Provyn

Hover any image to see who signed it, whether it says it was AI-made, and when it first appeared online.

Every picture you see online came from somewhere. Some of them carry a record saying where. This extension reads it. Hover any image and a small badge appears in the corner. Hover the badge and a panel opens with a plain answer at the top: made by AI, taken by a camera, or nothing on file. HOW IT WORKS Some images have a signed record tucked inside the file — who made it, what software was used, when, and whether AI was involved. It is an open standard called C2PA, and it is starting to appear in images from Google, Adobe, OpenAI, some camera makers and some news agencies. The extension reads that record straight out of the file, in your browser, and tells you three things. WHO SIGNED IT. The name on the record, and whether the signature holds up. WHETHER IT SAYS IT IS AI. Read from the record itself, never guessed from what the picture looks like. A guess would be a confident opinion with no evidence behind it, and shown next to a real signature it would look like it carried the same weight. WHEN IT FIRST APPEARED. An optional lookup asks the Internet Archive whether that image address existed earlier. You can switch this off. WHAT THE PANEL CAN TELL YOU Made by AI. The record says the image was generated by AI, and names the tool where it can. AI was used to edit this. A real photograph with generative editing on top. Image taken by camera. The record says a camera captured it. Worth knowing that this describes the act of capture, not what was in front of the lens — someone can photograph an AI image on a screen and get a perfectly genuine camera capture. The wording says what was recorded, never "not AI". Created by [name]. A valid record that names a signer but never says how the image was made. The origin field is optional in the standard and plenty of tools leave it empty, so this is common and usually innocent. Unreliable metadata. Either the record's signature does not hold up, or the picture no longer matches the record it came with. The second usually means an innocent crop or re-save by a website. The first is the only red warning in the whole extension, and it means the record was altered after signing or was never genuine. No metadata. No record at all. This is what you will see most of the time. TWO THINGS IT WILL NOT DO It will not tell you an image is real. Both limits below matter more than the feature list, so they are stated plainly here rather than buried. FIRST, most images have no record. Social networks, news sites and messaging apps remake your file when you upload it, and remaking it throws the record away. On a typical page you will see "No metadata" on nearly everything. That proves nothing either way. It is the normal case, not a red flag, and the panel says so rather than implying something is wrong. SECOND, a signature that checks out proves the record has not been altered since it was signed. It does not prove the name on it is genuine. The certificate is not checked against the official C2PA trust list, so anyone can sign an image claiming to be anyone at all. The panel says this in words rather than showing a green tick that would overstate the case. If you need rigorous trust decisions, use the official C2PA tooling, which validates certificate chains properly. This is an honest reader of what a file carries. It is not a verifier, and it is certainly not a deepfake detector. PRIVACY Your pictures never leave your computer. The file is read inside your browser. There is no account, no sign-in, no tracking, no analytics, and no server anywhere in this extension. The one thing that leaves your machine is the optional "first seen online" lookup, which sends an image's web address — never the image itself — to the Internet Archive. Untick it in Options and the extension makes no outside requests at all. No API keys. Nothing stored except your own settings. WHY IT ASKS TO RUN ON ALL SITES It cannot know in advance which page you will want to check, and restricting it to a fixed list of sites would make it useless on the site you actually care about. It reads an image only when you hover it, and it reads image files — nothing else on the page. SETTINGS Turn the extension on or off, switch it off for particular sites, set the minimum image size, choose which corner the badge sits in, require a key to be held before badges appear, and turn the archive lookup on or off. WHO THIS IS FOR Journalists and editors checking a picture before running it. Researchers, moderators and fact-checkers. Anyone who has been sent an image and wondered where it actually came from, and who would rather have a straight answer — including "nobody knows" — than a confident guess.