Skip to content
Osint Daily
Osint Daily cover for TrueScreen C2PA Viewer, under Metadata & files, published 16 Oct 2026. The right side is a monogram because no capture is filed. In-browser Content Credentials check. No upload.

01 · Product name

TrueScreen C2PA Viewer

In-browser Content Credentials check. No upload.

Published by TrueScreen.

In short

The TrueScreen C2PA Viewer is the free page at truescreen.io/c2pa-viewer/. Dated 20 Aug 2026 and bylined Fabio Ugolini, it says a dropped file is checked in the browser, with no upload, no account, no quota, and no watermark. It reads a C2PA manifest, including a generative-AI declaration when one is present, and whether the signature still matches. It does not verify the pixels. A file with no Content Credentials is not a suspicious file. A manifest is a declaration, not proof the scene happened.

Product pricing strategy

02

Free

The viewer page says the check is free. It says there is no account, no upload, no quota, and no watermark, and that the page runs in the browser, which is why it costs nothing to run. No seat price and no credit bundle were printed on that page. The byline date in the page markup is 20 Aug 2026. TrueScreen sells other products, including a forensic browser and a notarization extension, linked from the same site. Those are not priced on the viewer page, so this listing does not copy a fee from them. If a future viewer adds a paid batch mode, cite that page. The free claim here is the viewer's own sentence. It is not a claim about the rest of the TrueScreen catalog.

Utility and features

03

TrueScreen's viewer page says C2PA is the open provenance standard from the Coalition for Content Provenance and Authenticity, and that Content Credentials is the name readers see on that data. When a camera, editor, or generative tool writes a manifest, the viewer lists the declared title and format, the producing tool, the edit history, source files, any declared use of generative AI, the certificate holder, the algorithm, and the timestamp. It recomputes the signature and reports a manifest that no longer matches its seal as invalid. The page says this works for the containers the standard defines, including JPEG, PNG, WebP, MP4, MOV, MP3, PDF, and office documents, plus a standalone manifest file.

  • No upload, no account. The page says the file is read with local file APIs and is not sent to a server.
  • Manifest, not pixels. The viewer reports the declared history and whether the seal still matches. It does not verify the scene.
  • Not an AI detector. A generative-AI line appears only when the file declares one. No manifest is not a verdict.

The page is explicit about limits. It does not verify the pixels. A missing manifest is not suspicion, because platforms strip the data and many devices never write it. A screenshot, an export, or a recompression can drop the manifest, and the file does not record that loss. The viewer shows a generative-AI declaration only when the file contains one. It is not an AI-image detector. The page says the check is free because it runs locally. TrueScreen S.r.l. is the legal name in the page's organization markup, with a founding year of 2022. This listing describes that viewer. It does not describe TrueScreen's other notarization products, and it did not upload a confidential file.

  1. 1

    Open the viewer and drop a file you are allowed to inspect. The page says it stays in the browser.

  2. 2

    If a manifest loads, record the tool, the edit list, any AI declaration, and whether the seal matched.

  3. 3

    If no manifest loads, write that down as a missing declaration, not as suspicion.

  4. 4

    Keep the pixel question separate. The page says C2PA does not answer whether the scene happened.

Caveats

04

A valid manifest means the seal still matches the manifest the viewer recomputed. It does not mean the picture shows what a caption claims, and it does not name the person who pressed the shutter. A declared generative-AI flag is the file's statement. Absence of that flag is not evidence the image is a photograph. Absence of any Content Credentials is the common case. The page says most platforms strip the data and most devices never write it.

Anything that rewrites the file can drop the manifest, and nothing in the standard records the drop. Do not treat a stripped file as tampered and do not treat a sealed file as true. The check stays in the browser only if you use this page as described. Sending the same file to a different service is a different decision. This listing did not test every container the page lists. Quote a result from a file you opened, with the date.

Potential use cases

06

  • A published image might still carry Content Credentials. Open the TrueScreen viewer and drop the file. The page dated 20 Aug 2026 says the check runs in the browser, with no account and no upload, and with no quota and no watermark. If a manifest loads, record the declared tool, the edit history, any generative-AI statement, the certificate, and whether the recomputed signature matched. That record is the file's declaration. It is not a statement that the scene happened.
  • The viewer reports an invalid seal. The page says it recomputes the signature and flags a manifest that no longer matches. Write invalid, and keep the pixel question separate. The page says C2PA does not verify the pixels. A broken seal is a reason to doubt the manifest, not a caption for what the picture shows. Do not send the file to a different service and still call the check local.
  • Nothing comes back. The page says a file with no Content Credentials is not a suspicious file, because platforms strip the data and many devices never write it. A screenshot or a recompression can drop the manifest without leaving a marker. Record the absence. Do not call the image synthetic, and do not call it authentic. The page says the viewer is not an AI-image detector.

Hard cases

The case where the first result is easy to over-read.

A missing manifest becomes suspicion

The viewer page lists that mistake. Most files have no Content Credentials. Absence is the common case, not a finding. A present manifest still only declares a history. Quote the seal result and the declared tool, then go look at the pixels with a method that is actually about pixels. This page is not that method.

Questions

Does the TrueScreen viewer upload the file?

The page says no. The file is read in the browser and is not sent to a server. The page also says the check needs no account.

Can this prove an image is a photograph?

No. It shows what the file declares, including a generative-AI statement when one is present. The page says it is not an AI-image detector and that it does not verify the pixels.

Citations

07

Titled sources. These public pages are what the quotes on this listing come from.

When this listing changes, the letter says so.

Developments in OSINT. Confirm from your inbox before the first issue.

Only for this letter. Privacy

Related tools