How to Check What Metadata Is in a Photo

Why check before you share

Metadata is invisible in normal use. A photo looks identical whether it carries GPS coordinates, a camera serial number and your name, or nothing at all. That invisibility is the whole problem: people make sharing decisions based on the picture they can see, while the file carries a second layer they have never looked at. Checking first turns a guess into a decision.

It also changes what you do next. A portrait taken indoors may hold nothing more sensitive than a timestamp, while a photo from a family walk may pinpoint your home street. Some files need no cleaning at all; others should never be sent in their current state. A thirty-second inspection tells you which situation you are in, and a check after cleaning confirms the job was actually done.

Check on your phone

On an iPhone, open the photo in Photos and tap the info button or swipe up. You will see the camera and lens details, the date and time, and — if location was recorded — a map showing where the photo was taken. That map is the quickest privacy check there is: if a place appears, coordinates are in the file. Edited photos may also show which app last touched them.

On Android, open the photo in your gallery app and look for Details or an information option; Google Photos shows a similar panel with the date, device and, where present, a location section. Menu names vary by manufacturer and version, and some galleries hide location behind an extra tap. If the panel shows no location, that usually means none was recorded, but it is not proof about every other field, as the limits section below explains.

Check on Windows and Mac

On Windows, right-click the file, open Properties and go to the Details tab. It lists dimensions, camera make and model, exposure settings, the date taken and, for geotagged photos, latitude and longitude in a GPS section. The list is long and readable, which makes it a good second check — but it is the camera-focused view of the file, not the whole file.

On a Mac, Preview's Inspector (under Tools, Show Inspector) has tabs for general information, EXIF and GPS, while the Photos app's Info panel shows device, date and a location map. Between them they cover the classic camera fields well. What neither is designed to display is everything else a modern file can contain — descriptive XMP and IPTC fields, PNG text chunks and provenance manifests often pass without any sign.

The fields that actually matter

Start with location. GPS latitude and longitude, accurate to a few metres, are the highest-stakes fields in any photo, especially combined with the timestamp, which together can show where you live and when you are away. After that, read the device fields: camera or phone model, lens, and any serial number, which links this photo to every other photo from the same camera body.

Then look at the descriptive layer most people forget. Creator, artist and copyright fields in XMP and IPTC sometimes hold your real name, added automatically by a camera setting or an editor. Software fields name the apps and versions that produced the file. For AI-made images, check for prompt text and Content Credentials: prompts can reveal your workflow in detail, and a signed manifest names the service that generated the picture.

Two smaller fields are worth a glance as well. The embedded preview thumbnail is part of the file rather than a field, but check whether a viewer offers to show it: in older editing workflows the thumbnail can predate a crop, displaying content the visible image no longer contains. And read the file's descriptive title and comments if any exist — cameras rarely fill them in, but editors and cataloguing apps do, sometimes with addresses, client names or notes that were only ever meant for the photographer's own library.

What built-in viewers do not show you

Every built-in viewer reads the blocks its designers cared about, and quietly ignores the rest. Phone info panels favour camera and location. Windows Details is similar. Very few general viewers display PNG text chunks, which is exactly where AI tools write prompts and generation settings, and fewer still surface a C2PA manifest, an embedded preview thumbnail, or data appended after the image ends.

This is why two viewers can disagree about the same file without either being wrong: each is reporting a partial inventory. The practical consequence matters more than the technical one. An empty location section means no GPS in the fields that viewer reads; it does not certify the whole file. Treat built-in checks as a good screen for the common risks, not as an all-clear.

Use a full scan when it matters

When the stakes justify certainty — client work, a listing, anything published under your name — use a tool that reads the whole file. On a desktop, dedicated metadata viewers and the command-line ExifTool are the established options; they list field after field, including the descriptive and AI blocks that friendly viewers skip. The output is dense, but you are looking for the same short list: location, serials, names, software, prompts, credentials.

A metadata cleaner's scan report serves the same purpose from the other direction: before removing anything, MediaPure lists every category it finds in the file, including GPS, AI data, Content Credentials and hidden extras. Scanning first and cleaning second means the check and the fix happen on the same evidence, and a second scan of the cleaned copy is the natural verification step.

Checking scales better than people expect. Before a large upload — a portfolio refresh, a batch of listing photos, a folder handed to a client — scan the set rather than sampling one file and assuming the rest match. Files from the same shoot usually share the same fields, but one photo edited in a different app, or one AI image mixed into a camera set, can carry a completely different inventory. The scan is quick; it is re-checking after an incident that is slow.

What to do with what you find

Let the destination decide. A photo going to a closed family group may be fine as it is; the same photo attached to a public listing, a portfolio or an email to a stranger deserves cleaning first. Work on a copy, keep the original untouched in your archive, and clean after any editing, because editors write their own fields back into the file when they export.

Finally, check the file you will actually send, not a file like it. Messaging apps, email clients and websites can each transform an attachment differently, and a compressed preview is a different artefact from the original. When privacy is the point, the artefact that leaves your device is the only one whose metadata counts — inspect that one.