Content Credentials checkerIs there a C2PA manifest in this file?

Choose the file above. Your browser looks inside it for a C2PA manifest, the block of data that carries Content Credentials. If one is there, the tool lists what it says about itself: the app that made it, the recorded actions and any declared source type. If none is found, the tool says so.

The file stays on your device. Your browser reads it and looks for the manifest locally. The page loads from timebinder.io like any web page, but the files you choose are not sent anywhere by this tool.

C2PA is the Coalition for Content Provenance and Authenticity, which publishes the open technical standard. Content Credentials is the name used for the standard’s manifests and the icon that goes with them. A Content Credentials manifest is a signed record, stored in or linked from the file, of who or what made it and how it was edited.

No. It reads the manifest and shows what the manifest declares. It does not check the signature, the signing certificate, whether the pixels still match, or whether the signer is trusted. For that, use the official Verify tool from the Content Authenticity Initiative at contentcredentials.org/verify.

No. Most images carry none. Many cameras, editing apps and websites do not add them, and some platforms and apps remove metadata, including Content Credentials, when you upload or export a file. Having no manifest says nothing about whether an image is real, edited or AI-generated.

Not by itself. A manifest shows what its maker declared. The maker of an AI image can declare that it is AI-generated, and an edited file can still carry an older manifest. Whether the signature is valid, and whether the signer is one you trust, has to be checked separately.

No. It does not analyse the picture. It only reads a manifest or a plain-text source label, if the file has one. Those are declarations made when the file was created. An AI image with no label gives no result here, and a label can be added or removed.

Some manifests, and some XMP metadata, include a source type using IPTC terms such as digitalCapture (captured by a camera) or trainedAlgorithmicMedia (the IPTC term for content generated by a trained AI model). The tool shows it as declared. In XMP it is plain text that anyone can edit; in a manifest it is part of the signed claim, but the tool does not check the signature.

A manifest can carry a signing time, but this tool does not check it, and it is only as reliable as the signer. A TimeBind is different: it records the file’s SHA-256 fingerprint on the Bitcoin blockchain, which shows the exact file existed no later than a recorded time and still matches.

JPEG, PNG and WebP images, and MP4, MOV and HEIC-style files. For other types it can only tell you whether the C2PA manifest marker is somewhere in the file. Files over 100 MB are skipped for images.