Learn

284 articlesCategory: All
Metadata

How to check metadata with ExifTool

Before publishing a file anonymously, you need to check what remains inside the file.

Images, PDFs, Office documents, audio, and videos may contain metadata that is not visible on the screen.

ExifTool is a widely used tool for checking that metadata locally.

Because you can inspect files without uploading them to a browser-based checking site, it is an important option before anonymous publication, source protection, or whistleblowing.

However, using ExifTool does not automatically make you safe.

You need to read the displayed information, judge what is risky, and recheck after removal.

What is ExifTool?

ExifTool is a tool that can read and write metadata in many file formats.

It is used not only for image , but also for checking metadata in a wide range of formats, including PDFs, Office documents, audio, and videos.

On the official site, you can check supported formats, tag lists, usage, and update information.

URL : https://exiftool.org/

The reason for introducing ExifTool in the context of anonymity is that it can be used locally.

If you upload a file to an external web service for checking, the file content, source IP address, time, and browser information are handed to that web service.

For high-risk files, checking locally first is safer.

What can you check?

The information ExifTool can check changes depending on the file format.

FormatInformation to checkAnonymity caution
ImageGPS, date and time taken, model name, editing softwareShooting location and routine places become visible
PDFCreator, creation app, update timeDocument source and work environment become visible
OfficeAuthor, company name, information related to edit historyCan reveal clues about affiliation and the creation environment
AudioID3 tags, creation date and time, app nameRecording environment and creator information remain
VideoCreation app, date and time recorded, location informationCombines with video content

ExifTool is a tool for looking at information inside a file.

It does not automatically judge the photo background, video audio, document text, or the communication path used to send the file.

Looking with ExifTool is not the end

When you run ExifTool and information is displayed, that is not the end.

Next, judge how that information relates to anonymity.

Displayed informationReason to look
GPS Latitude / GPS LongitudeCheck whether shooting location remains
Create Date / Date Time OriginalSee whether capture or creation time connects to behavior
Make / ModelSee whether the camera or smartphone model becomes a clue
Author / CreatorCheck whether a creator name or account name remains
SoftwareSee whether an editing app or work environment appears

The names of displayed items change depending on the file format and creation app.

If an unfamiliar item appears, do not immediately treat it as safe.

Look at the item name, value, and file context, then judge whether it is information that can be published.

How to read displayed values

In ExifTool output, item names are often displayed in English.

You do not need to understand every item perfectly.

First, prioritize values that are likely to relate to anonymity.

PriorityItems to look atReason
HighGPS, location, latitude and longitudeDirectly shows a place
HighAuthor, Creator, OwnerShows a creator or account name
HighDate, Create, ModifyConnects to activity time or work time
MediumMake, Model, SoftwareBecomes a clue to the device or editing environment
MediumFile Name, DirectoryPersonal information may appear in filenames or storage locations

When many unfamiliar items appear, it can feel worrying.

However, what you should look at first is place, name, time, device, and filename.

These are types of information that tend to directly affect anonymity.

Do not run a removal command first

ExifTool can also be used to remove metadata.

However, beginners should avoid immediately running a removal command.

First read what is inside and understand what should be removed.

What to do firstReason
Copy the original fileTo avoid damaging the original
Look at output before removalTo understand what is risky
Create a publication copyTo separate the original from the public version
Recheck after removalTo judge whether removal succeeded
Check appearance tooTo look at clues other than metadata

Removal operations are convenient, but the fact that you removed something does not by itself let you judge safety.

Comparing before and after removal is important.

Basic checking procedure

The way to think when using ExifTool follows this order.

OrderTaskReason
1Copy the original fileDo not mix the original and the publication copy
2Check metadata on the copyUnderstand what remains
3Classify dangerous itemsSeparate GPS, creator, date and time, and app name
4Perform removal or regenerationCreate a publication copy
5Check again with ExifTool after removalSee whether processing succeeded
6Check the appearance of images and document textLook at clues other than metadata

For high-risk files, compare the results before removal with the results after removal.

If you do not check what disappeared and what remained, you cannot judge whether removal succeeded.

With some formats such as PDFs, even if metadata appears to have been removed by ExifTool, the original metadata may remain inside the file. Check format-specific limitations, and if necessary use other procedures such as qpdf or regeneration before rechecking.

Why not upload to an external service?

Metadata checking sites are convenient.

However, for files where anonymity matters, uploading to an external site itself becomes a new risk.

Checking methodAdvantageCaution
Local ExifToolCan check without handing the file outsideThe device itself still needs to be safe
Web checking serviceEasy to useFile content, IP address, and time are handed to the service side
Checking after social media uploadClose to the actual publication stateIt may already have been published or sent

For highly confidential files, reporting materials, whistleblowing materials, and personal photos, it is important to decide not to hand them to an external site from the start.

Local checking is not a complete solution, but it matters because it avoids increasing unnecessary parties you must trust.

Limits of ExifTool

ExifTool is powerful, but it is not a tool that judges anonymity as a whole.

Even if metadata is gone, the following information remains.

  • Photo backgrounds and reflections
  • Voices and environmental sounds in video or audio
  • Body text in PDFs and documents
  • Filenames
  • Sending time and upload destination logs
  • Account and cloud sharing history

ExifTool is "a tool for looking at metadata inside a file."

To protect anonymity, check content, appearance, sending paths, and account operation separately too.

How to use it in high-risk situations

For whistleblowing, reporting materials, activity records, personal photos, and similar files, also think carefully about how you use ExifTool.

If you check on a workplace or school device, device usage logs, file access history, cloud sync, and antivirus software logs may remain.

Also, if you keep checking results as screenshots, those screenshots may show file paths or usernames.

In high-risk situations, judge not only the file itself but also where you open it, where you save it, and how you handle the checking results.

ExifTool is a powerful checking tool.

However, if the operation is poor, the checking work itself becomes a new trace.

Summary

ExifTool is a widely used tool for checking file metadata locally.

It can check creators, date and time taken, GPS, app names, and editing information left in images, PDFs, Office files, audio, videos, and similar files.

What matters for anonymity is not the act of using ExifTool itself.

It is reading the displayed information, judging what is risky, and rechecking after removal.

If you upload a file to an external site for checking, you hand the file and access information to that site.

For high-risk files, prioritize local checking, and finally also check backgrounds, reflections, document text, and sending paths beyond metadata.

Related tools

Metadata inspection

ExifTool

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://exiftool.org/

Open external site
Metadata removal

MAT2

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://0xacab.org/jvoisin/mat2

Open external site

Related articles