KERNEL SECURITYKS
Why KernelAbout
DocsPricingInvestVerify

KERNEL SECURITY

We sign audio and video from inside the signal. Anyone can check who published it, for free.

Product

  • Verify
  • Pricing
  • Docs
  • Learn

Company

  • About
  • Invest
  • Security

Legal

  • Privacy
  • Cookies

Contact

[email protected]

© 2026 KERNEL SECURITY. ALL RIGHTS RESERVED.

Learn

Watermarking vs C2PA: what's the difference

By José Manuel Ramírez Sánchez · Published October 22, 2026

In short

C2PA keeps a file's provenance in its metadata, in a signed manifest: who created it and how it was edited. An invisible watermark sits inside the audio or video signal itself. Metadata says more, but it's lost when a platform re-encodes the file; the watermark is built to stay. They are complementary.

What C2PA is

C2PA (Coalition for Content Provenance and Authenticity) is an open standard for describing where content comes from and its history. Cameras, editing software and AI generators can attach a signed manifest to the file, Content Credentials, saying who created it, with which tool and what was changed.

The manifest is bound to the file by a cryptographic hash: if someone alters the content, the hash no longer matches and it shows. It's a rich, verifiable description, as long as the manifest stays in the file.

What an invisible watermark is

An invisible watermark changes the signal imperceptibly to carry an identifier. You can't see or hear it, and it doesn't depend on metadata: it's in the pixels and the sound.

Not all of them do the same job. Many only indicate that content was generated by AI. Kernel's carries a signature bound to the publisher's identity, checked separately in the audio and in the video.

Where each one fails

Content Credentials disappear when a platform strips metadata while re-encoding, or when someone takes a screenshot or records the screen. What's left is a file with no history.

A watermark withstands everyday compression, re-encoding and metadata stripping, but it carries less information, and heavy editing can remove it from one channel or both.

Why they complement each other

The C2PA standard itself foresees using watermarks to recover the manifest when the metadata has been lost: the mark points to provenance stored elsewhere. Together they give a rich description while the file is intact and a proof that survives when it isn't.

At Kernel we sign in the signal today. C2PA integration is in development.

Try it with a file

Verifying is free and needs no account.

Verify a file

Frequently asked questions

Does Kernel work with C2PA?

Kernel signs inside the signal itself, and that signature can be checked even when the metadata is gone. C2PA integration is in development.

Can a watermark be removed?

Heavy editing can remove it from one channel or both. It's built for everyday compression, re-encoding and metadata stripping, and the result says which channel still carries it.

What does the EU AI Act require?

Article 50 asks providers of generative AI to mark the audio and video it produces in a machine-readable way. Kernel covers the other half: letting authentic content prove who published it.

Sources

  • C2PA: technical specifications
  • Regulation (EU) 2024/1689 (AI Act)