Home Blog EXIF Data Explained

EXIF Data Explained

Updated 2026-07-30 · 6 min read · by the FakeSec team

Every photo your phone takes carries a hidden record: the device, the settings, the exact second — and often the coordinates. Most people never look at it, and it takes one drag-and-drop for anyone else to.

What EXIF stores

EXIF is the standard cameras use to write information into the image file itself. Typical contents:

Device. Make, model, sometimes a serial number — enough to link separate photos to the same camera.

Settings. Shutter speed, aperture, ISO, focal length, flash, white balance. Photographers read these to learn how a shot was taken.

Timestamps. Capture time and last-modified time, stored separately. A gap between them means the file was rewritten after shooting.

Location. GPS coordinates, if the device recorded them. This is the part with real consequences.

Software. Which program last saved the file. Some AI generators write their own name here, which makes this field unexpectedly useful.

The privacy problem

A photo taken at home carries your address to within a few metres. Post a picture of a pet, a plant or a new sofa to a forum and, if metadata survived, you have published where you live.

Most large platforms strip metadata on upload, which quietly protects people who never think about it. But not every platform, not every upload path, and definitely not files sent by email or as a messenger *attachment* rather than a photo.

There is a second, less known risk: some formats keep an embedded thumbnail of the original image. A crop made to hide something can still contain the uncropped version inside the file.

Check what your own photos carry in our EXIF viewer, and strip it with the remover — both free, no account.

Why metadata is usually missing

Most images you encounter online have none, and this trips people up constantly.

WhatsApp, Telegram, Instagram, Facebook and Twitter re-encode uploads and discard metadata. Screenshots never had any. Exports from editors often drop it. By the time an image has been shared twice, it is typically gone.

So the asymmetry is important: finding metadata is informative, finding none is not. An empty result is the normal state of the internet, not a red flag.

What EXIF can and cannot prove

It supports a case. A coherent capture block — camera, lens, plausible settings, sensible date — is a point in favour of a real photograph.

It does not prove anything on its own, because every field is editable with free tools. Forging convincing EXIF takes a few minutes.

And it says nothing about the pixels. A generated image with fabricated camera metadata will look perfectly ordinary in any viewer. That is why metadata is one signal among twelve in our analysis rather than the answer.

Reading it yourself

You do not need special software. Right-click → Properties → Details on Windows, or Get Info on macOS, shows the basics. Online viewers show everything including fields the operating system hides.

What to look at first: is there a camera named? Do capture and modification dates differ? Is there a Software field, and does it name an editor or a generator? Is there GPS?

Those four questions cover most of what metadata can tell you in about ten seconds.

Key points

  • EXIF stores device, settings, timestamps, software and often GPS coordinates.
  • Photos taken at home can publish your address to within metres.
  • Embedded thumbnails can preserve the pre-crop version of an image.
  • Most online images have no metadata — absence means nothing.
  • Every EXIF field is forgeable, so it supports a case rather than proving one.

Frequently asked questions

How do I see EXIF data?
Right-click → Properties → Details on Windows, Get Info on macOS, or use an online viewer for the full set including hidden fields.
Does removing EXIF reduce quality?
No. Metadata is stored separately from pixels. A careful re-save keeps the image identical while dropping the metadata block.
Do social networks remove EXIF?
Most do on upload. But not all platforms and not all paths — email attachments and messenger *documents* usually preserve it.
Can EXIF prove when a photo was taken?
It records a claimed date, which is useful but forgeable. Treat it as supporting evidence, not proof.

Check an image yourself

Reading about it only goes so far. Our AI image detector runs twelve independent methods and shows you every score, not just a verdict.

More from the blog

Try it on your own image

Free account, 3 checks included, no card required.