Does an image with no credentials count as human-made?

No. It means only that this file has no readable C2PA data. Camera photos, hand-made art and AI output are all mostly without it, so absence says nothing about how the image was made. The result panel states the same thing.

Does finding Content Credentials prove an image is AI-generated?

No. The checker adds no AI-generated label of its own. It lists the issuer, the generator and the action names the manifest records, and you judge from what the creating tool chose to declare.

What does a signer that is not on the trust list mean?

The signature and hashes match the file, but the signing certificate is not one the library recognizes as trusted, so the credentials alone prove little. An Invalid badge is different: the hash or signature failed, for example because the file changed after signing.

When should I use the C2PA Viewer instead?

Use the viewer when you need the detail behind the summary: the signing algorithm, certificate serial, manifest label and claim generator, plus the raw assertions and ingredient history. This page keeps to a short plain-language readout.

Image Provenance Checker

Check an image for embedded C2PA / Content Credentials data.

Loading…

About Image Provenance Checker

Some cameras, editors and AI image tools sign their output with Content Credentials, a C2PA manifest stored inside the file. Add an image and the server reads that manifest with the c2pa-python library, then reports the issuer, the generator, the actions it recorded and whether the signature and hashes verify. Most files carry nothing at all, and the result then says only that no supported provenance data was found, which tells you little about how the picture was made.

Features

Reads embedded C2PA Content Credentials with the c2pa-python library
Shows the library's own signature and content hash verdict
Summarizes issuer, generator, creation info, edit history and recorded actions
Never adds an AI-generated label of its own
Identifies JPG, PNG and WebP files by their real content, not the file extension

Limitations

No credentials found does not mean an image is authentic, human-made or AI-generated; most files carry none.
Only the manifest embedded in the file is read; credentials kept separately from the file are not looked up.
JPG, PNG and WebP files up to 60 MB are accepted, and the tool reads the manifest only, not the picture itself.
The file is sent to our server to be read, and the result is held for a limited time and then cleared automatically.

How it works

Drop an image onto the upload area, or browse for one.
Check the thumbnail and file name, then select Check provenance.
Read the validation badge, which shows whether the signature and content hashes check out and whether the signer is on the trust list.
Look at the issuer, generator, creation info, edit history and recorded actions.
Follow the link to the C2PA Viewer if you want the full technical manifest.

Frequently asked questions

: No. It means only that this file has no readable C2PA data. Camera photos, hand-made art and AI output are all mostly without it, so absence says nothing about how the image was made. The result panel states the same thing.
: No. The checker adds no AI-generated label of its own. It lists the issuer, the generator and the action names the manifest records, and you judge from what the creating tool chose to declare.
: The signature and hashes match the file, but the signing certificate is not one the library recognizes as trusted, so the credentials alone prove little. An Invalid badge is different: the hash or signature failed, for example because the file changed after signing.
: Use the viewer when you need the detail behind the summary: the signing algorithm, certificate serial, manifest label and claim generator, plus the raw assertions and ingredient history. This page keeps to a short plain-language readout.