Answer
Does removing metadata make an AI image undetectable?
No. Metadata is a label attached to the file. Detection largely works on the pixels themselves and on watermarks embedded in them, and stripping metadata touches neither.
Updated
It is worth being direct about this, because the opposite is widely assumed. Removing a content credential or a generation tag does not make an image pass as photographic. Those fields are a declaration attached to the file; they are not the thing detectors look at.
Detection classifiers work on the image data — statistical traces left by the generation process that survive cropping, resizing and re-compression. Several generators also embed invisible watermarks directly into the pixels, designed specifically to survive the ordinary things people do to images. Neither of these is stored in the metadata, so neither is affected by removing it. SynthID vs C2PA sets out which signal lives where.
The design intent of C2PA runs the same way. Content credentials are not meant to be tamper-proof in the sense of being impossible to strip — they are meant to be tamper-evident. An image whose credential has been removed does not read as an ordinary photograph; it reads as an image whose provenance chain is broken, which is its own signal. The scheme also anticipates removal, which is why durable provenance pairs the metadata with watermarking and fingerprinting.
None of which makes removal pointless. There are ordinary reasons to strip these fields that have nothing to do with disguising anything: a prompt is often personal or commercially sensitive, generation metadata inflates file size, some pipelines reject files carrying unexpected blocks, and the credential can name an account or an organisation you would rather not publish.
What it does mean is that removal should not be relied on as concealment. If a disclosure obligation applies to you — a platform policy, a client contract, a jurisdiction with AI labelling rules — stripping the metadata does not discharge it. The legal position covers where those obligations actually bite.
More on this: AI image metadata remover, ChatGPT image metadata remover.
Terms used here: C2PA, Provenance.