free c2pa checker
Check any file for Content Credentials.
Drop an image, PDF, or video. Priorframe reads its C2PA manifest in your browser, tells you whether the credential discloses AI or records a human signing, and checks the Priorframe registry. Free, no login, nothing uploaded.
Your file never leaves your device. To check the registry, your browser sends only two fingerprints: a SHA-256 hash and a perceptual hash.
Result
the registry
Every protected photo also has a public verify page.
A verify page shows what was signed and registered, and when, and it is readable by anyone with the link: an editor, a client, a platform trust team, or a stranger who wants to know when a picture was first registered, and by whom.
Most social platforms strip embedded credentials when you upload. The verify link keeps working anyway, and the fingerprint registry re-identifies the image even after the credential is stripped. That is why the checker above also looks a file up by fingerprint.
What a verify page shows
- A preview of the protected photo
- The content hash of the exact file
- The date and time it was sealed
- The public name of the account that signed it
- Whether the record is still in good standing
record verified
- signed_by
- wren.studio
- signed_at
- 2026-03-14T09:21:07Z
- asset_sha256
- 9f2a4c1d…e8c41b
- status
- first publication recorded
questions
Content Credentials, answered.
How do I check whether an image was made by Claude, ChatGPT, or another AI tool?
Drop the file into the checker above. If the tool that made or edited it attached Content Credentials, the manifest names the tool and, in most cases, declares a digital source type such as trained algorithmic media. The checker labels that as AI-generated or AI-edited content and shows the history in order. If there is no manifest, the checker says so plainly, because a missing credential proves nothing either way.
What is a C2PA manifest, and what are Content Credentials?
C2PA is the open standard, developed by a coalition including Adobe, Google, Microsoft, and OpenAI, for attaching a tamper-evident record of origin and edits to a file. A manifest is that record: who signed, when, with which tool, and what happened to the file. Content Credentials is the public name for the same technology. The manifest travels inside the file under a digital signature, so any change to the file after signing shows up as a mismatch.
Does a missing credential mean the image was not AI-generated?
No. Most tools still do not attach credentials, and the ones that do can have them stripped by a screenshot, a re-save, or a social platform’s re-encoding. Older AI models never signed anything. Treat a missing credential as missing information, nothing more.
What is the difference between Content Credentials and a watermark?
A watermark is a mark placed in the pixels or the audio, visible or invisible, that tries to survive edits. Content Credentials are signed metadata that sit alongside the content and describe its history. A watermark can survive when metadata is stripped; metadata can carry far more detail than a watermark, and a signature makes it tamper-evident. Some tools use both. This checker reads credentials; it does not detect watermarks.
How is Priorframe different from Adobe’s Content Credentials verify tool?
Both read the same open standard, and this checker validates against the same official C2PA trust list. Adobe’s tool shows you the credential and stops there. Priorframe signs on the other side of the standard: a person signs their own photo before publishing, to prove priority, and the registry keeps a fingerprint so the record survives when platforms strip the credential. This checker labels both kinds of credential, shows the full history, and looks the file up in the Priorframe registry.
Is my file uploaded when I use the checker?
No. The manifest is read by WebAssembly inside your browser, and the file stays on your device. To check the registry, your browser sends only two fingerprints derived from the file: the SHA-256 hash of its bytes and a 64-bit perceptual hash. Neither can be turned back into the image.
What does “on the C2PA trust list” mean?
A signature can be intact and still come from anyone, including a test certificate. A signer is on the trust list when its certificate chains to a Certificate Authority on the official C2PA trust list, which covers the certificate authorities that conforming products use. This checker ships that list and validates against it, the same rule the Priorframe signer applies.