7 desktop apps for content credentials and image provenance in 2026
Apple's Reference Image feature on iPhone 18 Pro embeds cryptographic authenticity data at capture, but the reach is narrow: it only signs frames taken with Apple's own camera pipeline, and it only signs on that single hardware line. Anything a working photographer captures on a Nikon Z8, imports from a Sony body, edits on a laptop, or receives from another photographer over Signal is outside that promise. That is why the professional workflow lives on the desktop, where the C2PA content credentials standard is embedded, verified, and inspected using cross-vendor tools.
We looked at seven desktop and desktop-adjacent apps that write, read, or forensically inspect C2PA manifests. Two are the pillars of the Adobe workflow, two are free reference implementations from the Content Authenticity Initiative and its members, one is a browser extension that verifies credentials directly on the pages you visit, one is a blockchain-anchored capture tool from Numbers Protocol, and one is a forensic analyzer for photos that arrive with no manifest at all.
What to look for in a content credentials app
C2PA signing with a trusted certificate. The manifest is only as useful as the certificate authority behind it. Adobe, Truepic, Numbers Protocol, and Leica issue certificates that C2PA-aware software will trust out of the box; self-signed certificates work for testing but flag as unverified elsewhere.
Provenance tree inspection. A single JPEG can carry a chain of manifests: capture in Photoshop, ingest in Lightroom, tone edit in Photoshop again. A useful tool exposes each hop, the actions taken, and the signer at each stage, not just the last one.
EXIF and XMP preservation on export. Content credentials sit alongside existing metadata rather than replacing it. Any tool that strips EXIF or overwrites XMP during export defeats the purpose.
Offline verification. A manifest embedded in a JPEG can be validated without a network call, using only the cryptographic signature and a trusted certificate list. Prefer tools that support offline verification for archival and courtroom use.
Publisher and photographer identity. Attaching a name, social handle, or press outlet turns a signed image into an attributable one. This should be optional and reversible, since news photographers in hostile environments cannot always attach identity safely.
Quick comparison
| App | Best for | Free plan | Starting price | Standout |
|---|---|---|---|---|
| Adobe Photoshop | Signing edits in a full pipeline | 7-day trial | Around $22.99/mo | Records every edit action into the manifest |
| Adobe Lightroom Classic | Batch signing on export | 7-day trial | Around $19.99/mo (Photography plan) | One-click apply on JPEG export |
| Content Credentials Verify | Reading any signed file | Free web app | Free | Official CAI reference viewer |
| c2patool | Scripted signing and inspection | Fully free | Free (Apache-2.0 / MIT) | Attach or read manifests from the terminal |
| Digimarc C2PA Extension | Verifying images while browsing | Fully free | Free (MIT) | Adds a CR pin to signed images on any page |
| Numbers Protocol Capture Eye | Provenance plus blockchain proof | Free tier | Free for basic use | Combines C2PA with on-chain registration |
| FotoForensics | Analyzing unsigned or altered images | Free web use | Free with paid credits | ELA and metadata forensics when no manifest exists |
Every tool here runs on Windows, macOS, and Linux, either as a native desktop app, a browser extension, a command-line binary, or a web app that opens in any desktop browser. Nothing on this list is mobile-only.
1. Adobe Photoshop, the reference for signing edits
Photoshop is where content credentials moved from research project to daily working tool. Enable the Content Credentials panel under Window, sign in with your Adobe ID, and every edit action from that point forward is recorded into a C2PA manifest that gets embedded on export. Adobe co-founded the C2PA standard and its certificate is trusted by every other tool on this list, which means a Photoshop-signed JPEG opens in Verify, Digimarc, and c2patool without any trust prompts.
Where it falls short: the manifest is applied at export, so intermediate PSD files carry no credential. Content Credentials also require a Creative Cloud sign-in, so an offline workflow cannot produce a signed export.
Pricing: Around $22.99 per month for the standalone Photoshop plan, or around $19.99 per month for the Photography plan that bundles Lightroom Classic. A 7-day free trial covers the full feature set.
Platforms: Windows, macOS.
Download: Publisher site
Bottom line: the default choice if you already retouch in Photoshop and want the signature to reflect the actual edit history rather than a single opaque export step.
2. Adobe Lightroom Classic, best for batch signing
Lightroom Classic applies content credentials at export, which fits the way most photographers actually work: cull a shoot, apply develop settings across a stack of RAW files, then export a batch of JPEGs for delivery. The Export dialog carries a Content Credentials section where you toggle whether to embed the manifest into the JPEG, publish it to the Content Credentials Cloud, or both. The publish option keeps a copy of the manifest reachable even if the file is later stripped by a social platform.
Where it falls short: credentials only apply on JPEG export, not on TIFF, PSD, or DNG. RAW-first workflows that hand off to another editor before final JPEG generation lose the Lightroom step from the chain.
Pricing: Included in the Adobe Photography plan at around $19.99 per month, which also bundles Photoshop and 1 TB of cloud storage. A 7-day trial covers export.
Platforms: Windows, macOS.
Download: Publisher site
Bottom line: the right pick for photographers who deliver a batch of finished JPEGs at the end of a shoot and want each one signed with the same identity.
3. Content Credentials Verify, the official viewer
Verify is the reference implementation of the Content Credentials viewer, run by the Content Authenticity Initiative. Drag any JPEG, PNG, MP4, or WAV onto the page in a desktop browser and it renders the manifest tree, the certificate chain, and the actions recorded at each step. The tool also flags images where the manifest is missing, damaged, or where the pixels have changed since the signature was applied. It is the neutral ground both photographers and publishers point to when there is a dispute about provenance.
Where it falls short: it only reads, it does not sign. The web app also uploads files to a browser sandbox, and while nothing leaves the client, some newsrooms still prefer to inspect sensitive images with a local tool like c2patool.
Pricing: Free, hosted by the Content Authenticity Initiative.
Platforms: Any desktop browser on Windows, macOS, or Linux.
Download: Verify web app
Bottom line: the tool to send a source when you need them to check a manifest without installing anything.
4. c2patool, the command-line reference
c2patool is the open-source CLI that ships alongside the C2PA specification, maintained by the Content Authenticity Initiative under contentauth on GitHub. It reads a JSON manifest definition and attaches it to a media file, produces a summary or low-level report of an existing manifest, and validates signatures against a trust list. It is what production pipelines at news agencies actually call, wrapped in a build script or a moderation queue, because it is scriptable and license-clean (Apache-2.0 and MIT dual). Development has moved into the broader c2pa-rs repository, but the binary retains the c2patool name and interface.
Where it falls short: there is no GUI. Photographers who do not script will find it faster to sign inside Photoshop and verify in the web app.
Pricing: Free, dual-licensed Apache-2.0 and MIT.
Platforms: Windows, macOS, Linux. Pre-built binaries per platform, plus a cargo install path for Rust users.
Download: GitHub
Bottom line: the pick for engineers wiring content credentials into a CMS, a photo agency ingest pipeline, or a research project.
5. Digimarc C2PA Content Credentials Extension, verify while you browse
Digimarc built the first open-source browser extension that reads C2PA credentials on any page you open. Once installed, signed JPEG and PNG images get a small CR pin overlaid in the corner, and clicking it opens the manifest tree inside the browser. It also validates MP4 video and MP3 or WAV audio when the site serves them with an embedded manifest, and it can recover credentials from Digimarc and Adobe Trustmark watermarks even if the file was stripped in transit. The code lives on GitHub under an MIT license and the extension ships on the Chrome Web Store.
Where it falls short: Chrome and Chromium-based browsers only. Firefox and Safari require running the source locally in developer mode.
Pricing: Free, MIT licensed.
Platforms: Chrome and Chromium browsers on Windows, macOS, and Linux.
Download: GitHub
Bottom line: the fastest way to spot which images on a news site or social feed carry real credentials without downloading each one.
6. Numbers Protocol Capture Eye, provenance plus on-chain proof
Capture Eye is the desktop-facing widget from Numbers Protocol's Capture suite. It reads C2PA credentials on an image the same way Verify does, and it adds a second layer: a lookup against the Numbers on-chain registry, which stores a hash of the file, the license terms the creator set, and the AI model or prompt if the image is generative. Publishers embed a small snippet on a page and readers see the pin appear on any image whose provenance can be tracked back to a Capture-registered asset. Numbers works with C2PA-compliant cameras and phones and layers its own metadata on top.
Where it falls short: the value is highest inside the Numbers ecosystem. Images that never touched Capture only surface their standard C2PA manifest, without the on-chain enrichment.
Pricing: Free for basic verification and small creator use. Paid tiers cover licensing, x402 micropayments, and enterprise volume.
Platforms: Web app and embeddable widget, works in any desktop browser on Windows, macOS, and Linux.
Download: Capture site · Numbers Protocol
Bottom line: worth adopting if you also want a public, tamper-resistant record of who owns the image and under what license.
7. FotoForensics, when there is no manifest
Content credentials only help when the file has one. FotoForensics covers the other half of the problem: images that arrive unsigned, images that lost their manifest through a re-encode, or images that were manipulated after signing. It applies Error Level Analysis to reveal regions that have been resaved at different quality levels, exposes EXIF and XMP metadata, and hashes the file for cross-referencing against known copies. Fotografers, OSINT researchers, and moderation teams use it as the first check when a photo shows up without provenance.
Where it falls short: it does not sign, and ELA is a heuristic, not proof. A skilled edit that saves through the same quality level as the original can hide from it.
Pricing: Free for basic use in a browser. Advanced analysis runs on a pay-as-you-go credit system for professionals.
Platforms: Web app, works in any desktop browser on Windows, macOS, and Linux. Supports JPEG, PNG, WebP, HEIC, and AVIF.
Download: FotoForensics
Bottom line: the tool to reach for when the image has no C2PA manifest and you still need to answer whether it was edited.
How to choose
Pick Adobe Photoshop if you retouch professionally and want the manifest to reflect the actual edits you made, not a single opaque step. Pick Adobe Lightroom Classic if you deliver batches of JPEGs from a shoot and want them all signed with the same identity at export. Pick Content Credentials Verify as the neutral second opinion any source can open without installing software. Pick c2patool if you write pipeline code and need to sign, read, or validate manifests from a script. Pick the Digimarc extension if you spend the day scanning news sites and social feeds and want to see at a glance which images are signed. Pick Numbers Protocol Capture Eye if provenance alone is not enough and you also want a public license and ownership record. Pick FotoForensics when the image arrives without any manifest and you still have to answer whether it was tampered with.
Most working setups combine three of these: Photoshop or Lightroom to sign, Verify or the Digimarc extension to read, and FotoForensics or c2patool for the awkward cases the standard does not cover on its own.
FAQ
What is the best free content credentials app?
Content Credentials Verify, the browser tool run by the Content Authenticity Initiative, is the best free reader. For a free signer, c2patool from the same organization writes and validates manifests from the command line on Windows, macOS, and Linux with no account and no runtime cost.
What content credentials app do most professionals use?
Photojournalists and retouchers who already work in Adobe use Photoshop and Lightroom Classic, because Adobe co-founded C2PA and its certificate is trusted everywhere. Newsroom pipelines wrap c2patool around ingest to sign and validate at scale.
Do I need a C2PA-enabled camera to use content credentials?
No. Adobe built support directly into Photoshop and Lightroom, so you can add credentials at edit or export time from any RAW or JPEG source. A C2PA-enabled body from Nikon, Sony, or Leica adds a capture signature that survives the rest of the chain, which strengthens the story but is not required.
Can content credentials be removed from an image?
Yes. Any tool that re-encodes a JPEG can strip the manifest, and many social platforms do this by default when they resize an upload. That is why publishing to the Content Credentials Cloud, as Photoshop and Lightroom offer, matters: the manifest stays reachable from a hash of the file even if the embedded copy is gone.
Is Apple's Reference Image the same as content credentials?
Similar in spirit, different in scope. Apple's Reference Image on iPhone 18 Pro embeds cryptographic authenticity data at capture, but only inside Apple's own camera and photo apps and only on that hardware. C2PA content credentials work across cameras, editors, and pipelines from Adobe, Nikon, Sony, Leica, Truepic, and Numbers Protocol, on any desktop or mobile file the user chooses.
What if the image has no content credentials at all?
Reach for FotoForensics or a similar forensic analyzer. Error Level Analysis, EXIF and XMP inspection, and hash lookups can flag manipulation and identify prior copies of the file on the open web. The result is a set of signals, not a signature, but it is the best answer available when the manifest is missing.
