You are about to forward an image. Its accompanying story seems plausible, and there is a Content Credentials indicator to inspect. The useful next step is to ask what information the credential actually supplies.

This Review chose the subject because sharing an image also passes a claim to another reader. A record about how a file was made can help with that decision, provided we keep its scope visible. This is an explanation of the C2PA 2.4 documents inspected on September 27, 2026, not a test of a particular platform.

Read the record behind the indicator

Content Credentials can carry information about creation, tools and editing. What is included depends on the implementation and the choices made when applying the credential. The Content Authenticity Initiative, an Adobe-led implementation community, describes these limits in its explanation of how credentials work.

A digital signature makes a record checkable. Validation can examine the signature, the record’s integrity and its connection to an asset; trust in the signer is another part of the assessment. A signer can be a tool or service, so readers should inspect the stated identity rather than assume a named photographer has personally vouched for the scene. C2PA distinguishes valid records from trusted ones, and its core specification does not require a creator’s personal identity. See the technical specification and explainer.

Check the story attached to the file

The factual accuracy of an image’s story remains a separate question. NIST’s November 2024 report explains that signing metadata cannot establish its accuracy: the signer may be mistaken, and the history may be incomplete. C2PA’s own explainer likewise says provenance alone cannot settle whether depicted content is factual. These are limits acknowledged by both an independent technical institution and the standard’s issuer. NIST, §§3.1.2–3.1.2.2; C2PA, §7.2.2.

Consider a hypothetical mountain photograph posted with a claim that it was taken this morning. Even a checkable editing record leaves a further question: what evidence supports that date? The caption, the file’s history and the scene described must each carry their own evidence. This example illustrates a reading habit; it is not a reported incident.

Leave missing history open

A credential may cover only part of an asset’s history. C2PA’s FAQ explains that fully verifying an ingredient—material used to make the final asset—requires access to that ingredient’s data. A displayed record can therefore leave earlier steps unresolved. C2PA FAQ.

A separated credential can sometimes be rediscovered. The specification describes matching through fingerprints or invisible watermarks, called soft bindings, when a copy of the manifest remains elsewhere. This is conditional matching, not reconstruction of missing record contents or a promise that every screenshot will reconnect to its history. Soft bindings also cannot substitute for the cryptographic hard binding used to bind a manifest to content. C2PA 2.4, §9.3.

Absence also needs careful interpretation. Participation is optional, and C2PA warns against judging trustworthiness solely by the presence of credentials. An image without an available credential leaves provenance questions open; that absence alone does not classify it as synthetic. C2PA explainer, §7.1.2.

Turn the record into better questions

Our editorial recommendation is to use three questions before sharing:

  • What was checked, and whose signature or tool does the record identify?
  • Which creation or editing steps are documented, and where does the available history stop?
  • What separate evidence supports the caption’s claim about the world?

An answer may be incomplete. That is a reason to keep the uncertainty attached when sharing, or to wait for more evidence. A useful credential gives the reader more specific things to inspect; the decision to trust the accompanying story still calls for judgment.

The limits of this Review are concrete. We did not measure adoption, platform displays, user understanding or recovery success. Our narrower claim is supported by the official documents and NIST: a checkable record can inform a judgment, while factual accuracy and missing history still require their own evidence.