Remove Content Credentials (C2PA)
- Free
- No upload
- No watermark
Quick answer
A C2PA remover deletes the Content Credentials manifest — the signed record of which camera, app or AI service made a file and what was done to it — from images, video, audio and PDFs. You read the manifest first, then strip it without re-encoding, so pixels and streams stay identical. It runs in your browser and nothing is uploaded. The signature goes too: the file can no longer be verified.
Step by step
How to remove content credentials (c2pa)
- 01
Add your files
Drop JPEG, PNG, WebP, AVIF or HEIC images, MP4 or MOV videos, PDFs or audio — one file or a batch.
- 02
Read the manifest
In the AI & provenance group each manifest is decoded: the claim generator that signed it, the actions it recorded, such as created or edited, and the digital source type.
- 03
Remove and confirm
AI & provenance only is preselected: it strips the manifest, IPTC AI labels, generator tags and prompts, and keeps the rest. The cleaned copy is inspected again; download it, or the batch as a ZIP.
In depth
What is a C2PA manifest?
Content Credentials is the public name for manifests defined by the C2PA, the Coalition for Content Provenance and Authenticity, whose members include Adobe, Microsoft, Google, OpenAI and camera makers. A manifest is a set of signed claims: the claim generator (the app that wrote it), the actions taken, the digital source type, and sometimes ingredients — the files it was made from, often with thumbnails. It is sealed with a certificate-backed signature and stored in JUMBF boxes inside the file.
Who adds Content Credentials?
- Cameras and phones: selected Leica, Sony and Nikon cameras can sign photos at capture, and Google’s Pixel 10 signs photos from its camera app.
- Adobe: Firefly signs everything it generates; Photoshop and Lightroom add credentials when generative features are used.
- OpenAI: images from ChatGPT and the API, and Sora videos.
- Microsoft and Google: Microsoft Designer and Copilot images, and some of Google’s AI tools.
How can I see what a manifest says?
Open the AI & provenance group. The inspector names the claim generator in plain words — "Adobe Firefly", "OpenAI", "Microsoft Designer" — lists the actions and shows the source type: trainedAlgorithmicMedia for an AI-generated image, compositeWithTrainedAlgorithmicMedia for a real photo with an AI edit. To read without removing, use the metadata viewer.
| Format | Where the manifest lives | How it is removed |
|---|---|---|
| JPEG | APP11 segments holding JUMBF boxes | Segments cut out; image data untouched |
| PNG | A caBX chunk | Chunk removed; pixels identical |
| WebP | A C2PA chunk in the RIFF container | Chunk removed; pixels identical |
| HEIC / AVIF | A uuid box | Box removed with the other metadata |
| MP4 / MOV | A uuid box | Container rebuilt by stream copy without it |
| MP3 / WAV / M4A | An ID3 frame, a RIFF chunk or a uuid box | Container rebuilt by stream copy without it |
| An embedded file attached to the document | File rewritten without it; pages untouched |
What happens to the signature?
It goes with the manifest. Nothing is forged or left half-broken: the file simply stops claiming any provenance, and a Content Credentials checker reports none rather than tampering. That is the trade-off — a cleaned file can no longer prove where it came from. For news photos, evidence or client work that must stay traceable, keep the credentialed original and share the clean copy.
Why remove Content Credentials?
Mostly privacy: a manifest can name the account or app behind a file, list every edit and carry ingredient thumbnails — including a version from before you cropped something out. Photographers also remove credentials when a real photo is labeled AI after a small fix, such as a dust spot removed with generative fill, and agencies want clean client deliverables.
Does the file leave my device?
No. The manifest is parsed and removed by code running in your browser tab. Watch the Network tab in DevTools while you work: no request carries your file.
Related tools
The AI metadata remover explains every kind of AI metadata, not just credentials. Videos that should also lose GPS and device tags go through the video metadata remover. For camera data on photos, use the EXIF remover; to shrink a cleaned image, the image compressor.
Your files never leave your device
Processed locally in your browser — nothing is uploaded. You can verify it yourself: open your browser’s developer tools, watch the Network tab, and use the tool — no upload request is ever made.
- No file is ever uploaded to a server
- Works offline after the first visit
- No account, no watermark, no limits
A little more clarity
Frequently asked questions
01Is it legal to remove C2PA from an image?
For your own files it is generally legal — Content Credentials are optional metadata. The caveats: stripping author or copyright details from someone else’s work to hide its origin can breach rules such as DMCA §1202 in the US, some countries (China, for one) ban maliciously removing AI-content labels, and disclosure rules still apply. General information, not legal advice.
02Will removing Content Credentials get rid of the "AI info" or "CR" label?
On a new upload, it removes the metadata those labels read: Instagram and Facebook check C2PA and IPTC data, and LinkedIn shows "CR" when a manifest is present. Published posts do not change, and platforms that detect invisible watermarks or run their own classifiers may still label AI content.
03Can a removed manifest be restored?
Not from the cleaned file — the manifest and its signature are deleted, not hidden, so keep the original if you might need them. Some services do store credentials online and find them again through an invisible watermark or a fingerprint; removing the embedded manifest does not affect that.
04Is C2PA the same as a watermark?
No. C2PA is metadata, a signed record stored beside the image or video data — which is why it can be removed without changing a pixel, and why a screenshot loses it too. A watermark is part of the content itself: drawn on top, or hidden in the pixels like SynthID.
05Will the file still open everywhere?
Yes. Apps that do not understand C2PA simply ignore it, so removing it changes nothing about how a file opens, plays or prints. Pixels, color profile and orientation are kept, video and audio are stream-copied, and PDF pages are untouched — only tools that display Content Credentials notice a difference.
06How do I know the credentials are really gone?
Every output is inspected again by the same reader that found the manifest, and the result appears before you download — the AI & provenance group should be empty. For a second opinion, open the cleaned copy in the metadata viewer or any Content Credentials checker.
Guides
Further reading
- Guide6 min readWhat is C2PA? Content Credentials explained, read and removedContent Credentials are turning up in photos, AI images, videos and PDFs. Here is what the C2PA standard is, how to read each part of a manifest, what the signature does and does not prove, and how to remove one when you need to.Read the guide
- Guide7 min readHow to remove AI metadata from an imageA generated or AI-edited image can carry several separate records of how it was made: a signed C2PA manifest, IPTC labels, a generator tag, sometimes the whole prompt. Here is what each one is, how to check for it, and how to remove it without touching a pixel.Read the guide
- Guide5 min readHow to remove metadata from a PDF before you send itClearing the Author box in your PDF reader rarely clears the author. Here is every place a PDF keeps information about itself, why the usual fixes miss some of it, and how to remove all of it without changing a page.Read the guide
Keep going
Related AI & privacy tools
More tools, same promise.
123 tools for images, video, audio and subtitles — every one of them runs on your device, and a result can go straight into the next.
- Free forever
- No sign-up
- Nothing uploaded