Hardware-rooted signatures
Keys live in the Secure Enclave on iPhone and StrongBox/TEE on Android. Signatures prove which device captured — and that nothing has changed since.
ES256 · P-256
The problem
Anyone can make an image. Proving one is different.
Generative tools produce photorealistic media in seconds, and a screenshot strips whatever metadata a file once carried. When a photo backs an insurance claim, a delivery dispute, a report from the field, or a courtroom exhibit, "it looks real" is no longer an argument. What holds up is provenance — independent, checkable proof of when, where, how, and by whom something was captured. VeraSnap builds that proof into the shutter itself.
How it works
From shutter to sealed proof, automatically.
-
01 — CAPTURE
The moment is committed
Photo or video plus sensor context — location, motion, depth — is hashed the instant the shutter fires.
SHA-256 · on device
-
02 — SIGN
Hardware vouches for it
Your device's secure chip signs the record. The private key never leaves the hardware.
Secure Enclave · StrongBox · ES256
-
03 — ANCHOR
Independent time certifies it
Time-stamping authorities certify the moment, so the clock isn't just your phone's word.
RFC 3161 TSA · redundant providers
-
04 — VERIFY
Anyone can check it
A QR scan or exported bundle proves the capture — no account needed, and the format is an open specification.
Offline · verify.veritaschain.org
Core protections
Six layers between your capture and doubt.
Independent timestamps
RFC 3161 time-stamp tokens from redundant authorities anchor every capture to certified time, with automatic failover — free for everyone.
RFC 3161 · multi-TSA failover
Screen re-photography checks
LiDAR depth analysis on Pro iPhones; moiré, luminance, and flicker analysis on every device. Results are recorded as evidence — never used to block your shot.
LiDAR ToF · multi-modal software
Human presence binding
Optional Attested Capture asks for Face ID or a fingerprint at the shutter, binding a live human to the moment — without ever storing biometric data.
ACE · no templates stored
A chain that shows its gaps
Every capture links into a Merkle-chained log with an XOR completeness invariant: remove or hide a single item, and the math says so.
RFC 6962 · XOR invariant
Verification without trusting us
Proofs export as open-format bundles and C2PA-compatible manifests. Check them offline, on the web, or with your own tooling.
Open spec · QR · JSON
Depth analysis
It can tell a scene from a screen.
Re-photographing a display is the oldest trick for laundering an image. VeraSnap reads the geometry of what's in front of the lens: real scenes have depth that varies; a screen is a flat plane. On LiDAR iPhones that's a direct time-of-flight measurement across tens of thousands of points — elsewhere, software analysis of moiré, luminance, and flicker fills in.
iPhone Pro LiDAR · ToF · software fallback on all devices
Our principle
Provenance ≠ Truth
VeraSnap proves the conditions of capture — the when, where, how, and who. It does not decide whether what's in the frame is true. No credible system can, and pretending otherwise is how trust gets broken.
So we make a narrower, stronger promise: facts about the capture that a third party can independently check. Judgment stays where it belongs — with people.
Open by design
Built on open standards, published in the open.
VeraSnap implements the Content Provenance Protocol (CPP) — the forensic capture layer — while C2PA carries credentials through editing and distribution. VeraSnap speaks both, so proofs travel. The specification, the math, and the verification format are public.
Pricing
Evidence shouldn't be a luxury.
Free
$0
Everything that makes a capture provable.
- Sealed photo & video capture
- RFC 3161 timestamps with multi-TSA failover
- Screen re-photography checks
- Attested Capture (biometric binding)
- QR & offline verification
- Open proof export (JSON · C2PA)
Free forever · no ads · no account
Pro
$4.99/mo
or $39.99/yr · One thing, priced honestly: space.
- Unlimited proof storage
- Everything in Free
Local pricing on the App Store & Google Play
Questions
Asked, answered, on the record.
What does VeraSnap actually prove?
The conditions of capture: when a photo or video was taken, where, on which device, and — with Attested Capture — that a live human operated the shutter. These facts are recorded in a cryptographically sealed proof anyone can check. VeraSnap does not judge whether the content of the frame is true.
Does VeraSnap work offline?
Capture, hashing, and hardware signing all happen on the device with no connection required. External RFC 3161 time-stamp tokens are anchored as soon as a connection is available. Verifying an exported proof bundle works fully offline.
Is my data private?
Processing happens on your device. VeraSnap does not upload your photos or videos to build a proof — external services only ever see cryptographic hashes. Attested Capture records the result of a biometric check, never facial geometry, fingerprints, or any biometric template.
How does VeraSnap relate to C2PA?
They are complementary layers. The Content Provenance Protocol (CPP) that VeraSnap implements is the forensic capture layer; C2PA carries credentials through editing and distribution. VeraSnap exports C2PA-compatible manifests, so proofs travel into the wider content-credentials ecosystem.
Which devices are supported?
iPhone on iOS 17.0 or later, with LiDAR depth analysis on Pro models, and Android devices with StrongBox or TEE-backed keys. Software-based screen re-photography checks run on all devices, LiDAR or not.
What does VeraSnap cost?
Every evidence and provenance feature is free: sealed capture, RFC 3161 timestamps with failover, screen checks, Attested Capture, QR and offline verification, and open proof export. Pro adds unlimited proof storage for $4.99/month or $39.99/year.