You open MS Paint, draw a quick diagram, save it as a PNG, and email it to a colleague. Simple, right? Nothing to hide. But here's what you don't know: that image now carries a hidden identifier—a globally unique identifier (GUID)—that can trace the file back to your specific device. No cloud upload. No account login. No internet connection required.
This isn't a conspiracy theory. It's a feature Microsoft shipped in the Windows 11 2023 update, quietly tucked into two of the most mundane apps on your system: Paint and Photos. The feature is called Content Credentials, and it's part of the Coalition for Content Provenance and Authenticity (C2PA) standard—an industry-wide effort backed by Adobe, Intel, and Microsoft to combat deepfakes and disinformation.
But here's the uncomfortable part: it's enabled by default, and most users have no idea it exists. Let's break down what this means for your privacy, your workflow, and your images.
The invisible watermark is a piece of metadata embedded into your image file. It's not a visible stamp or a logo—it's a structured data block that follows the C2PA specification. Inside that block is a GUID: a 128-bit identifier that's unique to your device and your app installation.
Think of it like a license plate on your car. The plate isn't visible from a distance, but any law enforcement officer can read it up close. Similarly, the GUID isn't visible when you view the image, but any tool that reads C2PA metadata can extract it.
The C2PA standard was launched in 2021 by a coalition of tech companies and media organizations. Its goal is straightforward: create a technical standard for verifying the origin and editing history of digital content. When you save an image in Paint or Photos, the app writes a Content Credential that includes:
This metadata sits in the file's EXIF or XMP section, depending on the format. It doesn't alter the pixels, doesn't change the colors, and doesn't add any visible artifacts.
Key Takeaway: The watermark is metadata, not a visual overlay. It identifies the device and app that created the file, but you can't see it without specialized tools.
Here's where things get interesting. Microsoft didn't ask you. When you updated Windows 11 or bought a new machine, the Content Credentials feature was already enabled in Paint and Photos. There's no pop-up during installation, no "Do you accept?" dialog, no opt-in checkbox.
The feature ships as part of the default configuration. Microsoft's rationale is that provenance tools only work if they're ubiquitous—if only 10% of users enable it, the system fails its purpose. But that logic sidesteps a fundamental question: should a company embed tracking identifiers in user-generated content without explicit consent?
Consider the scale. Windows 11 has over 400 million active devices, and Paint and Photos are pre-installed on all of them. That means hundreds of millions of images are being saved with hidden GUIDs every day, and the vast majority of users have no idea.
The 2023 update that introduced this feature rolled out to over 100 million devices within the first month. That's 100 million people who suddenly had a tracking identifier embedded in their local files without being told.
Key Takeaway: The feature is enabled by default with no user notification. If you haven't manually disabled it, your images are being watermarked right now.
This is the detail that surprises most people. The watermark isn't added by a cloud service. It's not sent to Microsoft's servers for processing. The GUID is generated locally, stored locally, and embedded locally during the saving process.
Here's how it works:
No network request. No authentication. No phone-home. This means the feature works identically whether you're on a plane, in a remote cabin, or in a country with restrictive internet policies.
This has implications for privacy advocates. If the watermark required an internet connection, users could simply disconnect to avoid it. But because it's purely local, there's no way to prevent it through network controls. The only way to avoid it is to disable the feature in settings or use a different application.
For journalists, activists, or anyone handling sensitive images, this is a significant consideration. A local image created in a secure environment still carries a device identifier that could potentially be extracted later.
Key Takeaway: The watermark is added locally during the save process. No internet connection is required, making it impossible to avoid through network isolation.
The GUID is unique per device and per app installation. This is the privacy crux of the entire feature.
If you create an image on your Windows 11 laptop using Paint, that image contains a GUID that maps to your specific laptop. If someone extracts that GUID, they can potentially:
The GUID is not tied to your Microsoft account—Microsoft has stated this explicitly. But that doesn't mean it's anonymous. A GUID is a persistent identifier. If an image with a GUID is shared online, and if law enforcement or a forensic analyst has access to a database of GUID-to-device mappings, they can trace the image back to you.
Consider this scenario: A whistleblower creates a document screenshot in Paint and shares it anonymously. The image carries a GUID. If authorities have a suspect's device, they can save an image on that device, extract the GUID, and compare it to the leaked image. If they match, the suspect is linked to the leak.
This isn't theoretical. Forensic tools that read C2PA metadata are already available, and law enforcement agencies are actively using content provenance data in investigations.
Key Takeaway: The GUID is a persistent device identifier. While not linked to your account, it can be used to correlate images and potentially trace them back to your hardware.
Open an image in any photo viewer, and you'll see nothing unusual. The GUID doesn't appear as text, doesn't alter the visual appearance, and doesn't affect how the image renders on screen.
But it's there.
To extract the GUID, you need a tool that reads C2PA metadata. The most common is the C2PA Inspector, a free web-based tool that lets you upload an image and view its provenance data. Other options include:
Here's what a C2PA Inspector result might show for an image created in Paint:
Content Credentials:
- GUID: 7c9e6679-7425-40de-944b-e07fc1f90ae7
- App: Microsoft Paint (10.0.22621.1000)
- Timestamp: 2024-03-15T14:32:08Z
- Device: Windows 11 Pro (Build 22621)
The GUID is displayed in standard UUID format. It's a random-looking string, but it's deterministic—the same device and app will always produce the same GUID.
For researchers studying misinformation, this is a powerful tool. They can collect images from social media, extract C2PA metadata, and analyze patterns of origin. A viral image that appears on 50 different accounts might all share the same GUID, revealing that they came from a single source.
Key Takeaway: The watermark is invisible in normal viewing but easily extracted with free tools like C2PA Inspector or ExifTool.
The watermark isn't applied universally. It depends on whether the file format supports the metadata structure required by C2PA.
Formats that retain the watermark:
Formats that strip the watermark:
This creates an interesting workaround for privacy-conscious users. If you save an image as a GIF or BMP, the GUID is effectively lost. However, this also means those formats don't carry provenance information, which defeats the purpose of Content Credentials.
For most users, the practical takeaway is this: if you're saving images for everyday use, they're likely PNG or JPEG, and they're carrying the watermark. If you switch to GIF or BMP, you lose the watermark—but you also lose image quality and compatibility.
It's worth noting that Microsoft is aware of this limitation. The company has stated that future updates may extend C2PA support to more formats, but for now, the coverage is limited to the three major formats.
Key Takeaway: PNG, JPEG, and TIFF retain the watermark. GIF and BMP do not. If you want to avoid the GUID, use a format that strips metadata.
If you're uncomfortable with the watermark, you can turn it off. But Microsoft didn't make it easy.
Here's the step-by-step process:
For MS Paint:
For Photos:
That's it. The process takes about 30 seconds once you know where to look.
But here's the problem: most users won't find it. The setting is buried in app-specific preferences, not in Windows system settings. There's no notification, no tooltip, no explanation of what Content Credentials are or why you might want to disable them.
A typical user who opens Paint to draw a quick diagram won't think to check the settings gear. They'll see the tools, the color palette, and the canvas. The Content Credentials option is hidden in a submenu that most people never explore.
Microsoft has published a support page explaining the feature, but it's not linked from the app itself. You have to know what you're looking for to find it.
Key Takeaway: You can disable Content Credentials in Paint and Photos settings, but the option is buried in app preferences and unlikely to be discovered by casual users.
The invisible watermark in MS Paint and Photos is a double-edged sword. On one hand, it's a legitimate tool in the fight against disinformation. The C2PA standard provides a way to verify the origin of digital content, which is increasingly important in an era where deepfakes and manipulated media are rampant. A Pew Research Center survey found that 63% of Americans believe altered videos and images are a major problem. Content Credentials offer a partial solution.
On the other hand, the implementation raises legitimate privacy concerns. A hidden identifier embedded without user consent, on by default, and traceable to a specific device—these are hallmarks of surveillance, not transparency. Microsoft's claim that the GUID isn't linked to user accounts is technically true, but it's also true that persistent identifiers can be correlated and deanonymized over time.
The fact that the feature works offline makes it even more invasive. You can't avoid it by disconnecting from the internet. The only options are to disable it manually or switch to a different application.
Here's what I recommend:
The watermark isn't going away. The question isn't whether Content Credentials will become ubiquitous—it's whether users will be given meaningful control over how they're used. Right now, the answer is no. That might change, but only if enough people demand it.
Check your Windows 11 settings today to see if Content Credentials are enabled, and share this article to spread awareness about hidden watermarks in your images.
It's a Content Credential—a piece of metadata embedded in images saved by MS Paint and Photos on Windows 11. It contains a GUID that uniquely identifies the device and app that created the file, following the C2PA standard for content provenance.
Yes. The watermark is added locally during the saving process and does not require an internet connection. It's generated and embedded entirely on your device.
No. The watermark is invisible in normal viewing. It's stored in the image's metadata section and doesn't alter the visual appearance. You need specialized tools like C2PA Inspector or ExifTool to extract it.
You can disable Content Credentials in the app settings (see Section 7), or you can strip the metadata using tools like ExifTool. Note that removing the metadata also removes the provenance information.
Potentially. The GUID is a persistent device identifier that can be used to correlate images and trace them back to your hardware. While not linked to your user account, it could be used in forensic investigations or data correlation.
Yes. In MS Paint, go to Settings → Content Credentials and toggle it off. In Photos, go to Settings → Preferences → Content Credentials and toggle it off.
No. The watermark is stored in metadata, not in the image pixels. It doesn't affect visual quality or file size significantly.
It's part of the C2PA standard, which aims to provide provenance and authenticity information for digital content. The goal is to help combat disinformation by allowing verification of an image's origin and editing history.
No. It's added to formats that support metadata, such as PNG, JPEG, and TIFF. Formats like GIF and BMP don't retain the watermark because they lack the necessary metadata structure.