Is C2PA Content Credentials safe?

Clean risk

C2PA Content Credentials sends resized page images to Digimarc SBR when watermark checking is enabled.

After watermark checking is enabled, C2PA Content Credentials scans visible images on pages you visit and prepares them for C2PA manifest recovery. It sends resized image data, along with image context such as the source URL and image identifier, to Digimarc SBR to check for matching watermarks and fetch related manifests.

Digimarc Labsv0.2.0Chrome Web Store
0Risk
Who publishes it

Digimarc - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Digimarc Labs
Declared legal entity
Digimarc
Registered address
8500 SW Creekside Pl, Beaverton, OR 97008-7101, US

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cai-manifests.adobe.com
Also called by 1 other listing: Adobe Photoshop
cai-msb.adobe.io
Also called by 1 other listing: Adobe Content Authenticity

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed C2PA Content Credentials contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • sbr.c2pa.labs.dmrc.app

    C2PA Content Credentials sends data to sbr.c2pa.labs.dmrc.app. No other extension we have analysed sends data here.

Updated 30 September 2026mjkaocdlpjmphfkjndocehcdhbigaafp