What do Content Credentials prove?
C2PA provides tamper-evident declarations about a file and parts of its creation history. When embedded credentials validate, the SDK can check that declared content is signed and the file has not changed in ways covered by the signature. This does not guarantee the photo or claim is truthful, or that the signer is trustworthy.
What is reported?
Signers, capture or editing software, declared AI operations, ingredients, actions and the available manifests appear when they are present. The full manifest can be exported as JSON. Invalid integrity checks are not the same as an unknown signing authority, and remote trust-list validation is not performed.
No credentials found?
Many genuine pictures never had credentials or lose them after sharing, resizing or screenshotting. Absence is not evidence of manipulation.
FAQ
Does checking upload the file?
No. Processing stays on your device. The C2PA WebAssembly binary and worker are delivered from GratisTools, not third-party servers.
Are my files uploaded?
No. Inspection runs with JavaScript and WebAssembly running in your browser tab. Your files are read from your device and the results are created on your device; nothing is sent to gratistools.be or anyone else, which is also why there are no queues, daily limits or watermarks. See the privacy page.
Frequently asked questions
Is this tool free?
Yes. The core tool is free to use in your browser.