← Privacy Guides

Communications

Remove hidden metadata before you share a file

Photos and documents carry hidden data — where a photo was taken, which camera or phone took it, who wrote a document and what they edited — that travels with the file when you send it. Learn what leaks, and strip it yourself instead of trusting each app to do it for you.

  • Low threat
  • Time 20 minutes
  • Difficulty Easy
  • Last verified

What this protects, and what it doesn't

Protects

  • Location disclosure: many phone photos embed GPS coordinates, so a shared image can reveal your home or a child's school.
  • Device and identity linking: EXIF often includes the camera or phone make, model and sometimes a serial number, which can tie separate photos to the same device.
  • Document author leaks: office files and PDFs can store the author name, company, the software used, revision history, tracked changes and comments you thought were removed.
  • Timeline leaks: capture and edit timestamps can place you somewhere at a particular time.

Does not protect

  • The visible content itself. Metadata removal does nothing about faces, documents on a desk, a reflection, a landmark or readable text in the image.
  • It does not make you anonymous. The account you post from, your IP and the message around the file all still identify you.
  • Metadata a platform re-adds. A service can attach its own identifiers after upload; stripping before sending only controls what you hand over.
  • Screenshots and exports can carry their own metadata too, so "I only sent a screenshot" is not automatically safe.

Prerequisites

  • The files you are about to share, and a minute to check them before they go out.
  • Optional: ExifTool (desktop) for a reliable command-line strip, or this site's metadata tool for a quick in-browser check.

Step by step

  1. Know what is hiding in a file

    Two broad kinds of hidden data matter:

    • Photo EXIF/XMP: GPS coordinates, date and time, camera or phone make and model, lens, exposure settings, sometimes an embedded thumbnail that was not re-cropped, and occasionally a device serial number.
    • Document metadata: in Word, Excel, PowerPoint and PDF files — author and last-modified-by names, company, the application and template used, creation and edit times, tracked changes, comments, and hidden or deleted text that is still recoverable.

    The filename itself can leak too (for example cv_jane_doe_final.pdf or a camera\'s original IMG_ name tied to a sequence).

  2. Do not rely on the app to strip it for you

    Messengers and social networks handle metadata inconsistently, and the behaviour depends on how you send the file:

    • Sending a photo the normal way often strips EXIF, but sending the same photo as a "document" or "file" usually keeps it intact — that is the most common accidental leak.
    • Signal re-encodes images sent as photos, which removes their EXIF; the same image sent as a file attachment is passed through as-is, so "send as file" can keep the metadata.
    • Large social platforms generally remove EXIF on upload, but their servers read it first, and "high quality"/original-file options can preserve more.

    Because the rules differ per app, per mode and over time, the safe habit is to strip metadata yourself before the file leaves your device, so you are not depending on any single app getting it right.

  3. Strip metadata from photos

    Pick whichever you have to hand:

    • This site\'s metadata tool: drop a photo into the EXIF / Metadata tool to see exactly what it carries, then use its strip mode to download a cleaned copy. It runs in your browser; the file is not uploaded.
    • ExifTool (desktop, most thorough): run exiftool -all= photo.jpg to remove all metadata (it keeps a backup as photo.jpg_original). For a whole folder: exiftool -all= -overwrite_original *.jpg.
    • Phone, quick: many gallery apps offer "remove location" when sharing; on iPhone use the share sheet\'s Options → Location: Off. This removes GPS but not always every other tag, so prefer a real strip for anything sensitive.
    • Windows: right-click the file → Properties → Details → "Remove Properties and Personal Information" → create a cleaned copy.

  4. Clean documents and PDFs

    Office documents need their own pass, because tracked changes and comments are content, not just tags:

    • Microsoft Office: File → Info → Check for Issues → Inspect Document, then remove author data, comments, tracked changes and hidden text. Accept or reject tracked changes first so nothing hidden survives.
    • LibreOffice: Tools → Options → LibreOffice → Security → "Options…" → "Remove personal information on saving", and check File → Properties.
    • PDF: PDFs keep author, producer and creation-tool fields, and a redaction done by drawing a black box does not delete the text underneath. Use a real redaction tool and then remove document properties, or print to a fresh PDF after true redaction.

  5. Verify the cleaned copy, then share that one

    Re-open the cleaned file and confirm the data is gone: check it again in the metadata tool, or run exiftool photo.jpg and confirm only harmless fields remain. Then share the cleaned copy, not the original — and give it a neutral filename. Keep your untouched original if you need the GPS data or full quality for yourself.

Common mistakes

  • Sending a photo as a "document"/"file" to keep its quality, which also keeps all the EXIF the normal send would have stripped.
  • Assuming a black rectangle drawn over text in a PDF removes it; the text is still selectable underneath until it is truly redacted.
  • Cleaning the original in place and losing the GPS or full-resolution version you wanted to keep — work on a copy.
  • Forgetting that the filename, an embedded thumbnail, or tracked changes and comments leak just as much as EXIF tags.
  • Trusting one app's behaviour forever; messenger and platform handling of metadata changes between versions and sending modes.

Going further

Inspect any file\'s hidden data with the EXIF / Metadata tool, and strip tracking parameters from the links you share with the Tracking Link Cleaner. For the bigger picture of what your posts reveal about you, see Social media checkup.