8949, Concise Binary Object Representation (CBOR).
  • IPTC, Digital Source Type NewsCodes vocabulary.