C2PA Content Credentials checker
Upload a file to read its C2PA Content Credentials and see the issuer, model, and creation time exactly as the API returns them. Finding no credentials is a meaningful result too.
Upload a file to verify itUpdated 7 August 2026What Content Credentials are
C2PA is an open standard for content provenance and authenticity, published by the Coalition for Content Provenance and Authenticity. A file that follows it carries a block of cryptographically signed metadata, usually called Content Credentials.
Those credentials describe where a file came from: who signed for it, which tool produced it, and when. Because the block is signed, tampering with its contents invalidates it — which makes it considerably more trustworthy than ordinary EXIF data.
Which fields this checker shows
Only what the API actually returns is displayed. Nothing is inferred to fill a gap.
- Validation state: whether credentials exist, whether the signature is valid, and whether it comes from a trusted issuer
- Issuer: the organisation or service that signed the credentials
- Model: the name of the model that produced the file, when the credentials carry that field
- Created: the creation time recorded in the credentials
Why credentials so often disappear
Content Credentials are a block of data wrapped around a file, not part of the picture. That makes them very easy to lose in ordinary circulation.
Most social platforms re-encode images on upload and strip attached metadata; a screenshot rebuilds the image from scratch; format conversion, compression tools, and some editors discard the block as well. "No credentials" is therefore extremely common, and it is not evidence of anything on its own.
C2PA compared with SynthID
Content Credentials carry far richer information but are fragile. A SynthID watermark carries almost no detail but is much more durable. One tells you what a file's history claims to be; the other tells you whether generation left a trace inside the content.
The two signals are independent. You may find one, both, or neither. This site reports them separately rather than collapsing them into a single score.
Scope of this checker
This site verifies supported OpenAI provenance signals through the OpenAI Content Provenance API. C2PA is a cross-industry standard that camera makers and imaging software also implement, but credentials from those sources are outside what this checker covers.
FREQUENTLY ASKED
Is this C2PA checker free?
Yes. Upload a file and verify it without an account and without payment, up to 50 MiB per file.
Why does my image have no Content Credentials?
Most often because the file passed through a social platform's re-encoding, a screenshot, a format conversion, or a compression tool — all of which strip attached metadata. Missing credentials are very common and prove neither AI nor human origin.
Can Content Credentials be faked?
The block is cryptographically signed, so altering its contents breaks the signature, which is why this site also reports the validation state. Bear in mind that credentials attest to the record's provenance, not to the truthfulness of what the picture shows.
Can it verify C2PA credentials written by a camera or Photoshop?
No. C2PA is a cross-industry standard, but this site verifies through OpenAI's API and covers supported OpenAI provenance signals only.
Which file formats are supported?
PNG, JPEG, and WebP for images; MP3, Opus, AAC, FLAC, WAV, and PCM for audio.