Tools › Privacy
Check Content Credentials and AI labels
See whether a photo, video or PDF says it was made or edited with AI: C2PA Content Credentials, edit history, IPTC “digital source type” and AI generator metadata.
How it works
- Content Credentials (C2PA) are read with the open-source Content Authenticity SDK, compiled to WebAssembly. It checks that the signature verifies and the file was not changed after signing.
- Nibbo also reads the IPTC digital source type in XMP, EXIF software tags, and the generation settings Stable Diffusion, ComfyUI and similar tools write into PNG files.
- For JPEG and PNG you can add an “AI-generated” label (IPTC trainedAlgorithmicMedia) to your own images without re-encoding them.
Questions
If no label is found, is the image real?
No. Most apps and social networks strip metadata on upload, so missing credentials say nothing either way. A label proves more than its absence.
What does “signer not checked against a trust list” mean?
The signature math is checked and the file is intact, but Nibbo does not look the signing certificate up in the official C2PA trust list or check revocation online. Treat the signer name as a claim.
How much does it download?
The Content Credentials engine is about 9 MB of WebAssembly, served from this site and cached after the first file. It is only fetched when a file actually contains credentials.
Can I add real Content Credentials?
Not here. That needs a signing certificate. The label Nibbo writes is the plain IPTC field that several platforms look for, without a signature.