Photo EXIF Metadata: How to Read It and What It Really Proves (2026)
Every photo taken with a camera or smartphone carries a kind of hidden ID card: its EXIF metadata. Date, time, GPS coordinates, camera model, lens settings… all recorded automatically inside the image file. In the age of AI-generated photos and deepfakes, one question keeps coming up: can you trust EXIF metadata to prove a photo is authentic? This guide explains what EXIF is, how to read it in seconds, what it really reveals — and why, on its own, it is never proof.
What is EXIF metadata?
EXIF stands for Exchangeable Image File Format. It is a standardized set of metadata embedded in image files (mainly JPEG and TIFF) by nearly every camera and smartphone. The specification is maintained by the CIPA (Camera & Imaging Products Association), together with JEITA, under the reference CIPA DC-008. Version Exif 3.0, published in May 2023, notably added UTF-8 support (accented and non-Latin characters); a version 3.1 has since followed.
In practice, EXIF stores a series of technical fields inside the file, including:
- Capture date and time (
DateTimeOriginal) — when the photo was taken; - GPS coordinates (latitude, longitude, sometimes altitude) — if location was enabled;
- Camera make and model (
Make,Model); - Shooting settings: aperture, shutter speed, ISO, focal length, flash;
- Orientation and color space;
- Software field (
Software) — often set by the device, but also by image editors; - Embedded thumbnail — a small copy of the image generated at capture time.
How to read a photo's EXIF metadata
Good news: reading EXIF requires no specialized software. Here are the simplest methods depending on your device.
On Windows
Right-click the image file → Properties → Details tab. You'll find the capture date, camera, settings and — where available — the GPS coordinates.
On Mac
Open the image in Preview, then Tools → Show Inspector (or Cmd + I). The EXIF/GPS tab lists every field, with a map if the photo is geotagged.
On smartphone and online
On iPhone, the Photos app shows date, place and device under each image (the "i" button). For deeper analysis, many online EXIF readers let you upload an image and extract all its fields. That's also what our free photo verification tool does — combining EXIF reading, file-integrity checks and AI analysis in a single pass.
What EXIF metadata can (and cannot) tell you
When present and intact, EXIF metadata is a valuable clue: it suggests when and where a photo was taken, with which device, and whether an editor touched it. For a dispute, an investigation or a simple check, it's a good starting point.
But there is one fundamental limit: EXIF is not cryptographically bound to the image's pixels. They are two independent layers of data in the same file. As a result:
- EXIF can be edited in seconds with a free tool: you can change the date, the GPS coordinates or the camera model without touching the image;
- EXIF can be stripped: most social networks (Instagram, Facebook, X, WhatsApp) erase metadata on upload. A photo with no EXIF isn't suspicious in itself — it simply passed through a platform;
- EXIF can be copied from another genuine file and pasted onto a doctored image.
In other words: intact EXIF metadata is a weak trust signal, never proof of origin. Digital-forensics research also stresses that metadata reliability degrades sharply as soon as an image is edited, converted or compressed by a messaging app.
How to spot faked EXIF metadata
A clumsy edit often leaves tells. Here are the inconsistencies to watch for:
- Telltale
Softwarefield: the presence of "Adobe Photoshop", "GIMP" or a mobile editor shows the file was reworked after capture; - Contradictory dates: a capture date (
DateTimeOriginal) that doesn't match the last-modified date (ModifyDate); - Mismatched thumbnail: the embedded thumbnail shows a scene different from the final image — a classic sign of cropping or compositing;
- Implausible GPS: coordinates that don't fit the scene visible in the photo;
- Timezone offsets that don't line up across the different date fields.
Caution: no single one of these checks is proof. A careful edit can produce perfectly clean EXIF. That's why experts always cross-check metadata analysis with pixel-level forensics (detecting recompressed regions, noise or lighting inconsistencies). To go further, our guide how to detect an AI photo in 2026 details these methods.
EXIF and AI images: the limit becomes critical
An image generated by an AI model contains no capture EXIF in the classic sense: no real shooting date, no GPS, no camera model. But nothing stops a fraudster from injecting a credible fake EXIF to pass a synthetic image off as a genuine photo. In a context where deepfake-related fraud has surged — Sumsub's 2024 report cites a tenfold increase in incidents between 2022 and 2023 — relying on EXIF to tell real from fake becomes genuinely risky.
The cryptographic answer: Content Credentials (C2PA)
To address EXIF's weaknesses, a standard is emerging: Content Credentials, defined by the C2PA coalition. It's a cryptographically signed manifest attached to the file that records the image's origin and edit history. Its strength: the signature breaks if the content is altered — it cannot be silently forged, unlike an EXIF field. We break this down in our article Content Credentials & C2PA: verifying a photo's origin.
The most reliable approach: certify at capture
The lesson is clear: verifying a photo after the fact — EXIF, reverse search, AI detectors — remains useful, but less and less sufficient. The most robust approach is preventive. Instead of trying to prove after the fact that an image isn't fake, you certify its authenticity at the very moment of capture.
That's the principle behind Truth Check: every photo or video is timestamped, geolocated and cryptographically sealed the instant it's taken, then made publicly verifiable through a unique link. Here, metadata is no longer a field you can quietly rewrite: it is frozen and protected against any modification. When a counterpart sends you a Truth Check-certified photo, they're handing you proof of origin — not an image you'll have to investigate.
In summary
EXIF metadata is an excellent first move to situate a photo: date, place, device, any pass through an editor. But keep three things in mind: it is easily edited and removed, it is systematically stripped by social networks, and an AI image can carry a fake one. So intact EXIF is never proof — at best a clue to cross-check with others. For your important photos, don't rely on late verification: certify them at capture.
To go further: 7 tools and methods to verify a photo's authenticity, the reverse image search guide, or discover how Truth Check certification works.
Frequently asked questions about EXIF metadata
Is a photo without EXIF metadata necessarily fake?
No. Missing EXIF is very common and usually perfectly innocent: almost every photo shared on social media or via messaging has had its metadata stripped automatically on upload. A "bare" image only tells you it passed through a platform — not that it was manipulated.
Can GPS coordinates be added or changed after the fact?
Yes, in seconds. Plenty of free tools let you rewrite any EXIF field, including GPS position and date. That's exactly why EXIF geolocation, on its own, does not prove where a photo was taken.
Do screenshots contain EXIF metadata?
Very little. A screenshot doesn't come from a camera sensor, so it has no "device" capture date, no GPS and no lens settings. At best it carries the name of the software that generated it. This matters when distinguishing a real photo from a composite built on a screenshot — a topic we cover in our article how to detect a fake screenshot.
How do I remove EXIF metadata from my own photos?
For privacy reasons (not disclosing your home address via GPS, for example), on Windows: right-click → Properties → Details → "Remove Properties and Personal Information". On Mac, dedicated utilities or exporting via Preview do the job. Conversely, if you want to guarantee a photo's authenticity, don't strip anything: certify it at capture.
Sources
- CIPA — Standard DC-008 (Exif), specification and version history
- IPTC — "Exif 3.0 released, featuring UTF-8 support" (May 2023)
- Library of Congress — Exchangeable Image File Format (Exif) Family
- Coalition for Content Provenance and Authenticity (C2PA) — Content Credentials
- Content Authenticity Initiative (Adobe and partners)
- Sumsub — Identity Fraud Report 2024 (rise in deepfake incidents)
Try Truth-Check for free
Certify your photos and videos in seconds. 3 free credits, no commitment.
Download