Signature is valid and the file matches its manifest from a recognized trust source.
Newsroom workflow
C2PA for Newsrooms — Verify Content Credentials Before Publication
C2PA Signer helps editorial teams inspect Content Credentials on photos and media received from agencies, contributors and social posts — locally in the browser, before a story goes live.
Verification Status Levels
The four immediate signals surfaced by C2PA Signer.
Signed correctly, but the certificate does not chain to a recognized public trust source.
C2PA data exists, but signature or integrity validation failed.
No C2PA manifest found. Editorial judgment remains the primary verification method.
Workflow
Pre-publication Workflow
A streamlined editorial verification process that checks provenance before external media is published.
Local-first privacy
Verification happens in the browser. Images are not uploaded to a C2PA Signer backend, keeping sensitive newsroom assets private.
Receive the image
A photo arrives from an agency, contributor, partner or social post, attached to a story or shared for review.
Open C2PA Signer
Launch the extension popup and drop the file into the local verification area, without uploading it to a C2PA Signer backend.
Verify the status
Read the badge: Trusted, Signed but untrusted, Invalid or No credentials. This tells you what C2PA evidence is present.
Open the report
Inspect the manifest, declared actions, signature, certificate chain and metadata to understand origin and integrity.
Document the editorial decision
Export the report, including JSON, and attach it to the story record so the provenance check is auditable.
Detailed Evidence Breakdown
C2PA Signer provides transparency into the technical assertions embedded within the media file.
Embedded Manifest
The core cryptographic document declaring claims, actions and historical assertions about the media.
Declared Processing
Transparency into editing and processing actions recorded throughout the file journey.
Signature Integrity
Confirmation of whether the manifest signature is valid and the content still matches what was signed.
Certificate Chain
Analysis of the signer certificate and whether it chains to a recognized C2PA trust source.
Tooling Assertions
Available data about capture software, timestamps and declared assertions included in the signing event.
JSON Manifest Export
Machine-readable data for archives, internal CMS integration or third-party auditing tools.
Common Editorial Scenarios
Breaking news
A contributor photo arrives from the scene. Check credentials before publication to review provenance and integrity signals.
Agency image
Wire photos may carry recognized credentials. Confirm the signer chain and that the file still matches its manifest.
Social media
A viral image is considered for a report. No credentials does not mean fake, but it means there is no C2PA evidence to rely on.
Re-edited file
An image modified after initial signing can be checked to see whether the manifest is invalid or properly updated.
Verified Insights
- Shows the entity that signed the content when signer data is available.
- Checks whether the file still matches the signed manifest.
- Displays declared edits made by C2PA-aware tools.
- Provides an auditable verification trail.
Limitations
- Does not prove that the photo represents objective truth.
- Is not universal AI-generated content detection.
- Does not mean unsigned content is automatically fake.
- Test signatures do not carry production-level public trust.
Frequently Asked Questions
Can C2PA prove a photo is real?
No. C2PA surfaces provenance and integrity signals: who signed the content, whether it still matches its manifest and whether the signer is recognizable. It does not decide whether a photo is real or fake.
What does “No credentials” mean?
It means the file has no embedded C2PA manifest. It is not a sign that the content is false, only that there is no C2PA evidence to inspect. Editorial judgment still applies.
Can we export reports?
Yes. C2PA Signer can export a report including JSON, so the provenance check can be archived with the story record or passed to downstream tools.
Can we integrate this into a CMS?
The core extension runs in the browser. For CMS, DAM or publishing-workflow integrations, see the enterprise options for custom workflows and reports.
Bring C2PA verification into your newsroom.
Inspect Content Credentials before publication and keep an auditable report for every checked asset.