|
|
All guides
Görsel AnalizKişisel Güvenlik

What Is Photo Metadata (EXIF)? How to View and Remove It

OSINT TR3 min read

Every photo you take can carry an invisible package of information alongside the image: which device took it, when, and sometimes exactly where. This information is called metadata, and its most common form is EXIF. This guide is for researchers and for anyone who wants to protect their own privacy.

What is EXIF?

EXIF (Exchangeable Image File Format) is a standard metadata format that cameras and phones write into the photos they take. It is not visible in the picture; it is stored inside the file. There are other metadata formats too, such as IPTC and XMP, used especially by editing software and news agencies.

What does it carry?

  • Device: The make and model of the phone or camera, sometimes lens information.
  • Date and time: The moment the photo was taken (according to the device clock; the time zone is not always recorded).
  • Location: GPS coordinates if location services are on, sometimes altitude and direction.
  • Shooting settings: Exposure time, aperture, ISO, flash use.
  • Software: The program that edited or saved the photo.
  • Small preview: In some files, a small copy of the photo. Even if the photo was cropped, the preview may show the original.
If you share the original file of a photo taken at home with location turned on, you may have shared your home address to the metre.

Does social media remove metadata?

Most large social media platforms remove metadata such as location from the public copy of uploaded photos. But this is not true everywhere: files sent by e-mail, cloud sharing links, forums and photos sent “as a file/document” in some messaging apps can reach the recipient in their original form, metadata included. And you cannot know whether a platform keeps the information it removes from the public copy on its own servers.

How to view metadata

On a computer

  • Windows: Right-click the file and look at Properties → Details.
  • macOS: Open the photo in Preview and use Tools → Show Inspector to see EXIF and (if present) GPS data.
  • ExifTool: The free, open-source tool that shows all metadata in the most detail. Just type exiftool photo.jpg on the command line.

On a phone

  • iPhone: Open the photo in the Photos app and swipe up or tap the info (i) button; the device, date and location appear.
  • Android: Open the photo in Google Photos and swipe up; the details section shows the date, device and location.

How to remove it before sharing

  1. Block it at the source: If you turn off location permission for your phone’s camera app, no location is written to new photos. You can turn it on temporarily for photos where you need location.
  2. When sharing on iPhone: Use Options at the top of the share sheet to share without location data.
  3. On Windows: The “Remove Properties and Personal Information” link at the bottom of the Properties → Details tab creates a copy with metadata removed.
  4. With ExifTool: The command exiftool -all= photo.jpg removes all metadata and keeps the original as photo.jpg_original.
Tip: Always check afterwards: open the file again in a metadata viewer and make sure the location and device data are gone.

How is metadata used in OSINT?

If you can get hold of the original file in an investigation, metadata can be very valuable: a GPS coordinate gives the location directly and a date gives the timeline. Still, do not trust metadata blindly:

  • Metadata can easily be changed or added falsely.
  • The device clock may be set wrong; without a time zone, local time and UTC can get mixed up.
  • GPS data can be off by a few hundred metres, especially indoors and between tall buildings.

So verify what you get from metadata against the content of the image (shadows, signs, weather). We explain what to do with photos that have no metadata in our guide to finding a photo’s location.

Note: metadata is fully removed from photos in OSINT TR missions before they are published. Look for the location in the photo itself, not in the metadata.

Put it into practice
Solve OSINT missions built from real photos and climb the leaderboard.
Go to missions

More guides

AramaBaşlangıç

Google Dorking: OSINT with Advanced Search Operators

Get far more out of search engines with site:, filetype:, intitle:, quotes and date operators, plus a ready-made dork library for documents, companies, usernames, places and ships.

9 min read14 November 2026
ArşivDoğrulama

Finding Deleted Content: A Guide to the Wayback Machine and Web Archives

Find old versions of deleted or changed web pages: the Wayback Machine, archive.today and national archives. Reading a site’s history, archiving your findings and the limits.

6 min read14 November 2026
RaporlamaBaşlangıç

How to Write an OSINT Report: Findings, Evidence and Confidence

Turning open source research into a readable, verifiable report: report structure, evidence logging, archiving, confidence language and tips for writing CTF write-ups.

6 min read14 November 2026
DenizcilikGEOINT

Ship Tracking OSINT: IMO, MMSI, AIS and the Shadow Fleet

Tracking ships with open sources: IMO vs MMSI, AIS data and its limits, verifying a ship’s identity, measuring ships on satellite imagery, the shadow fleet and sanctions databases.

6 min read13 November 2026
Due DiligenceFININT

What Is Due Diligence? Vetting Companies and Candidates with OSINT

What is due diligence and when is it done? A step-by-step guide to vetting suppliers and companies with open sources, spotting red flags and running lawful pre-employment screening.

6 min read13 November 2026
OSINTBaşlangıç

What Is OSINT? A Beginner’s Guide to Open Source Intelligence

What is OSINT (open source intelligence), where is it used and how do you learn it? The intelligence cycle, core skills, ethical and legal limits, and a roadmap for getting started.

4 min read12 November 2026
GEOINTGeolocation

How to Geolocate a Photo: A Step-by-Step Guide

How to find where a photo was taken: checking metadata, reading clues in the image, reverse image search, narrowing down with maps and street view, and verification.

4 min read12 November 2026
Görsel AnalizIMINT

Reverse Image Search Guide: Google Lens, Yandex, Bing and TinEye

What is reverse image search and what is it good for? The strengths of Google Lens, Yandex Images, Bing Visual Search and TinEye, with practical tips for better results.

3 min read12 November 2026
SOCMINT

Tracing a Username: An Introduction to SOCMINT

How to research open sources starting from a single username: username scanning, verifying matches, pivoting techniques, archives and ethical limits.

3 min read12 November 2026
GEOINTUydu

How to Read Satellite Imagery: A Guide to Free Satellite Sources

Free satellite imagery sources (Sentinel, Landsat, NASA Worldview, Google Earth) and the basics of reading satellite images: resolution, dates, shadows, false colour and change detection.

3 min read12 November 2026
DoğrulamaGörsel Analiz

Fake News and Image Verification: A 5-Step Checking Guide

Check in 5 steps whether a photo or video you see on social media is real: source, first publication, location, time and context. Tips for spotting AI-generated images.

3 min read12 November 2026