Inspection tool
C2PA Checker
Check whether an image carries a C2PA manifest — the provenance record behind Content Credentials — and see what it says.
Ready. Choose an image to scan.
🔒 Your file stays on your device.
JPG, PNG and WebP · up to 25.0 MB · nothing is uploaded
What C2PA is
C2PA is an open standard for recording where a piece of media came from and what happened to it. A manifest embedded in the file can name the tool that created it, list the edits applied, and carry a cryptographic signature binding those claims to an issuer.
In images it is stored as JUMBF boxes: an APP11 segment in a JPEG, a caBX chunk in a PNG, a dedicated chunk in a WebP. This tool finds those and reads what it can from them.
Present is not the same as valid
This checker reports a manifest as present and shows details such as the claim generator. It does not verify the cryptographic signature against a trust list, which would require current trust data and a full validator.
So you will never see "valid" or "invalid" here — only "detected", with what we could read. Reporting a signature as valid without actually validating it would be worse than useless.
Durable Content Credentials
It is worth knowing that C2PA is designed with recovery in mind. Where a provider supports durable credentials, provenance can be re-associated with an image later using an invisible watermark or content fingerprint, even after the manifest has been stripped.
Removing a manifest therefore removes it from your file, not from the world.
Frequently asked questions
Why does the manifest show no details?
Manifests are CBOR inside nested boxes, and this tool reads a deliberately small subset — enough to confirm presence and usually identify the generator. When a field cannot be read, it is reported as unavailable rather than guessed at.
Does a missing manifest mean the image is untouched?
No. Manifests are commonly stripped by platforms and editors that do not support them. Absence tells you very little.
Can I remove a C2PA manifest?
Yes — see the C2PA Remover. The removal is verified by re-scanning the cleaned file.
Related tools
Related guides
- What is C2PA?The provenance standard behind Content Credentials, how it is stored inside an image, and the two places it tends to break down.
- C2PA vs SynthIDOne is a label on the bottle, the other is dissolved in the liquid. Almost every practical question follows from that distinction.
- What are Content Credentials?The consumer-facing name for C2PA provenance, why the little "cr" icon disappears so often, and what durable credentials mean for removal.