Free PDF tamper checker
Check a PDF for editing and structural signals.
Inspect metadata, revision history, scripts, attachments, signatures, and the binary file type. A clean result does not prove authenticity.
Inspect the file
Check format, metadata, revision history, scripts, attachments, and a cryptographic fingerprint.
What the checker reads
Useful clues, with their limits attached.
Metadata
Creator, producer, and PDF timestamps can show how a file was made. Metadata can also be missing, rewritten, or removed.
Revision markers
Multiple end markers and prior revision pointers indicate incremental saves. Forms and digital signatures can create them legitimately.
Active content
Scripts and embedded files can be legitimate but deserve careful handling, especially when a simple statement should not need them.
Cryptographic identity
A SHA-256 hash identifies the exact bytes reviewed. It does not identify the person who made the file.
Start with evidence
Turn a suspicious PDF into specific review questions.
Run a private, browser-based integrity scan. Your file never leaves your device.
Scan a document