imgstrip

Local only

Save as

Quality for lossy formats

Colour profile

Deep scanAlso search the pixels for steganography and hidden colour. Slower. It can find a payload, never prove there is none. Keep JPEG data bit-exactNo re-encoding. Keeps anything hidden in the compressed image data, and can't rotate pixels. Scrub least-significant bitsDestroys LSB steganography. Changes pixels by at most 1. Other ways of hiding data are not covered. Disrupt camera fingerprintScrambles the sensor noise that can link a photo to one camera. Shifts parts of the picture by a few pixels. Sign with Content CredentialsAdds a signed note (C2PA) that you removed the metadata, and whether the picture is unchanged. Optional. Apply orientationRotate the pixels so the photo stays upright without its tag. Smaller PNGsTry extra compression. Slower.

Content Credentials C2PA

Each cleaned image is signed with your certificate. The credential says you removed its metadata and whether the pixels are unchanged. It does not vouch for who took the picture or that it is genuine. Nothing here leaves this computer, and your key is kept in memory only.

Date recorded

Detail

Make it auditable laterSeals a fingerprint of the original into the credential. Only the receipt you keep can open it, and it is lost when you stop imgstrip unless you download it.

Drop images to scan

See what each file gives away. Nothing changes until you clean, and nothing leaves this computer.

JPEG, PNG, HEIC, WebP, AVIF, TIFF, GIF, BMP and more. You can also paste.

imgstrip {{VERSION}}

The picture itself stays. Faces, reflections, street signs and landmarks can still identify people and places. imgstrip never alters what the image shows.
Robust watermarks can survive. Marks built to outlast re-encoding (Digimarc, SynthID and similar) live in the pixels. imgstrip removes C2PA manifests, not content watermarks.
File names can leak. Names like IMG_20240517_133700 carry a date. Cleaned files keep the original name plus .clean; rename them before sharing if that matters.
Data hidden in the pixels can survive. Lossless cleaning keeps every pixel value, so a steganography payload stored in them stays unless Scrub least-significant bits is on. Deep scan looks for one first, but a scan that finds nothing is not proof that nothing is hidden, and scrubbing covers LSB payloads only.
The camera's sensor fingerprint stays. Every sensor leaves a faint noise pattern in the pixels, and anyone holding other photos from the same camera can match it. Cleaning keeps it. Disrupt camera fingerprint scrambles it and defeats the standard matching test, but absence can't be proven.
Lossy formats are re-encoded. JPEG, WebP, AVIF and HEIF lose a little quality. Keep JPEG data bit-exact avoids that for JPEGs, but keeps any data hidden in the JPEG coefficients.
Content Credentials vouch for processing only. If you sign, the credential says what you did to the file, not who took the picture or that it is real. It carries no trusted timestamp (imgstrip never goes online), so viewers treat it as invalid once your certificate expires, and shows "Unverified" unless the certificate's issuer is on the C2PA Trust List.
Originals stay as they are. imgstrip never modifies or deletes them; securely erasing old copies is up to you.