EXIF (Exchangeable Image File Format)
Definition
A metadata standard embedded in JPEG and TIFF files by capture devices. EXIF fields record camera make and model, lens data, exposure parameters, GPS location, and a modification timestamp. EXIF is writable by editing software, so its contents are a provenance claim to be verified, not a trusted record.
- Standard
- CIPA DC-008 (Exchangeable Image File Format specification)
- File formats
- Embedded in JPEG and TIFF images
- Forensic value
- Internal consistency checks, not cryptographic verification
Common questions
What information does EXIF store in a photograph?+
EXIF records device identity, capture settings, timestamps, and GPS coordinates directly in the image file. This metadata is embedded by cameras and scanners at the moment of capture, making it a useful indicator of when and where a photo was taken and what equipment created it.
Is EXIF data protected or tamper-evident?+
No. EXIF is not cryptographically protected, so it can be modified or stripped from a file without evidence of tampering. In forensics, the value of EXIF lies in checking internal consistency across its fields, not in assuming the data is authentic on its face.
Can EXIF data prove an image is genuine?+
EXIF is a provenance indicator, not an integrity guarantee. It tells you what the camera reported at capture, but it cannot prove the image hasn't been edited, copied, or manipulated after the fact. Forensic analysis requires cross-checking EXIF consistency with other evidence.
Related terms
- XMP (Extensible Metadata Platform)
- An Adobe-defined metadata format stored as an XML packet embedded in image files. XMP carries a software history field (xmpMM:History) that editing...
- BSA 2023 § 63
- The electronic record admissibility provision (replacing IEA § 65B), requiring a certificate from a person in a responsible official position confirming the...
- ByteRange
- A four-integer entry in a PDF digital signature dictionary specifying which byte ranges of the file were hashed when the signature was...
- C2PA (Coalition for Content Provenance and Authenticity)
- An open technical standard that embeds cryptographically signed provenance assertions into media files at the point of capture or editing. A C2PA...
- Container Atom / Box
- The structural metadata units inside video container formats (MP4, MOV, MKV). Atoms such as mvhd (movie header) carry creation and modification timestamps;...
- Content-Aware Fill
- An image editing feature (Photoshop from CS5; AI-driven from version 22.0) that replaces a masked region with synthesised pixel content matching the...
- Copy-Move Detection
- A class of image forensics algorithms that search for duplicated regions within a single image, indicating a patch-and-conceal manipulation. Implemented via block...
- Cross-Reference Table (Xref)
- The index structure at the end of a PDF file that maps each object number to its byte offset. Multiple xref sections...
- Daubert Standard
- The US federal evidentiary standard (Daubert v. Merrell Dow Pharmaceuticals, 1993) requiring that expert testimony be based on scientifically valid methods with...
- DNG (Digital Negative)
- Adobe's open-standard RAW format providing a vendor-neutral archival container for camera sensor data; accepted as an archival format by SWGDE and several...
- Error Level Analysis (ELA)
- A technique that re-compresses a JPEG at a controlled quality setting and maps the pixel-level difference between the re-compressed and original images....
- File Signature (Magic Bytes)
- The fixed byte sequence at the start of a file that identifies its format. JPEG files begin with FF D8 FF; PNG...
Explained in these topics
- Digital Imaging Evidence and Court AdmissibilityMetadata embedded by the camera in each image file at capture, recording timestamp, GPS, camera model, lens, and exposure data. A provenance indicator, not an...
- EXIF and Container Metadata ForensicsA binary metadata standard defined by JEITA and embedded in JPEG, TIFF, and HEIC files by cameras and smartphones at capture. Contains technical parameters (ex...
- Image File Format and Integrity ChecksA metadata standard embedded in JPEG and TIFF files by capture devices. EXIF fields record camera make and model, lens data, exposure parameters, GPS location,...
- PDF Metadata Forensics and Document Image AuthenticationA metadata standard (CIPA DC-008) embedded by cameras and scanners in JPEG and TIFF files, recording device identity, capture settings, timestamps, and GPS coo...