Verifieddit - C2PA Content Credential Verifier

Verify content authenticity with C2PA Content Credentials. See who signed a file, whether it was altered, and declared AI origin.

Verifieddit is a free, open-source browser extension that verifies Content Credentials (C2PA) embedded in images, videos, and audio files on any website you visit. What are Content Credentials? Content Credentials are an open standard (C2PA) for proving where digital content came from and how it was created or modified. Major organisations including Adobe, Google, Microsoft, and the BBC have adopted the C2PA standard. New in 1.5: Verifieddit 1.5 now flags files whose Content Credential does not cover the image itself. With such a credential, the picture can be swapped and the signature still checks out. The extension marks these files red and names the part the signature left out. Files that leave out only header metadata get a note instead and keep their result. The release also reports revoked certificates. When a file includes its issuer's revocation status, and the issuer has revoked the signer's certificate, the badge turns red and reads "Signer's certificate revoked." Earlier versions labelled these files as changed after signing. Key Features: - Automatic Detection: Scans media elements on any webpage for C2PA content credentials - Visual Indicators: Shows overlay icons on media with verified content credentials (green = valid, yellow = signer not in your trust lists, red = the signature failed: the file was changed after signing, the credential does not cover the image, or the issuer revoked the signer's certificate) - AI Origin, As Declared: Reports the IPTC digitalSourceType the signer recorded in their own signed manifest. It reads a declaration; it does not analyse pixels or guess. Media carrying no such declaration is shown as "not declared", never as "not AI" - Interactive Provenance Graph: Explore the full chain of custody as a graph: click a node to expand its detail, drag to pan, zoom, fit to frame, or open it full screen. Shows multi-generation ingredient history, assertions, and sensor telemetry - Certificate Verification: Validates signer certificates against the C2PA Trust List, including RFC 3161 trusted timestamps - Right-Click Inspection: Right-click any image, video, or audio to inspect its Content Credentials - Trust List Management: Ships the 30 anchors from the C2PA Conformance Program, the 22 official timestamp authorities, and the 26 known-certificate anchors the Content Authenticity Initiative publishes, so mainstream cameras and editing software read as trusted out of the box; import your own trust anchors and TSA certificates alongside them - Auto-Scan Toggle: Enable or disable automatic scanning per your preference Privacy-First: - Verifieddit checks files inside the browser and does not upload them - Two settings, both off by default, send data to SanMarcSoft - The durable credential check sends a short fingerprint of a picture, or of one video frame, to look for a registered credential. It does not send the file, the page address or any personal details - Usage statistics record which features are used, such as opening a badge. They do not include page addresses or file contents. Turning them off sends a request to delete the data already collected - No advertising and no account required What It Can Read: Photographs, video, audio, and PDF documents, across sixteen file formats: the ones the web is built on, the raw formats photographers shoot in, and the newer formats publishers have started serving. The current list is in the repository README. Open Source: MIT-licensed. View the source code at https://github.com/Sanmarcsoft/verifieddit-extension Learn more at https://www.verifieddit.com