forensics.media Subscribe

EXIF / metadata viewer

What does your photo reveal?

Drop in a photo and this reads the hidden metadata it carries: the camera and lens, the exposure settings, the software that saved it, the timestamps, and any GPS location. Read the tags as claims, not proof, because metadata can be edited or stripped.

Runs entirely in your browser. Your image is never uploaded or stored.

What the tags can tell you

Tag groupWhat it can reveal
Camera and lensThe make, model and sometimes the serial number of the device that took the photo
Software and timestampsThe program that last saved the file, and when it was captured and modified
GPS locationWhere the photo was taken, if the camera recorded it and it was not stripped
ExposureISO, aperture, shutter and focal length, consistent or not with the claimed camera

Metadata is a claim, not proof

Every field here was written by software and can be rewritten by software. A timestamp can be back-dated, a GPS tag can be planted, and the Software field can be forged, so a matching tag supports a story rather than proving it. What is often more telling is disagreement: a modified date earlier than the capture date, a Software field naming an editor on a photo that claims to be straight from a camera, or exposure values that do not fit the named model. For how far these tags can be trusted see can EXIF data be faked?, and for what a full set of tags gives away see what does EXIF data reveal?

Why an empty result still means something

A file with no metadata is common and usually innocent: uploading to most social networks, messaging apps and many websites strips EXIF, and a screenshot never carries the original tags at all. So a blank read is not evidence of tampering. It only tells you the file has passed through something that removed its history, which is worth knowing when someone presents it as an untouched original. The details of what strips metadata are in does a screenshot remove metadata?

Your file stays on your device

The image is read in your browser and nothing is sent to a server. If a GPS location is found you can open it on a map, and only then, and only if you click the link, are those coordinates sent to the map provider. Nothing else about the file leaves this page.