C2PA Verify

Dark Rock Studios

About this app

In a world increasingly full of AI-generated images, how do you know what's real?

C2PA Verify reads the Content Credentials (C2PA) embedded in a photo and tells you, at a glance, where the image came from: who signed it, the tool that created it, whether it has been edited or generated by AI, and whether the signer is one you can trust.

Pick a photo from your device, or share one to C2PA Verify from any other app, and get a clear verdict:

• Signed & trusted — the photo is signed by an authority you trust and hasn't been tampered with
• Signed by an unknown party — valid credentials, but from a signer you haven't trusted
• Invalid / tampered — the credentials don't match the image
• No Content Credentials — the photo carries no C2PA data at all

AI-generated and AI-modified images are clearly flagged, as are camera captures, software-created images, and ordinary edits.

WHAT YOU CAN DO

• See the signer, the claim generator (the tool that made the photo), and when it was signed
• Read a plain-language timeline of everything that happened to the image — created, opened, cropped, colour-adjusted, AI-edited, and more
• Dig into the full manifest: signature and certificate details, assertions, ingredients, and validation results, right down to the raw JSON
• Manage which certificate authorities you trust, with your own allow/deny rules
• Export a shareable verification report with the verdict laid over the image

PRIVACY

C2PA Verify reads photos entirely on your device. It does not upload your images anywhere.

ABOUT C2PA

C2PA (the Coalition for Content Provenance and Authenticity) is an open standard for content provenance — the same Content Credentials supported by a growing number of cameras and image-editing tools. C2PA Verify is the "last mile": surfacing that information to you in a way that's actually readable.

Free and open source. MIT licensed.

What’s new

First release of C2PA Verify.

Inspect the Content Credentials embedded in any photo: see who signed it, the tool that made it, whether it was edited or AI-generated, and whether you can trust the signer.