CONTENT CREDENTIALS · C2PA
C2PA Checker: Does This Image Carry Content Credentials?
Content credentials (C2PA) and metadata can state which camera or AI tool produced a file. We read them first, then run the AI image detector when they are missing or inconclusive.
Open in beta · 10 free credits a month · Files deleted after 30 days
AI Photo Detector
Open in betaWhat you need
Upload an image or paste an image link
JPG, PNG, WebP or HEIC, up to 20 MB.
At a glance
C2PA first
Content credentials and metadata are read before the detector runs; a second model reviews borderline cases.
AnyFact method
3 levels
Probably human, uncertain or probably AI — never a bare percentage — with the reasons and the limits of the method.
AnyFact method
10 credits
Free every month with an account, no credit card. Uploaded files are deleted after 30 days.
AnyFact free plan
Provenance is the strongest signal, when it is there
C2PA content credentials are a signed record attached to a file: which tool created it, which edits were made, and by whom. Several AI image generators and some cameras now add them.
When the credentials name an AI generator, the question is settled and the result says so. That is far more reliable than any detector score.
Most images online have lost their credentials, because many platforms strip metadata on upload. Missing credentials prove nothing either way, so the check continues with an open-source detector and an explained verdict.
Does this sound familiar?
- An image is labelled as AI-generated on a social network and you want to see why.
- You received a file and want to know which software produced it.
- You publish images and want to check what their credentials say before you do.
Here's what we check
Upload or paste a link
JPG, PNG, WebP or HEIC, up to 20 MB.
Provenance, then detection
Content credentials and metadata are read first; if they do not settle it, the classifier scores the image and visible anomalies are listed.
A verdict in three levels
Probably human, uncertain or probably AI — never a bare percentage — with a short explanation and the limits of the method.
How to read the result
The signals point to a person. It is not a guarantee: a careful generator or heavy editing can leave few traces.
The signals disagree or are too weak. We say so rather than guess, and list what was found.
The signals point to generation. It is an indication, not proof — check the context before acting.
Sample layout. Real reports name the signals that were checked and the limits of the method.
What does a C2PA checker look for?
A C2PA checker reads the content credentials attached to a file: a signed record that can say which tool created the file and how it was edited. A good checker also reads the older EXIF and XMP metadata, which can carry similar clues.
| Data | What it can tell you | How fragile it is |
|---|---|---|
| C2PA content credentials | The tool that created or edited the file, and the steps recorded along the way | Signed, so changes are detectable, but often stripped by re-uploads and screenshots |
| EXIF metadata | Camera make and model, capture date, software | Easy to edit or remove |
| XMP metadata | Editing history and descriptive fields, sometimes including an IPTC “digital source type” | Easy to edit or remove |
You can look for one useful clue yourself: in XMP data, the IPTC digital source type value “trainedAlgorithmicMedia” marks content created by a generative model. Our guide to C2PA content credentials explains the standard in more depth.
How to check content credentials with AnyFact
Upload the file to the photo detector: reading the credentials is the first step of every analysis, so you do not need a separate tool.
- 01Upload the image to the AI image detector: JPG, PNG, WebP or HEIC up to 20 MB, or a link.
- 02The C2PA manifest and EXIF/XMP metadata are read before any model looks at the pixels.
- 03If they name a known AI generator, the verdict is probably AI and the reason is stated.
- 04If they do not, the analysis continues with the open-source classifier and the list of visible anomalies.
- 05The same provenance step runs on video files, and on images embedded in documents, which go through the photo detector.
You do not need to know in advance whether a file carries credentials: the check runs on every upload. An image check uses 1 credit.
C2PA verify results: what you see and what it means
The provenance finding shows up among the signals behind the verdict. What it means depends on what was found.
| What was found | Effect on the verdict | What it means for you |
|---|---|---|
| Credentials or metadata naming a known AI generator | Probably AI, with the reason stated | The file itself declares how it was made: the most explicit signal available |
| Provenance naming a camera or editing software only | No shortcut; the detector and anomalies decide | Useful context, but editing software says nothing about whether the content was generated |
| No provenance data | No shortcut; the detector and anomalies decide | Common after a re-upload; it tells you nothing either way |
Compare dates and places in the metadata with the story told about the image. A capture date after the event it supposedly shows is worth questioning, even though the detector does not flag it.
What can content credentials prove, and what can’t they?
Content credentials prove what the signing tool recorded, not that the scene is true. A valid signature shows the record has not changed since it was signed and who signed it.
- They do not show whether a photographed scene was staged or is shown in its true context.
- They disappear easily: screenshots, re-uploads and some editing tools remove them.
- EXIF and XMP fields are not signed and can be changed by anyone with the file.
- Many cameras, apps and generators add no credentials at all.
If you need to inspect every assertion in a manifest and its full signature chain, a dedicated viewer such as the Content Authenticity Initiative’s Verify site is the better choice. AnyFact uses provenance as the first signal of a wider analysis. Newsrooms combine both, as described on our page for journalists and fact-checkers.
Before you check
Is the result proof that a content was made by AI?▼
No. It is an indication, not proof. Detectors can be wrong in both directions, especially on compressed, cropped, edited or very short content. Use the result to decide what to check next, not as a final judgement on anyone.
Why no percentage?▼
A single percentage suggests a precision no detector has. You get one of three levels — probably human, uncertain or probably AI — with the signals behind it and the limits of the method.
How does the analysis work?▼
When the content carries provenance data, such as C2PA content credentials or metadata, we read it first. Then an open-source detector scores the content. When the score is borderline, Claude reviews it as a second opinion, and the result is explained in plain words.
What happens to my files?▼
They are processed to run your analysis — including, for borderline cases, a review by Claude, Anthropic’s model — and deleted after 30 days.
What does it cost?▼
There is a free plan: a free account gets 10 credits every month, with no credit card. Pro ($15 a month) gives 1,000 credits a month; Business ($49 a month) gives unlimited Business Checks and AI checks under a fair-use limit.
If an image has no content credentials, does that mean a person took it?▼
No. Most social networks strip metadata on upload, and many generators add none. Missing credentials prove nothing either way; they are one signal among several.
Which AI generators add content credentials?▼
Some image generators and editing tools add C2PA credentials or metadata, others add none, and the list changes as tools are updated. That is why a missing credential cannot settle the question.
Can content credentials be faked?▼
EXIF and XMP metadata can be edited by anyone. C2PA credentials are signed, so changing the record after signing is detectable. A valid signature still only tells you who signed and what they recorded, not that the content is truthful.
Do screenshots keep content credentials?▼
Generally not. A screenshot creates a new file, and the original’s credentials and metadata do not carry over. Look for the original file whenever provenance matters.
Does AnyFact check credentials in videos and documents?▼
Yes. Provenance is the first step of every detector. Video files are checked before the frames are scored, and documents have their metadata read while their embedded images go through the photo detector.
Read an image’s credentials, then get a verdict
What you need
Upload an image or paste an image link
Free plan — 10 credits every month, no credit card.
Each result is an indication, not proof.
Files deleted after 30 days.
You might also want to check
AI Image Detector: Was This Image Made by AI?
Free AI image detector and checker: find out if a photo was generated by AI. Reads C2PA content credentials, runs an open-source detector and explains the verdict.
AI Art Detector: Was This Artwork Made by AI?
AI art detector for illustrations and digital paintings: check content credentials, score the image with an open-source detector and get an explained verdict.
Deepfake Detector: Is This Video, Photo or Voice Real?
Deepfake detection for videos, photos and voice messages: face swaps, generated clips and cloned voices, checked with open-source detectors and explained. Free plan.