File Metadata: How an Ordinary Photo Reveals Your Location

File Metadata: How an Ordinary Photo Reveals Your Location

When you take a photo on your smartphone and send it to someone as a document, you share not only the image but also an invisible layer of data — metadata. For OSINT specialists, such files are a real goldmine.

What is EXIF data?

EXIF (Exchangeable Image File Format) is a standard that adds additional information to image and audio files.

What you can find out from a regular photo:

  • GPS Coordinates: The exact latitude and longitude of where the picture was taken.

  • Date and Time: Down to the second the shutter was pressed.

  • Device Model: For example, "Apple iPhone 15 Pro".

  • Shooting Parameters: Aperture, shutter speed, ISO.

    • If you post a photo from your home on a forum where images are not compressed (or send it as a file in a messenger), anyone can download the file, drop it into an EXIF viewer, and see the exact coordinates of your apartment on a map. Such nuances are especially important to consider if you are trying to delete your digital footprint.

    Is metadata saved in messengers?

    Fortunately, popular social networks and messengers (Telegram, WhatsApp) automatically remove metadata when you send a photo the normal way (it gets compressed).

    However, if you send a photo "as a file/document", the messenger transmits the original unchanged. All hidden information will go to the recipient. This is often used during counterparty checks to ensure that photos of production sites or documents were not downloaded from the internet but actually taken by the sender.

    How to protect yourself?

    1. Turn off geotags in the camera. Go to the privacy settings of your smartphone and deny the "Camera" app access to location services. 2. Clear metadata. On Windows, you can right-click on the photo → Properties → Details → Remove Properties and Personal Information. 3. Use special apps. There are scrubber programs (for example, Exif Purge) that remove all hidden data in one click.

    Remember that online security consists of little things!