Get the app

How to check if an image is AI generated

Updated 4 min read

Written for readers, journalists, buyers and designers checking whether a photo came from a camera or an AI image generator

Short answer

The only hard proof that an image came from an AI generator lives inside the file’s own metadata: a signed C2PA Content Credentials manifest, an IPTC DigitalSourceType tag set to trainedAlgorithmicMedia, or generator strings written into EXIF, XMP or PNG text chunks. You can inspect all of those locally in our free photo metadata tool. When metadata has been stripped by a screenshot or social network, visual and pixel-⁠based AI detectors can only offer probabilistic guesses that frequently misclassify edited phone photos.

A white framed mountain landscape photo beside a cobalt blue location pin and an emerald green verification badge
On this page

When you want to know whether a picture came from a real camera or an AI model, there are two completely different ways to check it: reading the cryptographic and metadata records inside the file, or looking at the pixels.

Only the first method gives you a verifiable fact. The second method gives you a clue, and if you rely on online “98% AI probability” meters without understanding how they work, you will regularly accuse real photographers of using AI and wave clean AI renders through.

What real AI provenance labels look like inside a file

Major AI generators and camera makers now embed structured provenance data directly into the image container before you download it. There are three places inside a JPEG, PNG or WebP file where generator identity is recorded:

1. C2PA / JUMBF Manifest Cryptographically signed JPEG APP11, PNG caBX, or WebP JUMBF chunks Used by: OpenAI DALL-E, Adobe Firefly, Imagen Proof level: Definitive 2. IPTC, XMP & PNG Text Unencrypted header tags DigitalSourceType URI, PNG tEXt / iTXt prompts Used by: Midjourney, Flux, Stable Diffusion, ComfyUI Proof level: High (if present) 3. Pixel Classifiers Statistical noise guessing Scores texture & diffusion residuals from 0% to 100% Fooled by: Phone HDR, crops, JPEG re-saves Proof level: Guesswork only
Why checking the file container (C2PA, IPTC, XMP and PNG text chunks) always comes before running a pixel classifier.
  1. C2PA Content Credentials (JUMBF): the Coalition for Content Provenance and Authenticity (C2PA) defines a cryptographically signed manifest stored inside APP11 marker segments in JPEG (per the C2PA Specification), caBX chunks in PNG, or JUMBF chunks in WebP. Tools like OpenAI DALL-⁠E / ChatGPT Images, Adobe Firefly, Microsoft Designer and Leica/Sony/Nikon hardware-signed cameras attach a signed C2PA claim showing the generator name and edit chain.
  2. IPTC DigitalSourceType and XMP Credit: the International Press Telecommunications Council standardized the trainedAlgorithmicMedia URI (http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia) and compositeWithTrainedAlgorithmicMedia inside XMP/IPTC metadata so search engines and social platforms can read an explicit AI label even without a C2PA certificate.
  3. PNG tEXt / iTXt generator chunks: Midjourney writes your prompt, job ID and DigitalSourceType into PNG text chunks (Description, Author, XML:com.adobe.xmp), while local tools like Automatic1111 Stable Diffusion and ComfyUI store the entire prompt, negative prompt, seed, steps and checkpoint filename under parameters, prompt or workflow chunks.

How to check an image in three steps

You can inspect all three metadata layers inside your browser tab without uploading the image to a third-⁠party detector:

  1. Ask for or download the original image file rather than a screenshot or a compressed preview from a chat thread.
  2. Open the photo metadata remover and drop the JPEG, PNG or WebP file onto the inspection box.
  3. Read the inspection report for Content Credentials (C2PA / JUMBF), Software or Generator tags, XMP Credit or DigitalSourceType, and PNG text chunks, and check whether normal camera EXIF tags (Make, Model, shutter speed, ISO, lens focal length) are present or absent.

How to interpret what the metadata report shows

What you see in the file reportWhat it meansCan it be faked or lost?
C2PA / JUMBF Content Credentials presentThe file carries a structured provenance manifest from an AI tool (such as DALL-⁠E or Firefly) or a C2PA-⁠enabled camera/editor.Cryptographic signatures break if pixels are edited, though stripping metadata removes the manifest entirely.
PNG parameters / workflow / DigitalSourceType: trainedAlgorithmicMediaThe file was exported directly from Stable Diffusion, ComfyUI, Flux, Midjourney or another generator that writes plain-⁠text provenance chunks.Definitive when present on an original export; removed if re-⁠saved through an image editor.
Full camera EXIF (Make, Model, LensModel, ExposureTime, ISOSpeedRatings, SubSecTimeOriginal)Strongly points to a real smartphone or dedicated camera, especially when paired with manufacturer MakerNote tags.Plain EXIF fields can be copied with command-⁠line tools like ExifTool, so treat EXIF as supporting evidence rather than cryptographic proof.
No EXIF, no XMP, no C2PA at allInconclusive. Almost every social network (Instagram, X, Reddit, Facebook), messaging app and screenshot strips metadata automatically.Absence of metadata never proves an image is AI generated, and never proves it is a real photograph.

Why pixel-⁠based “AI image detectors” disagree so often

When a file has no metadata left, websites that claim to detect AI images feed the picture into a neural network trained to spot high-⁠frequency diffusion artifacts. Here is why two detectors often report “96% AI” and “4% AI” on the exact same image:

  • Modern smartphone cameras use computational photography: every recent iPhone and Android flagship merges multiple exposures, runs neural denoising and applies semantic sharpening to faces, skies and foliage. Those computational passes smooth out natural sensor grain in ways that look statistically similar to diffusion models.
  • Re-⁠compression erases high-⁠frequency diffusion residuals: resizing an AI image to 1080 pixels wide and saving it as an 80%-quality JPEG wipes out the microscopic checkerboard frequency patterns that pixel classifiers look for.
  • Invisible pixel watermarks (like Google SynthID) are vendor-specific: Google DeepMind’s SynthID embeds an imperceptible signal into the pixel values of Imagen and Gemini images that survives cropping and filters, but only Google’s own SynthID verifier can read that specific watermark: it does not show up in generic third-⁠party AI detectors.

What still gives AI images away visually when metadata is gone

When you are reviewing a stripped image with no metadata, check the physical geometry that image models still get wrong more reliably than any percentage meter:

  • Small background text and signage: secondary street signs, book spines, nutrition labels and serial numbers in the background often dissolve into pseudo-⁠Latin shapes or inconsistent letterforms.
  • Architectural and reflection geometry: follow tile grout lines, window mullions, brick courses or reflections in eyeglasses and puddles behind a subject’s head; diffusion models frequently shift alignment where an object interrupts a straight line.
  • Hardware and mechanical details: check button holes vs buttons on jackets, watch dial markings, bicycle spokes, guitar frets and shoelace crossings.

For a deeper look at what happens when someone strips provenance headers from an AI image, read our guide on how AI watermarks and metadata work.

Questions

What is the most reliable way to prove an image is AI generated?

Inspect the original file for a C2PA Content Credentials manifest (stored in APP11 JUMBF segments in JPEG or XMP/RIFF chunks in PNG and WebP) or an IPTC DigitalSourceType tag. When present, these records name the exact generator tool, such as DALL-⁠E, Adobe Firefly, Leica/Sony camera signing or Google Imagen.

Why do online 'AI image detector' websites give different percentage scores on the same photo?

Pixel-⁠based AI detectors are machine-learning classifiers trained to spot statistical texture patterns. Heavy phone camera noise reduction, Portrait Mode blur, JPEG re-⁠compression or sharpening filters often trigger false AI scores on real camera photos, while resized or post-⁠processed AI images can score as human.

Does a missing C2PA or EXIF tag mean the photo is real?

No. Most social media platforms, messaging apps and screenshots strip both camera EXIF tags and C2PA manifests when resizing an image. A file with zero metadata simply means the provenance record is missing, not that the picture came from a camera.

Where do Midjourney, Stable Diffusion and ComfyUI hide their prompts?

Stable Diffusion web UIs and ComfyUI commonly write the full prompt, seed, sampler and model checkpoint name into PNG text chunks (tEXt or iTXt under keys like parameters, prompt or workflow). Dropping the original PNG into our metadata inspector reveals those fields immediately.

What is Google SynthID and can a browser metadata viewer see it?

SynthID is an imperceptible watermark developed by Google DeepMind that alters pixel frequency values directly in images made by Google’s AI models. Because it is baked into the pixels rather than stored as a metadata header, checking SynthID requires Google’s own verification detector rather than an EXIF/C2PA reader.

Sources

5

AlbumVault for iPhone and Android

A vault for the photos that are nobody else’s business

  • Encrypted on this phone
  • Each pattern leads to one vault
  • No account needed
Download on the App Store (coming soon)Get it on Google Play (coming soon) Coming soon to both stores
See what it does
AlbumVault on Android: the Albums screen with Protection active, encrypted on this phone, and four albums