C2PA Checker - Verify Content Credentials

Check C2PA & Content Credentials

Drop an image here or click to upload

Check metadata - Free

Drop an image to checkWe read its C2PA, IPTC, XMP, EXIF and PNG metadata.click to choose or paste one · JPG · PNG · WebP · HEIC · AVIF

Runs in your browser · nothing is uploaded

C2PA Content Credentials

IPTC AI source type

GPS & device data

1 Upload your image →
2 Detect C2PA manifest →
3 See verification result

Upload an image to detect C2PA manifests and verify signatures locally. See Trusted, Valid, or Invalid status - your file stays on your device.

What is a C2PA checker?

A C2PA checker reads embedded Content Credentials manifests in your image and runs local cryptographic verification. You see whether a manifest exists and whether it validates as Trusted, Valid, or Invalid - without uploading the file.

Exports from Midjourney, Adobe Firefly, ChatGPT, or Photoshop often carry C2PA even when the picture looks ordinary. Checking locally before Instagram, TikTok, or client delivery helps you understand what platforms may read at upload time.

Content Credentials verification states

Trusted - Manifest valid and signing credential on a built-in trust anchor.
Valid - Manifest cryptographically intact; issuer not on the trust list.
Invalid - Manifest present but signature, hash, or chain validation failed.
No manifest - No Content Credentials block detected in this file.

How to verify C2PA in your image

Same workflow for one portfolio JPEG or a batch of AI exports.

Upload JPG, PNG, WebP, or AVIF (up to 15 MB)
Tool scans metadata and loads the C2PA verifier in your browser
If a manifest exists, local signature validation runs
Status badge shows Trusted, Valid, Invalid, or No manifest
Issuer name and assertion count appear when available
Decide whether to publish as-is or strip C2PA separately

Why check Content Credentials before sharing

Social platforms and stock sites increasingly read C2PA and AI-related metadata at ingest. A file can trigger labels or review queues even when pixels look unchanged.

Verification is read-only: it does not prove a photo is “real” or not AI - it only reports whether the embedded manifest and signature check out in this browser.

What this C2PA checker shows

C2PA detection - Whether Content Credentials blocks are present in metadata.
Local verification - Trusted / Valid / Invalid based on local WASM verification.
Signer info - Common name or claim generator when exposed in the manifest.
Read-only scan - Your original file is never modified on this page.
No account - Free instant check - WASM loads only when you use this tool.

Browser-only - your file never leaves your device

Parsing and verification run locally. Images are not uploaded to our servers. After the page loads, you can inspect sensitive exports offline.

What verification does and does not prove

Does - Detect manifests and run standard C2PA signature checks in-browser.
Does - Show Invalid when tampering or broken chains are detected.
Does not - Prove a photo is authentic, human-made, or “not AI”.
Does not - Replace official Adobe Content Credentials cloud verification.

Need to remove C2PA metadata?

This page only checks and verifies. To strip Content Credentials before upload, use our dedicated C2PA remover - it writes a cleaned copy without changing pixels.

Remove C2PA with the C2PA remover →

Want metadata size and AI risk scores?

For byte breakdown and C2PA/XMP risk levels, try our metadata calculator.

Calculate metadata - size and risk →

Learn more about C2PA

For a plain-language guide to Content Credentials and social upload impact, read our C2PA explainer.

C2PA metadata explained →

Real-world scenarios

AI export before Instagram - Firefly or Midjourney JPG shows Valid - you still want to know before posting.
Client delivery - Verify whether credentials survived Lightroom re-export.
Invalid manifest - Edited file breaks the chain - checker shows Invalid, not silent failure.
No manifest - Platform may still label via other signals - detection helps rule out C2PA.
Newsroom handoff - Confirm whether a received file still carries signed credentials.

Your privacy on this page

We built this for creators and teams who need transparency before publishing. Analysis is read-only; removal happens only when you choose the C2PA remover.

Supported formats and limits

Formats: JPG/JPEG, PNG, WebP, AVIF
Size: up to 15 MB per file
Privacy: 100% browser-based, no upload
Cost: completely free

FAQ

What is a C2PA checker?

It detects Content Credentials manifests in your image and runs local signature validation, showing Trusted, Valid, Invalid, or no manifest. Read-only - does not change your file.

Does this prove my photo is real?

No. Local verification only checks whether an embedded manifest and signature validate in your browser. It does not prove authenticity or disprove AI generation.

How do I verify C2PA in an image?

Upload JPG, PNG, WebP, or AVIF to this free C2PA checker. The tool detects Content Credentials manifests and runs local signature validation in your browser - you see Trusted, Valid, Invalid, or No manifest without uploading the file. After you verify C2PA, strip manifests with the C2PA remover before social upload.

What are Content Credentials?

Content Credentials is Adobe's name for C2PA provenance data embedded in an image - a signed manifest that records how the file was created or edited. Instagram and Facebook may show AI Info when they read Content Credentials from tools like Firefly or Photoshop. This checker detects and verifies those manifests locally.

What is C2PA metadata?

C2PA metadata is a signed Content Credentials block in JPEG, PNG, or WebP that records capture, edits, and AI generation steps. It is separate from EXIF camera fields and XMP editing history. Upload here to verify C2PA, then use the C2PA remover before social upload if you need a clean file.

What is the difference between Valid and Trusted?

Valid means the manifest cryptography checks out but the signer is not on the built-in trust list. Trusted means validation succeeded and the signer matches a trust anchor.

Does this tool remove C2PA?

No. Use our C2PA remover to strip Content Credentials before upload. This checker only displays and verifies.

Is my image uploaded to your servers?

No. Parsing and verification run entirely in your browser. Your file never leaves your device.

Why does verification show Unavailable?

Some browsers block WebAssembly or extensions interfere. C2PA detection still works; try another browser or disable strict privacy extensions.

Can a file have no C2PA but still get an AI label?

Yes. Platforms may use other metadata, pixels, or classifiers. This tool only reports Content Credentials manifests.

How is this different from the AI metadata checker?

The general checker lists AI-related tags. This page focuses on C2PA manifests and cryptographic verification states.

Related guides

Platform upload prep and C2PA background - useful after you clean a file or when labels persist.