Files routinely carry hidden metadata their authors never intended to share: the GPS coordinates in a photo, the author and revision history in a document. Extracting it is a fast, high-value step in verification and investigation — and understanding it is also how you protect your own files.
What you'll need
- The original file, unmodified (re-saving or re-uploading often strips metadata)
- Metadata and image tools from the Photos & Videos category
- Document and file tools from the Data Acquisition category
Steps
- Get the original, not a re-shared copy. Platforms strip metadata on upload, so a screenshot or a social-media version usually has none. Source the file as close to the original as possible.
- Extract image EXIF. Run photos through an EXIF viewer to read timestamps, camera make and model, settings, and — crucially — any embedded GPS coordinates (see EXIF data).
- Read document metadata. Office files and PDFs can expose the author, organisation, software, creation and edit times, and even a revision trail of earlier text.
- Cross-check against the visible content. Does the metadata's date and place agree with what the file shows? A mismatch is a red flag for manipulation or miscaptioning.
- Use metadata to establish provenance. Timestamps and device details help confirm when and where a file originated, strengthening or breaking a claim about it.
- Pivot on what you find. A device model, an author name, or software details can tie a file to other files, accounts, or a person.
Common pitfalls
- Assuming missing metadata means fake. Platforms strip it routinely; absence proves nothing on its own.
- Trusting metadata blindly. Timestamps and GPS can be edited — corroborate before relying on them.
- Forgetting your own footprint. Apply metadata scrubbing to anything you publish so you don't leak your own location.
Verify your result
You have analysed the metadata when you can report what the file's hidden data reveals — location, time, author, device — and whether it corroborates or contradicts the visible content. Note that metadata is one input among several; corroborate anything decisive.