File Sniff

Free image provenance checker

Does this image
disclose AI use?

Inspect embedded Content Credentials and see what an image says about its creation. Your image stays on your device.

Look for the evidence inside.

Choose a JPEG, PNG or WebP image, up to 25 MB.

No account. No image uploads. Missing credentials do not mean “not AI”.

By using this tool, you agree to our terms. Read our privacy policy.

Choose an image to inspect its embedded credentials.

What can this tell you?

Content Credentials are signed records that can describe how an image was created and edited. Some include a declaration of AI generation or AI-assisted editing. This checker reads the active embedded credential and checks its integrity using the C2PA SDK.

It cannot determine whether every image was made by AI. No credentials means the image’s origin is unknown. Screenshots, re-encoding and sharing can remove credentials. A valid credential does not prove that the depicted scene is real or that every declaration is true.

Understanding your result

  • AI generation declared: the active credential contains the standard AI-generation source type. Read the integrity result alongside it.
  • AI or algorithmic editing declared: the active credential describes AI compositing or algorithmic enhancement. This does not mean the whole image was generated by AI.
  • Credentials found; no AI declaration identified: a record exists, but the inspected actions do not disclose AI use. This is not proof of a camera original.
  • No embedded credentials found: origin unknown. The image may lack credentials, have lost them, or reference a remote record.
  • Credentials failed validation: do not rely on the declarations. The file or credential may be damaged, altered or invalid.

What stays local?

The image is processed in a background worker on your device. We host the checker’s WebAssembly engine ourselves and load it only when you choose an image. Images, filenames and results are not sent as analytics events. Website analytics is described in our privacy overview.

This version does not retrieve remote manifests, load remote thumbnails, check certificate revocation online, or consult a public signer trust list. Signer trust is not established, even when local integrity checks pass. It does not inspect invisible watermarks or guess from visual patterns.

Need a different kind of check?

Use our file type checker to identify an unknown format or misleading extension. Read how to check whether an image discloses AI use for examples and limitations.

For the underlying standard, see the C2PA explanation and the Content Authenticity Initiative’s browser SDK.