Key takeaways
- A digital fingerprint (hash) is a short code calculated from a file; change one pixel and it changes completely.
- Recording the fingerprint at the moment of capture lets anyone check later that the file is unchanged.
- A chain of custody records every step the file went through, so gaps and changes show.
- Fingerprints prove a file hasn’t changed, not that what it shows is the whole story.
Photo editing used to take skill. Now anyone can remove an object, change a date or generate a convincing fake in seconds. That’s good news for creativity and bad news for evidence: the other side can simply say “that photo was edited”. Digital fingerprints are one of the simplest, most robust ways to answer that.
What is a digital fingerprint?
A fingerprint, or hash, is a fixed-length code calculated from the content of a file by a mathematical function. SHA-256 is one of the most widely used, by banks, software publishers and forensic experts. It has two useful properties:
- The same file always gives the same fingerprint, on any computer.
- Changing even one bit of the file (one pixel, one frame, one second of audio) gives a completely different fingerprint, and it’s practically impossible to make two different files with the same one.
Why the moment of capture matters
A fingerprint only proves something if you know when it was recorded. If the fingerprint is calculated and stored the instant the photo is taken, with the time and place, then any later copy can be checked: same fingerprint, same file. If it doesn’t match, something was changed.
Chain of custody
Investigators talk about a chain of custody: a record of who had the evidence, when, and what was done with it. For digital files, it’s a log of each step: recorded, encrypted, copied, uploaded, analysed. When each entry is linked to the previous one (a hash chain), editing, removing or reordering an entry becomes visible.
What fingerprints don’t prove
- They don’t prove what happened outside the frame, or before and after the recording.
- They don’t prove who is right in a dispute: they prove the file is the original.
- They don’t replace other evidence: witnesses, documents and your own account still matter (see /blog/how-to-document-an-incident/).
Courts and insurers in different countries weigh digital evidence differently. A fingerprint strengthens a file’s credibility; it doesn’t guarantee that it will be accepted.
How to protect your files without special tools
Keep originals untouched, back them up the same day, avoid apps that compress files and strip metadata, and note when and where each file came from. For serious cases, a bailiff or notary can certify a file or web page in some countries.
How Chameleon AI does it
Chameleon AI calculates a SHA-256 fingerprint for every photo, video and voice note the moment you stop recording, with the time and, if you allow it, the place. The file is then encrypted on your device (AES-256-GCM). Each step it goes through is written to a hash chain, on your device and on our servers when you ask for an analysis, and the app can check the whole history for you. Exported PDF reports include the fingerprints and timestamps, so anyone can compare.
Frequently asked questions
Can I calculate a file’s SHA-256 myself?
Yes. Most computers have a built-in command (for example shasum -a 256 on macOS, or Get-FileHash on Windows PowerShell), and many free tools exist. Comparing two fingerprints tells you if two files are identical.
Does sending a photo by messaging app change its fingerprint?
Often yes, because many apps compress images and remove metadata. That’s why you should keep and share the original file when it matters.
Can a fingerprint detect a deepfake?
Not by itself: a fake file has its own valid fingerprint. What a fingerprint recorded at capture does is prove that your file is the original you recorded, which helps you answer accusations of editing.
General information to help you get organised, not legal advice. Procedures and numbers can change: confirm them with the office concerned, and in danger call your local emergency number first.
