C2PA Content Credentials, explained
Content Credentials (built on the C2PA standard) are a newer kind of hidden metadata: a cryptographically signed record of how an image was made and edited — including whether AI was involved.
Where Content Credentials come from
Adobe apps (Photoshop, Lightroom, Firefly), Google Pixel phones, Leica and Sony cameras, and AI generators like DALL·E, Firefly, and Imagen embed C2PA data by default or on export.
iPhones don't add C2PA themselves — so if an image you have carries it, it usually means it passed through one of those tools.
Why you might want to remove them
Content Credentials can reveal that an image was AI-generated or edited, along with tool and timing details you may not want attached when you share it.
NoTrace currently scans for common embedded C2PA / Content Credentials markers and drops stale provenance payloads during supported cleanup operations. It does not yet validate the signed manifest cryptographically.
Check before you share. Use the free browser checker to see supported GPS, device, timestamp, and editor metadata locally, or clean verified copies with NoTrace on iPhone.
FAQ
Can you tell if a photo has Content Credentials?
NoTrace can flag common markers associated with an embedded C2PA manifest. This is a useful warning, not cryptographic proof that a valid manifest is present.
Does removing C2PA change the image?
No — it removes the provenance record, not the pixels.