Content Credentials
A signed record of capture and editing history attached to a file
- Content Credentials is a history label attached to a file stating when and where it was made and what was done to it since.
- Unlike a watermark embedded inside the content itself, this is a record that rides along with the file. It's meant to be opened and read by a person.
- The record carries a signature. Touch even one character and the signature no longer matches, which exposes the tampering.
- The record is easy to strip off entirely while a file moves around. A single screenshot is enough to lose it.
- It's a tool where having it gives you something to trust, but not having it doesn't mean something's fake.
Contents
1The analogy
A new appliance comes with a small warranty tag attached. It lists when and where it was made, which store it passed through, and when any part was replaced, in order. Later, if it gets resold secondhand, that tag makes life much easier for the buyer — they can read where it's been without taking it apart.
The tag carries the issuer's signature too. Alter a single digit on it and the signature stops matching, which gives it away almost immediately. Forging the whole tag from scratch is hard for the same reason.
The problem is that the tag comes off easily. It gets lost while unpacking, or while moving the item into a different box. A missing tag doesn't mean the item is fake — it just means there's no longer a way to read its history. The provenance record attached to a file sits in exactly this spot.
2In detail
A history label that travels with the file
Content Credentials sets aside a dedicated field inside a photo or video file and writes a record into it: what device captured it, when it was made, what software touched it and how, and if an AI tool was involved, at what stage it stepped in.
The important part is that this record only ever adds on. The line written at the moment of capture gets a line for retouching stacked on top of it, and a line for cropping stacked on top of that. Nothing gets erased and rewritten — it accumulates, so the final file alone shows the whole path it traveled.
On the reading side, a dedicated tool or a supporting service opens it up. Unlike an invisible watermark, it comes back in a form a person can actually read.
A signature that gives tampering away
If the record were just written in plainly, anyone could edit it. So each line carries a signature. The file's content and its record get combined into one value, and that value is what gets signed — so touching the photo even slightly changes the value and throws off the signature.
Whoever checks it looks at both whether the signature is valid and whether whoever signed it is trustworthy. A mismatched signature tells you something too: that the record and the current file no longer agree. A missing record and a broken one are different signals.
That signature doesn't guarantee the record is telling the truth, though. It only confirms that this record came from here and hasn't changed since. A record that was wrong from the very start can still carry a perfectly valid signature.
Missing doesn't mean fake
Misreading this tool gets dangerous fast. The moment "no record means it was tampered with" becomes the rule, every photo from an older device that never attaches one, and every photo passed through a few rounds of messaging apps, ends up under suspicion for no reason.
The reading needs to run the other way. A record present with a valid signature adds a reason to trust it — a missing record just means holding off on judgment. Absence is a lack of information, not evidence of anything.
Where it falls off
The record lives in a dedicated field inside the file, so deleting that field or rebuilding the file as something new wipes it out. A screenshot creates an entirely new file, so nothing carries over, and a service that resaves files to shrink them often strips the whole thing out along the way.
To work around this, the same record often gets kept in an outside registry too, separate from the file. Even if the record falls off the file itself, it can be recovered by matching a fingerprint-like value computed from the content back to the stored original.
How this differs from a watermark
The two aren't competing techniques — they cover for each other. A watermark sits inside the content and can survive a fair amount of editing, but a person can't read it directly; Content Credentials is readable and detailed but falls off easily. In practice, both get used together, alongside detection as a further backstop. Last checked: 2026-09.
3More precisely
A Content Credentials record is built by taking a summary value of the content and the record of its creation and editing steps, and signing that combination electronically. As more cameras and editing and generation tools adopt the same shared standard, each one adds its own line, and the history chains together across tools without any single party owning the whole record. Checking it means verifying that the signer's certificate is valid and that the summary value still matches the current file.
The analogy breaks down in places too. A warranty tag is physically attached to the item, so removing it leaves a visible trace; a file's record just disappears quietly, with nothing left behind to show it was ever there. And a tag is issued by one party, while a file's history is layered — camera, editing tool, and delivery service can each add their own signed line, so a single file can end up carrying several signatures stacked on top of each other.
What this record can answer is narrow. It can answer "what path did this file take." It cannot answer "did what's shown in this photo actually happen," and it was never designed to.
Last verified: 2026-09
4Try it yourself
5Common misconceptions
It's easy to think a missing record means the file is fake, but actually plenty of devices never attach one, and the record falls off easily along the way regardless.
It's easy to think a record present means the content is true, but actually it only vouches for the file's path, not for whether what's shown actually happened.
It's easy to think this is the same thing as a watermark, but actually one is a mark embedded inside the content and the other is a record attached to the file — two different approaches.
7One-line summary
In shortContent Credentials is a signed history label that travels with a file, and having it gives you a reason to trust the file, but not having it doesn't mean it's fake.
Spotted an error or have a better analogy? Suggest an edit · Last updated2026-09-02