Last updated:

Answer: checking a file

How to tell if a file has been changedCompare it with a trusted copy, or with a fingerprint recorded earlier

TimeBinder adds a layer of protection against AI and human fraud and disputes.

The file stays on your device. Your browser makes a digital fingerprint of the file. TimeBinder records the fingerprint and the time, not the file.

Short answer

To tell whether a file has been changed, compare its SHA-256 fingerprint with the fingerprint of a trusted copy. Identical fingerprints mean identical files; different fingerprints mean the contents differ. Without a trusted copy or a fingerprint recorded earlier, nothing in the file itself can show it was not changed.

File dates and metadata can be edited, so do not rely on them. Use the free file comparison checker to compare two files in your browser.

Steps: check whether a file changed

  1. Get the trusted copy. This is the original, the version you were first sent, or a copy you made earlier. Do not open and re-save either file.
  2. Compare them. Drop both in the file comparison checker.
  3. Read the result. A match means identical contents. No match means the files differ. It does not say who changed one or when.
  4. See what changed. The fingerprint cannot show where. Use your program’s compare feature, such as Word’s Compare or the PDF reader’s compare tool, or a text diff.
  5. Record the fingerprint next time. A TimeBind records the fingerprint with a time, so you can check a file against it years later.

What each check tells you

Checks for a changed file: what each shows
CheckWhat it tells youWhere it falls short
Date modifiedThe last time your device or software saved the file.Can be edited, can stay the same after an edit, and can change when files are copied, synced or restored. See can a file’s date created be changed?
File sizeWhether the length differs.A change can keep the same size, and size can also change when a file is copied or re-saved, with no edit to the contents.
Metadata (EXIF, document properties)What the file claims about itself.Can be edited with free tools. Inspect it with the metadata inspector.
Looking at itWhether you notice a visible difference.Misses invisible changes and clever edits.
SHA-256 comparisonWhether two files are identical, byte for byte.Needs a trusted copy. Does not say what changed or who changed it.
Fingerprint recorded earlier (TimeBind)That a file still matches what existed at a recorded time.Only covers files you recorded.

What if there is no earlier fingerprint?

Then a fingerprint of the file you hold now cannot answer the question on its own. You can still compare against other copies: an email attachment as sent, a version held by the other party, or a backup. If those match the file you hold, that is useful. If they disagree, keep every copy unaltered and ask a qualified professional before you change or discard anything. For files you will need later, record the fingerprint at the moment the file matters. See also how to protect yourself from AI forgeries.

What a TimeBind shows, and what it does not

  • It shows that this exact file existed no later than the recorded time, and that a copy shown later still matches its fingerprint.
  • It does not show who made the file, who owns it, that its contents are true, or whether AI was used to make or edit it.
  • It does not replace legal advice, a notary where one is required, or a court’s own view of the evidence.
Make a TimeBind: first one free →

First Pooled TimeBind free, no card, then from US$5. An ASAP TimeBind is US$15.

Frequently asked questions

Can a file change without anyone editing it?

Yes. Opening and re-saving, exporting again, compressing an image, converting a format, or sending a photo through some messaging apps can change the bytes without any visible edit. A mismatch shows the files differ. It does not show tampering.

Can I tell what was changed from the fingerprint?

No. A fingerprint is a single code for the whole file. It shows whether two files are the same, not where they differ. Use a compare feature in your program or a text diff to see the changes.

Can this detect an AI-edited photo or document?

No. It compares files with each other. If you hold the original, a mismatch shows the copy is different from it. It does not detect AI, and a match with a copy does not show the original was genuine.

What if I have no original to compare with?

Then nothing in the file alone can show it was unchanged. Look for an earlier copy, such as an email attachment, a backup or a platform’s version history, and compare against that. For files you will need later, make a TimeBind now.

Does the checker upload my files?

The file stays on your device. Your browser makes the fingerprint and compares it locally.

Can I tell if a file changed from its modified date?

Not reliably. The modified date can be set, can stay the same after an edit, or can change when a file is copied. Compare fingerprints instead.

If two fingerprints match, are the files the same?

Yes, for practical purposes the contents are identical. With SHA-256, an accidental match between different files is not a realistic concern.

Sources

  • Microsoft Learn, Get-FileHash (SHA-256 is the default algorithm).
  • Legal Information Institute, Federal Rule of Evidence 902, Committee Note on paragraph (14) (identical hash values for an original and a copy).

Record a fingerprint of the file you rely on

Add a layer of protection against AI and human fraud and disputes: a dated, checkable record of the exact file you hold.

  1. Open the app and sign in with email or Google.
  2. Add your files. They stay on your computer.
  3. Seal them and download your Proof of Time certificates.
Open TimeBinder →

First Pooled TimeBind free, no card, then from US$5. See pricing.

Related glossary entries: lossy compression and transcoding.