What Content Credentials are
Content Credentials are the consumer name for C2PA, an open standard backed by Adobe, Microsoft, Google, OpenAI, camera makers and news agencies. A C2PA manifest is a signed record inside the file: which tool or camera made it, what was done to it afterwards, and whether generative AI was involved.
ChatGPT, Gemini, Adobe Firefly and Microsoft Designer attach one to every image. Some cameras from Leica, Sony and Nikon sign photos at capture.
IPTC digital source types
The C2PA manifest and the image's XMP metadata use the same IPTC vocabulary to say where an image came from.
When there is no manifest
Screenshots, social apps and most editors drop Content Credentials. When a file has none, the full AI image detector checks generator fingerprints, camera data and the pixels instead.
For signed newsroom and camera files, the Content Credentials Verify site from the C2PA coalition also shows the certificate chain.
How the check works
- 1
Content Credentials and IPTC
We read the file's C2PA manifest and XMP metadata for the IPTC digital source type. “Trained algorithmic media” means a generator made it; “composite with trained algorithmic media” means AI edited a photo.
- 2
Generator fingerprints
Stable Diffusion, ComfyUI, InvokeAI and NovelAI write their settings into PNG files, and many tools name themselves in the software field. We read every text chunk and EXIF field.
- 3
Camera data
Real cameras record make, model, lens and exposure settings. We read them all and weigh them with everything else.
- 4
Close visual inspection
A vision model inspects the image for the tells generators leave: hands, teeth, text, reflections, repeated backgrounds and over-smooth skin.
More ways to check
Images
Video
Make AI images that stand out
Gireta puts Nano Banana, GPT Image, Seedream and every top image model in one studio, with one balance.
Questions
How do I check Content Credentials on an image?
Drop the image into the checker above. It reads the C2PA manifest in your browser and shows what it says. To verify the signature too, upload it to contentcredentials.org/verify.
Why does my image have no Content Credentials?
The tool that made it does not write them, or the file was screenshotted, re-saved or uploaded to an app that strips metadata.
Does C2PA prove an image is real?
A manifest that records a camera capture is strong evidence, provided the signature is valid. C2PA records history; it cannot say whether the scene itself was staged.
Do you keep my image?
No. The file is read in your browser and never uploaded. For the visual check, a small preview (at most 1024 pixels wide) is sent, inspected and discarded.
Sources
- C2PA specification
- IPTC: digital source type for generative AI
- Content Credentials: verify a file's signature
- OpenAI: C2PA in ChatGPT images
Last updated October 19, 2026.