Is this photo trustworthy?
Every photo has a story. JPEG Trust brings together information about its origin, history and content to help you assess its trustworthiness in the context that matters to you.
Mostly trusted — 12 of 13 checks passed
A valid signature isn't enough. You need to know: should I believe this image?
Most tools just check whether a signature is mathematically correct. JPEG Trust goes further: you define what "trusted" means for your context, and the tool checks the image against that standard.
Cameras sign photos the moment they're taken.
Supported cameras seal a digital fingerprint into the image at the instant of capture: the device, the time, and the exact pixels.
captured: "2026-03-14T09:42:11Z"
signed_by: "hw://nikon.z9.serial=..."
Every edit is recorded — nothing is hidden.
Crops, colour corrections, AI fills, redactions — each change is logged automatically: what tool made it, who approved it, and exactly what changed.
tool: "lightroom@13.4"
delta: { exposure: +0.3 }
Check the image against your own standards.
You define what "trusted" means: a newsroom might require author identity, edit history, and an AI declaration. The tool checks all of it and gives you a clear verdict.
verdict: "mostly trusted"
score: 92% · passed: 12 of 13
Open formats. Works with existing tools.
Built on JPEG Trust Second Edition, so photos signed by Adobe, camera manufacturers, or other tools work here too. Trust standards are simple config files you can version in git.
standard: "newsroom-wire-photo.yaml"
# JPEG Trust Second Edition
Read, sign, verify. Three things, one tool.
The record of who made a photo and what happened to it lives inside the file itself. It survives copies, exports, and re-uploads.
Read
Drop a photo and see everything recorded inside it — who took it, when, every edit, whether AI was involved.
author: "e.rivera"
ai_used: false
Sign
Add your name, copyright, edit history, and AI declarations. After signing, the tool re-reads the file to confirm everything was written correctly.
re_verify: "pass"
profile_fit: 7/8
Verify
Pick a trust standard, run the image against it, and get a report: what passed, what's missing, and whether to trust the result.
required: 12/13
score: 0.92
Six tools for checking, signing, and verifying photos.
Each tool can also be used from a script or an API — anything you do in the browser can be automated on a server.
Read metadata
Drop a photo. See who made it, when, what was edited, and whether AI was involved.
Open Read →Add metadata
Sign your own photos with your name, copyright, edit history, and AI declarations.
Open Add →Verify trust
Check an image against a trust standard. Get a clear verdict with a downloadable report.
Open Verify →Create trust profile
Define what "trusted" means for your use case. Start from a template or build your own.
Open profile builder →Batch verify
Upload a folder, pick a trust standard, and get a table showing pass/warn/fail per image.
Open Batch →Examples & API
Test files covering every verdict. Use them to learn the tool or test your own integration.
Browse examples →Verify, embed, validate — from any backend.
The same engine that powers the in-browser tools is available as a Python library and an HTTP API.
# Verify an image against a trust profile from jpeg_trust import verify, load_profile profile = load_profile("newsroom-wire-photo.yaml") result = verify("sunset-final.jpg", profile=profile) print(result.verdict) # 'mostly_trusted' print(result.score) # 0.923 print(result.required_passed) # 12 of 13 # Write both reports to disk result.save_json("report.json") result.save_summary("summary.txt")
For the people who care whether an image is real.
JPEG Trust is intentionally narrow. It does one thing — make image provenance verifiable.
Verify wire photos before they reach the front page.
Run JPEG Trust on every submission from stringers and freelancers. Manipulated images get caught at the photo desk, not after publication.
Prove your work isn't AI — without showing the raw file.
Sign at export. Anyone can verify the JPEG came from your camera and you own it, without you handing over the original.
JPEG Trust enables Article 50 AI labelling.
The EU AI Act requires AI-generated content to carry machine-readable provenance metadata. JPEG Trust enables mechanisms to embed what Article 50 demands.
How to comply with Article 50 →Frequently asked.
Short answers, here. Longer versions live in the docs.
Is JPEG Trust the same as C2PA?+
JPEG Trust is a large trust framework that covers provenance, authenticity and integrity, along with intellectual property rights. It supports generating reports that check media assets against a given context (trust profiles). Parts of the framework, largely those on provenance, are built on the C2PA manifest and are therefore compatible with C2PA.
What if the image has no manifest?+
JPEG Trust will report "unsigned" — which is not the same as "fake". It just means provenance cannot be verified. Treat unsigned images as you always have.
Does the manifest survive crops, resizes, and platform reposts?+
If the tool you use preserves the manifest, yes — mainstream editors do, and the signature accommodates declared edits without breaking. Some social platforms still strip metadata.
Do my images get uploaded to a server?+
Images can be processed locally by the Python module, or by a small verification API you host yourself. For production, run your own instance.
Can someone fake a manifest?+
Anyone can sign anything. A manifest is only trusted if its signing certificate chains back to an issuer on the ISO trust list. Files signed with unrecognized keys raise an "unknown issuer" warning, not a green verdict.
Open, ratified, citable.
Every part of JPEG Trust is published as an international standard. Implement it however you like.
Profile-based trust for any media asset.
Read, embed, verify. Browser tools or a small Python API. Open formats, no lock-in.
Supported by
This implementation is supported by the UK Engineering and Physical Sciences Research Council (EPSRC) through an Impact Acceleration Account held at Newcastle University.
EPSRC creates knowledge in engineering and physical sciences for UK capability to benefit society and the economy.