Learn

Can PDF metadata be faked?

Yes. Every metadata field in a PDF, creation date, modification date, author, producer, can be set to any value with free tools, no expertise required. That answer surprises people who treat document properties as a built-in lie detector, and it reframes how metadata should be used: as a story to test for consistency, never as proof by itself.

What faking looks like, and where it slips

Setting a fake creation date is trivial. Setting it consistently is harder than most forgers realize, because dates live in more places than the properties panel. The visible info fields and the XMP layer both carry timestamps, and they have to agree. Embedded objects can carry their own stamps. Filesystem context, email headers, and the dates inside the document's content all have to line up with the claimed timeline. The standard forgery edits the visible fields and misses at least one of the others, and a contradiction between layers is more damning than any single suspicious date.

There's also the fingerprint problem. The tool used to edit the metadata is itself software that tends to leave traces in how it rewrites the file. A file claiming to be five years old, written in the byte-layout style of a current-version utility, contradicts itself in a way no date field can fix.

What survives when metadata can't be trusted

Cryptographic evidence. A digital signature doesn't care what the metadata says: it either verifies over the bytes or it doesn't, and a trusted timestamp embedded in a signature is set by a timestamp authority's clock, not the document author's. This is the clean division in document forensics: metadata is the witness who might be lying, the signature is the math that can't. When a document matters and has no signature, the answer is source verification, getting the file directly from the system that claims to have produced it.

FAQ

If metadata can be faked, why check it at all?

Because most altered documents aren't crafted by careful forgers; they're quick edits by people who don't know the file keeps records. Metadata checks catch the common case cheaply. The rare careful forgery is what signatures and source verification are for.

Is faking metadata illegal?

Editing your own file's metadata is legal. Using a doctored document to obtain money, housing, or employment is fraud in essentially every jurisdiction, and the metadata edit becomes evidence of intent.

Can an expert always detect faked metadata?

No one can promise that. A perfectly consistent fake is possible in principle. In practice, consistency across every layer is hard to achieve, and an examination reports the contradictions it finds, not a guarantee.