C2PA Remover: Remove Content Credentials

ScrubPhoto removes the C2PA manifest from JPEG, PNG, WebP, MP4, MOV and M4V files in your browser, along with XMP and IPTC metadata. That takes away the marker TikTok and Meta read when they label AI content. It also takes away the file's ability to prove where it came from, so read the trade-off below before you scrub a photo you may need to verify later.

What C2PA and Content Credentials are

C2PA stands for the Coalition for Content Provenance and Authenticity. Its website describes an open technical standard for establishing the origin and edits of digital content, and calls the result Content Credentials, likening them to a nutrition label. The C2PA explainer says each manifest is digitally signed with the private key of the software or hardware that made the change, and is commonly embedded directly in the file. Any change to the file or the record afterward breaks the match, which is what makes it tamper-evident.

Who writes Content Credentials

Each of these comes from the company's own page:

Adobe's Content Credentials overview says it applies them automatically to Firefly content and offers them in Photoshop, Lightroom, Stock and Premiere.
OpenAI's help center says images from ChatGPT, Codex and its API carry Content Credentials and a SynthID watermark.
Google said in a September 2025 post that Pixel Camera on the Pixel 10 attaches them to every JPEG it captures, and Google Photos attaches them to images edited with AI tools.
Microsoft's support pages say Designer and Image Creator in Paint add C2PA provenance to AI images.
Samsung called the Galaxy S25 series the first smartphone lineup to support Content Credentials, adopted for content created and edited with generative AI (Samsung newsroom).
Leica's Content Credentials page presents the M11-P as the first camera with the feature, which you switch on.
Sony announced in June 2025 that supported Alpha cameras with a signature license record C2PA signatures at capture, in a system aimed at news organizations.

App by app: Lightroom, Photoshop, ChatGPT, Gemini, Samsung Galaxy AI, Pixel Magic Editor.

Why a real photo can carry Content Credentials

C2PA records history, not just AI use. A Pixel 10, a Leica M11-P or a licensed Sony body can sign a straight camera capture. Adobe's Lightroom export help shows Content Credentials as an export option for JPEG that can include your edits and activity. If one of those edits used an AI tool, the manifest can say so. The checker treats any manifest as a likely label trigger and names the app that signed it, so you can see which step added it.

Where C2PA lives in each file format

Format	Where the manifest sits
JPEG	APP11 segments holding a JUMBF box
PNG	a caBX chunk
WebP	a C2PA chunk in the RIFF container
MP4, MOV	a top-level uuid box

ScrubPhoto drops the JPEG, PNG and WebP pieces and leaves the pixels byte-for-byte identical. In video, the uuid box is renamed to free and zero-filled, so the file size never changes.

What removing Content Credentials changes

The label trigger is gone from the copy you post.
The proof is gone too. A tool reading the file finds no embedded record, so the file itself can no longer show its origin or edits.
Cloud copies stay. Lightroom can publish credentials to a Content Credentials cloud for persistence and recovery, and the C2PA explainer describes ways to find a manifest even after it is removed from the file.
Watermarks stay. The SynthID watermark OpenAI adds to its images lives in the pixels. See can you remove SynthID.

ScrubPhoto saves a separate "-scrubbed" copy and leaves the original alone, so keep that original if you may need the proof later. Meta's rule on disclosing photorealistic AI video and realistic AI audio still applies, and the limits page has the rest.

Questions about removing C2PA and Content Credentials

What is C2PA?

It is an open standard from the Coalition for Content Provenance and Authenticity for recording where a file came from and how it was edited, in a signed manifest called Content Credentials. The Content Credentials guide goes deeper.

How do I remove Content Credentials from an image?

Choose the image above and tap Scrub. The manifest is removed with the rest of the metadata, and the checker confirms it is gone.

Do videos carry Content Credentials too?

They can. In MP4, MOV and M4V files the manifest sits in a uuid box, which ScrubPhoto neutralizes without re-encoding. See the video metadata remover.

How do I remove Content Credentials in Photoshop?

The reliable route does not depend on menus: export as usual, scrub the exported file here, and confirm with the checker. The Photoshop page covers what its exports carry.

Does removing C2PA also remove SynthID?

No. SynthID is a watermark in the pixels, not metadata. ScrubPhoto neither detects nor removes it.

How do I verify Content Credentials?

Our checker shows whether a manifest exists and who signed it, but it does not validate the signature. Adobe's Lightroom help points to Adobe Inspect, and OpenAI's help center points to openai.com/verify for its own files.

Will removing Content Credentials stop a TikTok label?

It removes the credentials TikTok said in May 2024 that it reads. Your own disclosure and any watermark in the frames are outside its reach, so read the TikTok page first.

Sources

Official pages this page was checked against in October 2026: