Cameras and phones that sign photos with Content Credentials
Makers say Content Credentials are built into the Google Pixel 10 camera and the Leica M11-P, that some Sony Alpha and Canon EOS cameras support them, and that Samsung's Galaxy S25 series does for generative AI work. Trust lists name makers differently, and a name on a list does not show that any model signs by default.
Which phones and cameras say they sign photos?
| Product | What the maker says | Source and date |
|---|---|---|
| Google Pixel 10 | Google says the Pixel 10 lineup has Content Credentials built in across photos created by Pixel Camera, which attaches them to JPEG captures. It also says the Pixel Camera app reached "Assurance Level 2", which it calls the highest security rating the C2PA Conformance Program currently defines. | Google's Pixel post, September 10, 2025 |
| Leica M11-P | The announcement calls it a camera with Content Credentials built in, and says each captured image receives a digital signature. | Content Authenticity Initiative post, October 26, 2023 |
| Sony Alpha 1, 7S III, 7 IV and 9 III | Firmware updates add C2PA format support and an in-camera digital signature. Sony says both are available through a separate upgrade license, and that its image validation service was first offered to select news media agencies. The Alpha 9 III update was due after April 2024. | Sony Electronics announcement, March 27, 2024 |
| Canon EOS R1 and EOS R5 Mark II | Canon's system for news organizations works with these C2PA-enabled cameras. Canon planned it from May 2026, first in Europe, the Middle East and Africa, and the C2PA function needs a paid activation. | Canon press release, May 11, 2026 |
| Samsung Galaxy S25 series | Samsung calls it the first smartphone lineup to support Content Credentials, adopted for content created and edited with generative AI. The page does not say that ordinary camera photos are signed. | Samsung newsroom post, January 28, 2025 |
This is not a full list. We list only products whose maker's page we opened. The Content Authenticity Initiative describes a Conforming Products List; we did not read its entries.
Does a signing camera sign every photo?
Each maker sets its own scope, and we cannot say that a given model signs every photo. Google says Content Credentials are built in across every photo created by Pixel Camera on the Pixel 10. Canon says its C2PA function requires a paid activation, and Sony says its feature is available through a separate upgrade license.
Signing can also be suspended. Nikon Rumors, a camera news site, published on September 21, 2025 what it says is an email from Nikon to registered users of the Nikon Authenticity Service on the Z6III. As reported, it says Nikon confirmed a technical issue on September 4 with the provenance recording function in firmware 2.00, suspended the service, and would invalidate the certificates issued before the suspension. We say nothing about the service's status today.
Our checker never goes online to ask whether a certificate was revoked, so it uses only revocation data stored in the file.
Which camera and phone makers appear on the trust lists we load?
We read the subject of every certificate on the lists we host. Camera and phone makers sit on different lists. The Content Authenticity Initiative's trust list page says the Interim Trust List was frozen on January 1, 2026, with no new certificates added, and encourages validator products to move to the C2PA Trust List.
Our measured result, from October 30, 2026: we read the names in all 174 certificates in three files, namely the C2PA Trust List anchors (32, dated October 17, 2026), the frozen Interim anchors (27) and the Interim allowed list (115). We hold no camera-signed file, so this shows who a list can vouch for, not which models sign.
| Name in the certificate | C2PA Trust List | Interim anchors | Interim allowed list |
|---|---|---|---|
| Google LLC (including "Mobile A" and "Mobile B") | 6 | 0 | 0 |
| Xiaomi Inc. | 1 | 0 | 0 |
| vivo Mobile Communication Co., Ltd. | 1 | 1 | 0 |
| Huawei Technologies Co., Ltd. | 1 | 0 | 0 |
| Leica Camera AG | 0 | 1 | 0 |
| SONY Corporation | 0 | 1 | 1 |
| NIKON CORPORATION | 0 | 1 | 0 |
| Canon Inc. | 0 | 1 | 0 |
| FUJIFILM Corporation | 0 | 1 | 0 |
| Samsung (organizational unit "Samsung Mobile") | 0 | 1 | 0 |
| ASUSTEK COMPUTER INCORPORATION | 0 | 0 | 1 |
| PFU Limited | 0 | 0 | 1 |
The PFU Limited certificate carries a ricoh.com address, but its subject names PFU, so we do not call it a Ricoh certificate. No certificate in the three files names Panasonic or Apple.
A missing name is not a missing signer. A maker can sign through an authority with another name. The newer OpenAI file we hold, signed "OpenAI OpCo, LLC", chains through an authority called Trufo, one of the 32 anchors on the C2PA Trust List, and reads "Trusted Content Credentials declare AI use". No certificate in the three files names OpenAI. Two older OpenAI files, whose certificates have expired, read "Content Credentials found; signer trust not established"; see our guide to signer trust not established.
What does a camera's signed claim prove?
It shows who signed and that the image has not changed since. It does not show the scene was as the record says. The C2PA explainer says Content Credentials do not give value judgments on whether provenance data is true, that no assumption should be made about an asset's trustworthiness purely from its use of them, and that provenance metadata can be removed.
Google's post of May 19, 2026 says a check in the Gemini app can show whether content is an unaltered original from a camera or has been modified, and that the feature would come to Search and Chrome in the coming months.
A name alone proves nothing. In our test, an existing image that we re-signed with a self-made certificate naming "Leica Camera AG", with a claim of a Leica M11 capture, reads "Content Credentials found; signer trust not established".
What this means when you check an image
Open the checker and choose the file. We hold no camera-signed file, so we cannot say which headline a given model's photo will get. These headlines apply to a signed record whose signer a list vouches for.
- "Trusted Content Credentials found". The signer is on the current C2PA Trust List and the record does not say whether AI was used. It shows who signed, not that the scene was true.
- "Content Credentials found; legacy trust-list match". The signer is on the Interim Trust List, which was frozen on January 1, 2026, and not on the current C2PA Trust List. The detail under the headline says so.
Neither says a camera made the picture. If a photo shows no record, finding nothing does not mean the image is real or human-made. In our October 30, 2026 test, redrawing each of 9 real files that carry a record through a browser canvas and saving it as PNG and as JPEG left 0 of 9 with a record either way.
Guides on this topic
- What are Content Credentials? is the main page on this topic.
- The C2PA Trust List and the Interim Trust List shows who is on which list.
- Can Content Credentials be faked? covers self-made certificates.
- Content Credentials compared with EXIF, IPTC and XMP explains how signed records differ from camera metadata.
- Which platforms show Content Credentials? covers where records survive.
Our real-file counts are on the accuracy page.
Frequently asked questions
- Does every new phone sign photos?
- We cannot say. We list only phones whose maker's page we opened: Google's Pixel 10 and Samsung's Galaxy S25 series. Other makers may support Content Credentials too.
- Is a camera maker on a trust list proof that its cameras sign photos?
- No. A list holds certificates for signers, not which models sign.
- Why is Panasonic or Apple not in your table?
- No certificate in the three files names them. That does not show whether their products sign.
- Can I check a camera's photo with your checker?
- The checker reads JPEG, PNG, WebP, AVIF, HEIC and GIF files. We have not tested a camera-signed file.