What Is C2PA? Content Credentials Standard Explained

C2PA is an open standard for attaching signed provenance information to media files. A C2PA manifest records who signed an asset and what actions were taken on it, so any tool that reads the standard can check the signature and show the file's declared history.

What a Content Credential asserts

A credential says that a specific signer attached a specific set of statements to a specific piece of content, and that neither has changed since. That is a strong claim about origin and integrity. It is not a claim that the content is true, that the depicted event happened, or that a human authored it. Reading a credential as a truth badge is the single most common misunderstanding of the standard.

How manifests travel inside a file

The manifest is embedded in the file's own container using the structure each format provides — an application segment in JPEG, a dedicated chunk in PNG, and equivalent carriers in other formats. Because it rides inside the bytes, it moves with the file rather than depending on a lookup. When a format has no standardised carrier, provenance has to be carried alongside the file or resolved from the content itself.

Where credentials survive and where they don't

Credentials survive copying, storage and tools that understand the standard. They are commonly lost when platforms re-encode uploads, when screenshots are taken, when images pass through messaging apps, or when files are exported by software that ignores unknown segments. This is expected behaviour, not a defect. It is also why a single embedded manifest should never be the only place provenance lives.

Pairing embedded credentials with external records

The durable pattern is layered. The embedded manifest gives instant, offline-checkable provenance. An external registration of the same declaration lets a stripped copy be resolved back by its content. An imperceptible mark can bridge re-encoding when metadata is gone. Each layer covers a different failure mode; together they make a declaration hard to accidentally erase.

How to read a credential critically

Check three things: whether the signature validates, who the signer is and whether you have reason to trust them, and what the manifest actually claims. A valid signature from an unknown signer tells you the file is unmodified since signing — nothing more. Trust comes from the identity behind the key, not from the presence of a credential.

Frequently asked questions

Does C2PA prove an image is real?

No. It proves who signed the file and that it has not changed since. Whether the content depicts reality is outside what any signature can assert.

Why did my Content Credential disappear after uploading?

Many platforms re-encode or strip metadata on upload. The credential is removed with it, which is why external registration and watermarking are used as fallbacks.

Which file formats support C2PA?

Image and video formats with a standardised metadata carrier have the broadest support. Formats without one need provenance carried alongside the file or resolved by content.

Is C2PA the same as a watermark?

No. C2PA is signed metadata that can be removed but not forged. A watermark is a signal inside the pixels that survives re-encoding but carries far less information.

Inspect a signed asset

See what a credential reveals — and what it deliberately does not.