đī¸ EXIF Metadata Viewer & Remover
Upload a JPEG photo to inspect hidden metadata, then download a stripped, privacy-safe copy.
What Actually Lives Inside Your Photos
The EXIF standard defines over 250 distinct tag fields, though any given photo typically contains between 20 and 60 populated ones. The most talked-about is GPS, and rightfully so â but the scope of what cameras and phones record is broader than most people realize. A single smartphone snapshot might contain your precise GPS latitude and longitude (accurate to within 3â5 meters), the device's make and model, a unique device serial number, the exact timestamp down to fractions of a second, the altitude you were standing at, the compass direction the camera was pointing, software version information, and even the lens serial number on interchangeable-lens cameras.
iPhones have historically been some of the most aggressive EXIF embedders. Apple's "precise location" toggle, buried inside Settings â Privacy â Location Services â Camera, controls whether GPS gets written. Most users have never visited that menu. Android devices are similar â Google Camera and Samsung Camera both embed GPS by default if location permissions are granted. In a 2019 analysis of publicly shared Instagram photos before the platform began stripping EXIF, researchers found that roughly 32% of images scraped from public profiles contained precise GPS coordinates. Instagram now strips EXIF server-side, but direct messaging, email, AirDrop, WhatsApp (in "Document" send mode), and Telegram (in "File" send mode) do not.
The Binary Structure: How EXIF Actually Works
JPEG files begin with a two-byte Start of Image (SOI) marker: 0xFF 0xD8. Immediately after, cameras insert APP1 segment markers (0xFF 0xE1) containing the EXIF data. This segment opens with the ASCII string "Exif" followed by two null bytes, then a TIFF-formatted block. That TIFF block begins with a byte-order mark â either 0x4949 (little-endian, from Intel) or 0x4D4D (big-endian, from Motorola) â which tells parsers how to read the subsequent numbers. Canon cameras tend to write little-endian EXIF; Nikon and Sony mix approaches depending on the model generation.
GPS coordinates are stored as unsigned rationals â pairs of 32-bit integers representing numerator and denominator. So "37 degrees" might literally be stored as 37/1, while "25.483 minutes" becomes something like 25483/1000. The parser divides and converts degrees-minutes-seconds to decimal. This is why GPS coordinates in EXIF are reliably precise: they aren't rounded by a display layer, they're exact fractions stored at full mathematical resolution.
The Privacy Exposure Vector You Might Not Have Considered
GPS location is the obvious concern, but the camera/lens serial number combination is actually an underappreciated fingerprinting mechanism. If you've ever listed a camera body for sale on eBay or posted sample shots on a photography forum with the serial number visible, that serial is now indexed and linkable to your identity. Any future photo from that same camera carries its serial number in EXIF, creating a pseudonymous link across photos even without GPS. Investigative journalists and digital forensics researchers actively exploit this: it was EXIF serial number matching that helped corroborate the identity of several "anonymous" whistleblowers who shared photos through what they assumed were metadata-stripping platforms.
The timestamp field is similarly revealing in context-dependent ways. If you claim to be in one country but your photos show timestamps placing you in a specific timezone at a specific moment, the inconsistency is detectable. DateTimeOriginal records when the shutter clicked; DateTime can be modified (it's the "last modified" field); DateTimeDigitized records when the image sensor processed the data. On DSLRs these three are often identical; on phones, subtle differences can emerge when photos are processed by editing apps before export.
How EXIF Removal Actually Works
Stripping EXIF cleanly requires understanding the JPEG segment structure. A JPEG is built from a series of markers: SOI at the start, then a sequence of APP segments, DQT (quantization tables), SOF (start of frame), DHT (Huffman tables), SOS (start of scan), and finally EOI (end of image). The pixel data lives in and after the SOS segment. EXIF resides in APP1; IPTC metadata (used by news agencies) resides in APP13 (0xFFED).
A correct EXIF stripper copies the SOI marker, then walks through each segment, copying everything except APP1 and APP13, until it hits the SOS segment â after which it copies the remaining raw image data verbatim. The image quality is completely unchanged because quantization tables, Huffman tables, and compressed pixel data are untouched. The only bytes removed are the metadata segment(s). This is different from re-encoding the JPEG, which would introduce new compression artifacts. A well-implemented stripper produces a byte-perfect copy of the original pixels, just with the metadata segments surgically removed.
Some tools also offer XMP stripping (another APP1 segment variant using "http://ns.adobe.com/xap/" as its identifier rather than "Exif\0\0"). XMP is Adobe's metadata format and can also carry location, creator, and rights information. A thorough remover catches both.
When You Should (and Shouldn't) Strip EXIF
Photographers who license their work commercially actually need to keep certain EXIF fields â specifically the Copyright tag and sometimes the Artist tag â because stock agencies use this data for licensing validation. Stripping those fields can create problems in professional workflows. The right approach for professionals is selective stripping: remove GPS and serial numbers, keep copyright and camera model for portfolio purposes.
The use cases where you absolutely should strip before sharing are clear: when posting photos publicly on platforms that don't auto-strip (forums, personal websites, portfolio sites, GitHub), when sharing via messaging apps in "file" mode, when submitting photos in support tickets or to businesses, and whenever the location where a photo was taken is information you'd prefer to keep private. The location of your home, your child's school, your workplace â these are the kinds of places that appear in "ordinary" photos shared without thought.
Social media platforms (Instagram, Twitter/X, Facebook) do strip EXIF on upload, but the stripping happens server-side after transmission. The platform receives the full metadata, stores it internally per their privacy policy, and serves visitors a stripped version. Whether you're comfortable with that arrangement is a separate question. For peer-to-peer sharing, no such automatic protection exists.
The Technical Nuances That Matter
One detail worth knowing: EXIF stripping does not help with steganographic watermarks. Some stock photo agencies embed invisible watermarks directly into the pixel data using spread-spectrum techniques â these survive any amount of EXIF manipulation because they're not in the metadata segments at all. EXIF stripping is specifically about the structured metadata block, not about hidden signals in the image data itself.
PNG files do not use EXIF in the same way â they use a different metadata chunk system (iTXt, tEXt, eXIf chunks). HEIC files, used by modern iPhones, embed EXIF differently again. The tool here focuses on JPEG because JPEG remains the most commonly shared format and has the most standardized, widest-deployed EXIF implementation. If privacy matters for your iPhone's HEIC originals, convert to JPEG through an app that strips during conversion, or use iOS's built-in "strip location" share sheet option before AirDropping.
]]>