Skip to content
OpenDetect

Free · no sign-up · your file stays in your browser

Content Credentials viewer

Content Credentials are a signed “made with” record inside a file. Drop an image to see who signed it, what made it, and whether the record is still intact.

What we check, in order

  1. Step 1

    Signed credentials

    If the file was made by ChatGPT, Gemini, Adobe Firefly and others, it often carries signed Content Credentials (C2PA). We read them on your device. A valid signature is very hard to fake.

  2. Step 2

    File metadata

    EXIF, XMP and IPTC fields can name the camera or the AI tool. Stable Diffusion and ComfyUI often save the prompt inside PNGs. Useful, but anyone can edit these.

  3. Step 3

    Invisible watermark

    If there are no credentials, we ask OpenAI's official checker to look for its invisible SynthID watermark, which survives screenshots and re-saving.

  4. Step 4

    Honest when it's unclear

    When none of this turns up anything, we say so. No signal is not proof of a real photo. We'll never show a made-up “97% AI” score.

How to read the result

  • Made with AIA signed credential or a watermark says AI. Strongest evidence there is.
  • Signs of AIUnsigned metadata names an AI tool. Usually right, but editable.
  • Signed camera photoSigned camera credentials and no AI signals.
  • Not enough evidenceNothing we can read either way. Common for screenshots and reposts.

Questions

What are Content Credentials?
Content Credentials (the C2PA standard) are a signed record stored inside a file. They can say which app or camera made it, whether AI was used, and what edits happened. The signature breaks if someone changes the record.
Which tools add Content Credentials?
OpenAI, Google, Adobe, Microsoft and some camera makers (Leica, Sony, Nikon, Canon on newer models) add them. Many social networks strip them on upload.
What do Valid, Trusted and Invalid mean?
“Valid” means the signature matches the content. “Trusted” also means the signer is on the official C2PA trust list. “Invalid” means the file changed after it was signed, so treat the record with care.
Is the viewer private?
Yes. Everything is read inside your browser with the open-source C2PA library. The file isn't uploaded for this part.

Other checkers