Check if files were made with Claude

Open the original

Short summary

Anthropic built a tool that checks whether Claude created image files by reading cryptographically signed metadata attached to downloads, using the C2PA industry standard that camera makers and photo software already use. Text detection works differently and requires a separate API currently available only to certain EU organizations.

  • Claude embeds content credentials (signed metadata) in supported file types like PNG, JPG, and SVG to prove involvement in creation or processing
  • The checker only reads the embedded credential, not the file itself, and never stores or accesses your uploaded file
  • Text watermark detection uses a separate API in private preview, while similar file-checking tools exist from OpenAI and Google DeepMind

Full summary

Claude embeds markers into files it creates so you can verify their origin. Images and documents get a cryptographic signature embedded in their metadata—basically a tamper-proof note saying Claude made or edited the file. Text gets watermarked differently, directly in the writing itself. The tool on this page checks for those file credentials specifically. It won't tell you whether Claude actually generated the content inside (just that Claude touched the file), and it doesn't reveal anything about who used Claude to make it. The credential system uses C2PA, an open standard that camera makers and photo software already use to track image provenance. Any tool that reads C2PA can spot Claude's signature. Other AI companies like OpenAI and Google have similar detection tools for their own outputs. When you upload a file to check, the tool only reads that embedded credential—it doesn't scan the actual content, store your file, or use it for anything else. Your file stays on your device the whole time. For detecting whether Claude wrote text, Anthropic has a separate Detection API that's currently limited to certain organizations in the EU where the law requires it. The company's documentation goes deeper into both file and text detection methods if you want the technical details.

Ask about this article

can this just be circumvented by resaving a file into a new file?
Yes, resaving a file into a new file would likely circumvent this detection, because the credential is metadata embedded in the file itself. When you resave or export a file, most applications don't preserve metadata from the original—they create a fresh file with only the content, stripping out any embedded credentials in the process. From the article, the checker works by reading "the embedded credential, not the file itself." That credential is "a small, cryptographically signed note in the file's metadata" attached when Claude creates the file. The moment you resave that file—whether through export, screenshot, copy-paste into a new document, or format conversion—you're creating a brand new file without the original metadata intact. This is a known limitation of metadata-based detection systems generally. While the [C2PA standard](https://c2pa.org/) (which Claude uses) is designed to be robust, it only works if the metadata travels with the file. Most software doesn't automatically preserve or re-sign credentials when you manipulate or re-export files. So yes, someone determined to hide the origin of AI-generated content could easily do this. It's one reason why metadata-based provenance alone isn't foolproof—which is probably why Anthropic also mentions they have a separate text watermarking system (though the article notes that's currently in private preview for detecting watermarks in text specifically).
what is the intended use case for this then?
The intended use case is to provide a basic verification layer for obvious cases—catching Claude-generated files that haven't been deliberately obscured. Think of it as a transparency tool rather than a tamper-proof system. Here's the practical reality: Claude (and other AI providers) are releasing these checkers because there's growing demand for disclosure and attribution. If you download a chart, image, or document, you want to know whether it was AI-generated. The credential serves that purpose for honest actors—people who download files directly from Claude without manipulating them. The tool is most useful in contexts like: - **Academic or professional integrity**: Catching submitted work that was directly generated by Claude - **Media and journalism**: Verifying sources of images and graphics - **Licensing and rights**: Establishing provenance for commercial work But as the article itself acknowledges (through the previous Q&A you included), it's not a security mechanism. It's designed to work against negligence and casual reuse, not determined deception. Someone who wants to hide AI involvement can strip the metadata trivially. This aligns with how C2PA works in other domains too. A camera manufacturer uses it to prove "this photo came from our camera," not to prevent someone from taking a screenshot. It's useful for the 95% of cases where people are acting in good faith, and it creates a paper trail for legitimate verification. But it doesn't solve the harder problem of detecting AI-generated content that's been deliberately obscured—that's what the separate text watermarking system (still in private preview) is meant to address.
Sep 03, 2026
Isn't it pretty easy to detect generative ai images just off the bat? there has to be some tell tale signs
In theory, yes—there are telltale signs. In practice, it's getting much harder. **The visible red flags that *used* to work:** Inconsistent lighting and shadows often indicate AI generation—objects should be illuminated by the same light source and shadows should be consistent. Parallel lines in an image should converge at vanishing points; parallel lines that don't converge may indicate AI generation. Blurry or chaotic backgrounds where signs and text appear warped, or mismatched accessories like missing or duplicated earrings, glasses, or buttons merged into clothing or skin are common AI tells. **The catch:** Some AI images can now be nearly flawless—high-quality models simulate lighting, depth, and detail in ways that closely resemble photography or illustration. In some cases there may be no clear visual clues at all, especially when the image has been edited or enhanced after generation. **What detection actually relies on:** The more sophisticated approach bypasses human eyes. Statistical and frequency-domain anomalies—differences in how pixel values are distributed and patterns in high-frequency components—are invisible to the eye but detectable by AI models trained to identify them. Generative models leave behind subtle fingerprints in local frequency bands, interpolation kernels, and upsampling operations because GANs depend on learned upsampling filters and noise injection processes that systematically differ from natural image statistics. **But there's a problem with detection tools too:** Leading open-source AI image detectors achieve accuracy as low as 50–60% on out-of-distribution generated images—barely better than a coin flip. Detection tools typically return a confidence score but false positives and negatives remain possible. So the honest answer is: casual AI images often have obvious flaws, modern high-end AI images might not, and the technical detection methods that work best are invisible to human inspection but still unreliable enough that they're not foolproof either.
Sep 03, 2026