Why photo metadata is not proof

When someone wants to show a photo was taken at a certain time or place, they often point to its metadata. It feels official, but EXIF was built to describe a file, not to defend it, and that difference matters the moment anyone disputes the photo.

This post explains what metadata really is, why it cannot stand as proof, and what turns a photo into something you can actually verify.

What EXIF metadata actually is

EXIF is a block of information a camera writes into an image file: the date and time, the device, camera settings, and often a GPS location. It is genuinely useful for organising photos and understanding how a shot was taken.

The catch is that it lives inside the file as plain, editable data. Nothing binds it to the pixels or vouches for it. It was designed for description, and it does that job well, but it was never meant to be evidence.

Why it cannot be trusted as evidence

Free tools can change any EXIF field in seconds. You can set the date to last year, move the GPS coordinates across the world, swap the device name, or delete the whole block. Many apps and social platforms also strip metadata automatically on upload, so a genuine photo can arrive with nothing at all.

That means metadata cuts both ways: it can be forged on a fake, and it can be missing from something real. Either way, it cannot tell an independent party what actually happened, so it does not settle a dispute.

What actually holds up: a seal made at capture

Proof needs to be created at capture and tied to the file so tampering shows. Danaya seals a photo the instant it is taken by computing a SHA-256 fingerprint of the file and signing it together with the GPS location and a server timestamp, which the sender cannot set by hand. Edit the file afterwards and the fingerprint no longer matches.

Because capture is live only, an imported or AI-generated image cannot earn a valid seal. Anyone can then confirm the result from a public verification link, with no account and nothing to install. Where EXIF is a note anyone can rewrite, a seal is a check anyone can run.

FAQ

Can EXIF metadata be faked?

Yes, easily. Free tools edit or strip any EXIF field in seconds, including the date, device and GPS location. Because nothing binds EXIF to the image, it cannot serve as proof on its own.

Does removing metadata mean a photo is fake?

No. Many apps and platforms strip EXIF automatically on upload, so a genuine photo often arrives with none. Missing metadata proves nothing either way, which is exactly why it is not evidence.

What makes a photo verifiable then?

A seal created at capture. Danaya binds a SHA-256 fingerprint of the file to a server timestamp and GPS location and signs them, so any later edit breaks the match and anyone can check it from a public link.

Turn a photo into something anyone can verify

Screen a file you received with the free detector, or seal your own photo at capture so its time and place hold up to scrutiny. Not a note, a check.

Open the detector

Keep reading