C2PA Lab

A photo of a flooded town centre is everywhere by lunchtime, and by dinner nobody can say who took it or what has been changed since. Some cameras and editing tools can attach a signed record of a file's origin and edits, known as Content Credentials and built on the C2PA standard. C2PA Lab opens that record in the browser and shows whether the signature holds and whether the record belongs to that exact file.

The report lists the recorded actions on a timeline and names the signer when the credential does. Files of up to 200 MB are read inside the browser, and the privacy page says they stay on your device. Another checker takes a link to a public file. If the other server blocks the browser, a proxy passes the file along, and the site says it neither stores nor logs files.

A valid signature shows that the record is intact and tied to the file, which leaves open whether its claims are true. Re-encoding and social media uploads can remove the record, so the site treats a missing one as no evidence of editing or AI generation. Its terms rule out presenting results as proof of authenticity or of AI generation.