Some digital images contain Content Credentials based on the C2PA standard, developed by the Coalition for Content Provenance and Authenticity.
Content Credentials provide a way to associate an image with signed information about its provenance. Depending on how the image was created or edited, this information may describe the claimed origin of the content, actions performed on it, or the entity associated with the credential.
PhotoSanitize can identify supported C2PA information during inspection and report the results of its validation.
Content Credentials versus ordinary metadata
C2PA information serves a different purpose from common camera metadata.
EXIF may describe exposure settings, capture dates, and GPS coordinates. IPTC and XMP may store captions, creator details, or editing information. Content Credentials can contain digitally signed provenance assertions intended to support the integrity of the associated record.
An image can have ordinary metadata without Content Credentials, and an image with Content Credentials can still contain privacy-sensitive metadata.
Consequently, provenance inspection and privacy sanitization should not be treated as interchangeable operations.
Inspecting Content Credentials
Analyze the photograph, then open Details and select Provenance.
PhotoSanitize displays information about detected C2PA content and its available validation state. Relevant concerns may also appear in Findings.
The results distinguish several different situations. A trusted credential has satisfied the applicable cryptographic validation and trust checks available to the application. A valid but untrusted credential may have a valid signature without an established trusted signer. An invalid credential has failed applicable validation, while other statuses may indicate incomplete or unavailable evidence.
These distinctions matter because the presence of signed data alone does not establish its trustworthiness.
What validity means
A cryptographically valid Content Credential supports the integrity of the signed provenance information according to the applicable validation process.
It does not prove that every statement associated with the photograph is true or that the depicted scene is authentic.
For example, a signed credential may establish that certain information was asserted by a particular signer. It does not independently verify every real-world event or person shown in the picture.
Similarly, the absence of Content Credentials is not evidence that an image is false or manipulated.
Remote credentials
Some image files refer to C2PA manifests stored remotely rather than embedding all relevant information.
PhotoSanitize does not fetch remote manifests during its local validation workflow. When a required manifest is unavailable locally, the application may report that it was not fetched or that complete validation could not be performed.
This reflects the limits of the available information rather than a definitive judgment about the image itself.
Sanitization and provenance
PhotoSanitize’s normal sanitization policies remove embedded Content Credentials from sanitized output files.
This can be appropriate when the objective is to remove unnecessary source-associated information. However, it also means that a recipient of the sanitized image may no longer have access to the original embedded provenance record.
For photographers, publishers, and organizations that rely on Content Credentials, this is an important consideration. You may wish to preserve the original image separately and retain a report of the provenance information identified during inspection.
PhotoSanitize provides an option to include provenance validation information in supported reports.
Privacy considerations
Content Credentials do not replace metadata cleanup or visual privacy protection. A photograph with trusted credentials may still reveal a private location, an identifiable person, or confidential information visible in the scene.
Likewise, removing Content Credentials does not remove all other sources of identification.
Consider provenance preservation and privacy protection as related but distinct requirements. The correct treatment depends on how the image will be used and whether its original provenance information needs to remain available.