What Apple Reference Image is
Apple Reference Image is an opt-in Camera mode that debuts on the main camera sensor of iPhone 18 Pro and iPhone 18 Pro Max. When you shoot in Reference mode, the sensor signs pixel data and sensor metadata at capture time, producing what Apple calls a secure digital negative. The signed negative is later developed into a viewable reference image by Apple's Private Cloud Compute (PCC).
The result is a second file — a reference image — that can be compared side by side with the regular photo. Any crop, colour adjustment or generative edit shows up as a difference between the two. That is the feature in one sentence: a sensor-signed "what the camera actually saw" that you can compare against the edited picture.
Not C2PA. Apple is explicit that this is a different approach from C2PA-style manifests, which are attached after capture. Apple argues the editing chain is vulnerable at any point and that linking a photo to a device or person creates privacy risks for photographers. The trust anchor here is the sensor, not the editor.
How to enable and use it
Reference Image is off by default. The setup is one-time; after that, Reference mode appears as a Camera mode.
- Open Settings → Camera → Reference Image, tap Add Reference Mode, and follow the onscreen instructions.
- Open Camera, swipe to Reference mode, and take the photo. You get a regular photo plus signed sensor data.
- To develop it, open the photo in Photos and tap the Reference badge in the top-left corner. Developing needs an internet connection because the processing happens in Private Cloud Compute.
- Once developed, tap the image to switch between the reference image and the photo. Edits are visible in the comparison; the reference image looks flatter because it has minimal processing.
- Tap the Info button to view the reference image's metadata.
| Detail | What Apple documents |
|---|---|
| Capture hardware | Main camera sensor of iPhone 18 Pro / iPhone 18 Pro Max |
| Develop & view | iPhone, iPad or Mac with iOS 27, iPadOS 27 or macOS 27 or later |
| EU | Reference mode is not available in Camera; reference images can still be developed and viewed |
| China mainland | Cannot capture or develop; can view reference images shared with them |
| Camera limits | Some features, such as Night Mode, are unavailable in Reference mode |
| Storage | 12/24 MP adds about 8–10 MB for undeveloped data and about 3 MB for developed data; 48 MP adds about 35–40 MB and 7–8 MB |
| Sharing | You choose whether to include the reference image; if shared before development, it may include sensitive device data such as a serial number |
Sources: Apple Security Research, Apple Reference Image (15 Sep 2026); Apple Support, Use Apple Reference Image (17 Sep 2026).
How to check whether a photo has a reference image
The check is client-side and Apple-specific: open the photo in Photos on a supported device and look for the Reference badge. Tap it to develop or view the reference image and compare it with the photo. That comparison is the actual verification — not a generic "metadata found" badge.
If the reference image was not included when the file was shared, a recipient cannot verify it from the JPEG alone. Apple's sharing flow lets the sender include or omit the reference image, and the reference image is only viewable on iOS 27 / iPadOS 27 / macOS 27 or later. A screenshot, a re-encoded copy or a platform download will not carry it.
Docfy's limit: our metadata viewer reads EXIF, XMP and QuickTime tags and flags C2PA manifests, but it does not verify Apple's sensor signatures or revocation lists. If you need to check a Reference Image, use Apple's Photos flow on a supported device. Absence in a generic viewer is not evidence that a photo is fake.
What it proves
- Sensor capture. The pixel data was signed by a real iPhone camera sensor, with sensor metadata signed at the same time.
- A time window. Apple's timestamp service provides lower and upper bounds; the photo was taken between them, not just "at some point according to the device clock".
- A device binding. The sensor and Secure Enclave are bound to the same device at manufacturing, which makes sensor-swapping attacks harder.
- Post-quantum integrity. The final signature is a composite of RSA-3072 and ML-DSA-87, designed to stay verifiable for as long as someone may want to check it.
- An edit comparison. A developed reference image can be compared with the regular photo to reveal crops, colour adjustments and generative edits.
What it doesn't prove
- That the scene is true. A real photo of a staged scene is still a real photo. The signature covers capture, not context or intent.
- That the photographer is honest. Apple deliberately avoids a public identity credential, so a reference image proves a device, not a person or institution.
- That a copy is authentic. Screenshots, re-encodes and re-photographs lose the signature. A verified original can circulate alongside perfect copies that cannot be verified.
- That the ecosystem is universal. Capture requires iPhone 18 Pro / Pro Max; viewing requires iOS 27 / iPadOS 27 / macOS 27 or later; the EU and China mainland have capture/development restrictions.
- That Apple's roots are infallible. Verification depends on Apple's signing service, Private Cloud Compute and revocation lists. Revocation can invalidate an image, and trust in the operator is part of the model.
Apple Reference Image vs C2PA vs SynthID
| Mechanism | Trust anchor | What it answers | Where it stops |
|---|---|---|---|
| Apple Reference Image | Signed sensor data + Private Cloud Compute | Did a real iPhone sensor capture this, and when? | Apple-only capture/view path; no public verifier; not proof of truth |
| C2PA / Content Credentials | Signed manifest after capture | Who claims what about origin and edits? | Editing chain; can be stripped; signer trust varies |
| SynthID | Invisible watermark in generated content | Was this likely made by a supported AI model? | Requires Google's detector; not a signed file manifest |
For the C2PA side, see our Content Credentials guide.
Privacy notes before you share
Reference images are designed to avoid a public photographer identity, but the file itself can still carry sensitive data. Apple warns that sharing a Reference mode photo before the reference image is developed may include device information such as a serial number and the full image frame regardless of the zoom setting at capture. If you do not need the recipient to verify, leave the reference image out of the share; if you do, share only after development and check the Options before sending.
If your concern is the ordinary metadata in the file — GPS, device, timestamps — the photo metadata remover strips it in the browser. That is a different operation from provenance: removing metadata can also remove evidence, so do it deliberately.
Limits of this guide
- Based on Apple's published documentation as of 4 November 2026; features and availability can change.
- Not legal advice: whether a reference image satisfies a court, insurer or publisher depends on their rules.
- Docfy does not verify Apple signatures. Do not use a generic metadata reader as a stand-in for Apple's Photos verification flow.
Questions people ask
What is Apple Reference Image?
An opt-in Camera mode on iPhone 18 Pro and iPhone 18 Pro Max. The main camera sensor signs pixel data and sensor metadata at capture, producing a secure digital negative that Apple's Private Cloud Compute develops into a viewable reference image. It is designed to prove a real sensor captured a real scene at a specific time.
Which iPhones support Apple Reference Image?
Capture is available on iPhone 18 Pro and iPhone 18 Pro Max. Reference images can be developed and viewed in Photos on iPhone, iPad or Mac with iOS 27, iPadOS 27 or macOS 27 or later. In the EU, Reference mode is not available in Camera, but users can develop and view reference images; in China mainland, capture and development are unavailable.
How do I enable Apple Reference Image?
Settings → Camera → Reference Image → Add Reference Mode, then follow the onscreen instructions. After setup, open Camera, swipe to Reference mode and take the photo. The feature is off by default.
How do I check whether a photo has a reference image?
In Photos, open the photo and look for the Reference badge in the top-left corner. Tap it to develop or view the reference image and use the Info button for its metadata. When sharing, you choose whether to include the reference image; if it is not included, a recipient cannot verify it from the JPEG alone.
Does Apple Reference Image prove a photo is true?
It proves that a supported iPhone sensor captured the signed data at a specific time and that the reference image has not been altered since. It does not prove that the scene was not staged, that the photographer's interpretation is honest, or that the image was not re-photographed or screenshotted later.
How is it different from C2PA?
C2PA attaches a signed manifest after capture and records the edit chain. Apple signs the sensor data at capture and develops the image in Private Cloud Compute, so its trust anchor is the sensor rather than the editing chain. Apple has publicly argued that C2PA is vulnerable at any point after capture and can expose the photographer's identity.
Can Docfy verify an Apple Reference Image?
No. Apple's reference images are verified by Apple's own clients and services. Docfy's metadata viewer reads standard EXIF, XMP and QuickTime fields and flags C2PA manifests, but it does not verify Apple's sensor signatures or revocation lists.