Bellingcat's Online Investigation Toolkit
  • About
  • Most Used
  • New Tools
  • ⚒️Categories
    • Maps & Satellites
      • Maps
      • Satellite Imagery
      • Street View
    • Geolocation
    • Image/Video
      • Reverse Image Search
      • Facial Recognition
      • Metadata
      • Misc
    • Social Media
      • Discord
      • Facebook
      • Instagram
      • LinkedIn
      • Reddit
      • Telegram
      • Tiktok
      • Twitter/X
      • Vkontakte
      • Youtube
      • Other Networks
      • Multiple Networks
      • International
    • People
    • Websites
    • Companies & Finance
    • Conflict
    • Transport
    • Environment & Wildlife
    • Archiving
    • Data Organization & Analysis
  • 📖Resources
    • Guides & Handbooks
    • Education
    • Newsletters & Toolkits
    • Stay Safe
  • More
    • All Tools
      • 4plebs
      • 527 Explorer
      • About Maps and Satellites
      • ACLED
      • AllTrails
      • Apollo Mapping
      • Apple Maps
      • Archive.today
      • Atlos
      • Auto Archiver
      • AutoStitch
      • Azure AI Video Indexer
      • Baidu Maps
      • Bellingcat OpenStreetMap Search
      • Bing Maps
      • Blackbird
      • Blender
      • Bluesky Insights
      • BskyFollowFinder/Bluesky network analyzer
      • BskyThreadReader
      • Bulletpicker.com
      • CAT UXO
      • China-related resources
      • Chronotrains
      • CITES Trade Database
      • Companies House
      • Convert Geographic Units
      • Datawrapper
      • DeHashed
      • DiscordLeaks
      • Distill.io
      • DomainTools Whois Lookup
      • Earth Explorer
      • Earth Online
      • EDGAR Suite
      • EDGAR
      • Equasis
      • Etherscan
      • EU consolidated corporate registers
      • ExifTool
      • F4Map
      • FaceCheck.ID
      • FlightAware
      • Flightradar24
      • Forensically
      • GeoHints
      • Gephi
      • Ghunt
      • Global Fishing Watch Map
      • Global Forest Watch
      • Global Monitoring System - ECOSOLVE
      • Global Suppliers Online
      • Google Earth Engine
      • Google Earth Pro
      • Google Flood Hub
      • Google Lens
      • Google Maps
      • GovMap
      • GPSJam
      • Have I Been Pwned
      • Hitta.se
      • Hoaxy
      • Hugin
      • Hunchly
      • ICANN Lookup
      • ICIJ Offshore Leaks Database
      • ImportGenius
      • ImportYeti
      • Index Database
      • Instagram Location Search
      • Instant Data Scraper
      • Intelx.io
      • InVID
      • KartaView
      • Leak-Lookup
      • License Plate Maps
      • LittleSis
      • Liveuamap
      • Logseq
      • Lumen
      • Maigret
      • Maltego Graph
      • MapChecking
      • Mapillary
      • MapSwitcher
      • MarineTraffic
      • Meta Content Library
      • MW Geofind
      • Name Variant Search
      • Namechk
      • NASA Firms
      • NASA Worldview
      • NeutrOSINT
      • North Data
      • Obsidian
      • OCCRP Aleph
      • Open Measures
      • Open Ownership
      • Open Source Munitions Portal
      • OpenCorporates
      • OpenSanctions
      • OpenSecrets
      • OrbTrack
      • Osint Tools Map
      • Overpass Turbo
      • PeakVisor
      • Picuki
      • PimEyes
      • Pinpoint
      • PixPlot
      • Planet Labs
      • QGIS
      • Quick geolocation search
      • Radar Interference Tracker
      • RAWGraphs
      • RootAbout
      • RuPEP
      • SanctionsExplorer
      • satellites.pro
      • Search by Image
      • Sentinel Hub Playground
      • ShadeMap
      • Shadow Finder
      • ShadowMap
      • Sherlock
      • Skopenow
      • SkyFi
      • Snap Map
      • Strava
      • Suncalc
      • Telegago
      • Telegram Group Joiner
      • Telegram Phone Number Checker
      • TelegramDB
      • Telemetrio
      • Telemetry
      • Telepathy
      • Tencent Maps
      • TGStat
      • The Information Laundromat
      • TinEye
      • TrueCaller
      • TruffleHog
      • Twitter Advanced Search
      • Twitter Location Search
      • Twitter Video Downloader
      • Umbra Space
      • UN Comtrade Database
      • UNOSAT Analyses
      • Uwazi
      • VesselFinder
      • Wayback Machine
      • Web Archives
      • What CMS
      • WhatsMyName
      • Who posted what?
      • Whoxy
      • Wikimapia
      • Wikipedia list of registers
      • WildEye
      • Wildlife Trade Portal
      • xIFr
      • Yandex Maps
      • Zotero
Powered by GitBook
On this page
  • URL
  • Description
  • How to Use
  • Cost
  • Level of difficulty
  • Requirements
  • Limitations
  • Ethical Considerations
  • Guides and articles
  • Tool provider
  • Advertising Trackers

Was this helpful?

Edit on GitHub
Export as PDF
  1. More
  2. All Tools

xIFr

A Firefox add-on for extracting EXIF metadata by right-clicking an image.

Last updated 2 months ago

Was this helpful?

URL

|

Description

xIFr is a Firefox extension designed to extract and display EXIF, IPTC, and XMP metadata from an image. This metadata can provide valuable insights on camera settings, timestamps, location (GPS data), copyright information, and editing history. If available, metadata can be useful for verifying the authenticity of images, understanding their origins, and analyzing their context.

xIFr comes with a "Deep Search" feature that allows you to access metadata from images embedded in layers, set as backgrounds, or otherwise blurred or obscured.

Geotagged images can be viewed on OpenStreetMap, , , and .

EXIF, IPTC and XMP

Digital images are enriched with metadata that provides both technical details and contextual information, primarily through standards such as EXIF, IPTC, and XMP.

  • : A metadata standard that records technical details about an image. Primarily designed for digital photos, it includes information such as the camera model, exposure settings (aperture, shutter speed, ISO), and may also capture GPS coordinates if available, providing insight into the conditions under which the photo was taken.

  • : A standardized set of fields designed primarily for news and media applications. It embeds descriptive information into images and other media files—such as captions, keywords, headlines, and credit lines—to provide context, attribution, and other details.

  • : XMP is an Adobe-developed metadata format designed to embed information about a media file's editing history, licensing, and other descriptive details. Newer versions of EXIF and IPTC metadata standards incorporate XMP, and it's widely supported by other software as well. While it's often used for images, it may also be used for other file types such as PDFs or videos.

Both EXIF and IPTC serve to store metadata, but they were developed with different priorities in mind. Consequently, some metadata fields can overlap. For example, both can record the date and time the photo was taken or include location information. In such cases, the data might appear in both the EXIF and IPTC sections, ensuring that the relevant information is available to various applications and workflows.

This might apply to other proprietary metadata formats as well.

How to Use

Right click an image and select "View EXIF data" next to the icon with a camera and a hint bubble:

A popup will open with two tabs: Image data and Map.

Image Data Tab

This first tab lists all metadata fields present in the image, although images found on the web may not include every field.

Information in the example can be classified as follows:

  • File & Basic Information: Contains details like File Name, Content-Type, Size, Last Modified, and Dimensions, these fields are "file-specific" and not actual metadata.

  • Descriptive Content: Includes Title, Description, and Keywords for context, along with the EXIF Date, which shows when the photo was actually taken (distinct from the file's creation or modification date).

  • Licensing and Attribution: Provides licensing and legal details that might be used to identify the author through fields like Credit Line, Copyright, License URL, Creator, Creator Country, Creator URL, and Camera Owner.

  • Capture & Technical Data: Lists technical details such as Date, Make, Model, Lens, Focal Length, Aperture, Exposure Time, ISO Equivalent, Flash Fired, White Balance, Distance, Exposure Mode, Exposure Bias, Metering Mode, FocalPlaneXRes, FocalPlaneUnits, and LensModel, describing the conditions and equipment used.

  • Location Information: Shows geolocation data including GPS Latitude, GPS Longitude, Country, Province/State, City, and Sublocation, useful for mapping and verification.

  • Post-Processing Data: Contains information about any adjustments made after capture, like Orientation, Software, and Color Space.

You can find a list of common EXIF and IPTC fields here:

You can also notice small latin cross marks ✝ in front of the GPS Longitude, GPS Latitude, Software and Color Space fields. These are clickable notices. You can click on them to show additional data such as additional software or decimal latitude and longitude values.

Additionally, next to the GPS coordinates, you can find the O, G, B and F icons which allows you to open the GPS coordinates in OpenStreetMap, Google Maps, Bing Maps and the Explore Nearby functionality by Flickr respectively. Clicking any of these icons will open the results in a separate browser tab.

Map Tab

If GPS data is available, the Map Tab will show up, allowing you to take a quick look on the location on OpenStreetMap.

Options

At the bottom-right of the popup you'll find a Copy to clipboard icon next to an Options icon. The first one copies the metadata to your clipboard and the second one opens xIFr's settings.

When clicking on the Options a new tab opens with the following content:

You can customize the following settings:

  • Display Mode: You can choose between a default (light theme), auto (system-preferred), or dark theme.

  • Popup Position: Multiple options let you decide where the popup appears (e.g., center of screen, top left/right, left/right), although multi-display setups might affect these placements.

  • Deep Search: This feature helps xIFr guess which image you intended to open when using the context menu. There's also a "force big" mode (activated with shift-click) that ignores smaller images. You can set the max value of the images to ignore.

  • Map Links: You can set other cartography services to view the GPS location with including MapQuest, Here WeGo or GeoHack.

Cost

The extension is free and open source.

Level of difficulty

Requirements

  • Firefox browser

Limitations

  • The add-on is only available in Firefox.

  • Metadata fields are not static attributes; they can be altered by their authors to obscure contextual information or intentionally provide misleading details. Consequently, it's crucial to critically assess the metadata you find, cross-referencing it with other clues available in the image or in the context of your study. Never assume metadata is entirely reliable without verification.

  • xIFr primarily supports extracting metadata from JPEG images. When webpages provide multiple image formats (e.g., AVIF, WebP, and JPEG), modern browsers often display non-JPEG formats. However, xIFr attempts to detect and parse metadata from an available JPEG variant of the image when possible.

Ethical Considerations

Metadata can expose sensitive information such as location data or device details. Make sure to respect privacy rights.

Guides and articles

Tool provider

Advertising Trackers

Page maintainer

Bellingcat Volunteer Team

For this guide, we'll use a photo taken by the tool developer himself as an example. The photo can be found in his guide .

Tip: Some websites override the browser's default right-click context menu. You can to access the browser's native context menu.

Many platforms such as social networks automatically strip metadata from uploaded media. To find images that may still contain metadata, consider using to locate other instances of the same image that might have its original metadata.

Stig Nygaard (tool developer): XIFr -

Bellingcat's

Developed and maintained by Stig Nygaard (), a developer and photographer from Denmark.

https://addons.mozilla.org/en-US/firefox/addon/xifr/
https://github.com/StigNygaard/xIFr
Google Maps
Bing Maps
Flickr (explore nearby photos)
EXIF (Exchangeable Image File Format)
IPTC (International Press Telecommunications Council)
XMP (Extensible Metadata Platform)
here
EXIF Metadata Fields
IPTC Metadata Fields
bypass this behaviour by holding down the Shift key while right-clicking
reverse image search tools
Getting started
EXIF articles
Mastodon
Viewing EXIF Data can be done via the context menu
Metadata of a photo taken by Stig Nygaard, the tool developer, not very far from the Mont Saint-Michel Tower in Brittany, France.
Before clicking on the notice
After clicking on the notice
You can fetch the GPS coordinates on four different services using the O, G, B and F icons.
Copy to Clipboard and Options Icons
xIFr's settings
Location of the example above on .
OpenStreetMap