Apple claims the iPhone 18 Pro camera is more secure than your Android

Google introduced verified photography with the Pixel 10 series using the C2PA standard and also brought it to the Pixel 11 range. Apple, by contrast, only started offering support for verified photography with the iPhone 18 Pro and Pro Max — an entire generation after the Pixel 10 series. However, the company now claims its “Reference Image” is much better than the C2PA standard used by companies like Google and Samsung.

In a new blog post, Apple shared extensive insights into how Reference Image works and why it’s better than anything else available to the general public. Reference Image is an opt-in feature that works on the primary camera of the iPhone 18 Pro series. It adds a cryptographic signature to the photo the moment the sensor captures it, before any image processing. However, it’s limited to the main sensor and can’t add verification signatures to photos taken by the ultrawide or telephoto cameras.

In contrast, C2PA adds credentials to photos after they are captured. Apple argues this leaves the system vulnerable to compromise “at any point during the editing chain,” leaving the viewer with no way to know whether the data has been altered. In fact, a security researcher showed last month that C2PA can be forged and isn’t tamper-proof, and we were also able to remove Google’s digital AI watermarks from photos.

Apple’s Reference Image splits the signing process in two: the sensor signs raw pixel data at the hardware level, while Private Cloud Compute handles the image processing in an environment that even Apple can’t see into. It then combines both into a signature that Apple claims is the only quantum-secure image verification system in the world right now.

Apple also claims that Reference Image is more private than C2PA-based approaches. The company explains that C2PA links images to identity-based credentials, tied either to a particular device or to an individual. This can be especially dangerous for photographers working in high-risk situations. Meanwhile, Reference Image maintains privacy by ensuring that no two photos can be identified by an observer as having been taken with the same iPhone.

Apple’s blog post puts forward a reasonable argument against C2PA-based verification methods. However, because Reference Image works only with the iPhone 18 Pro’s main camera, photos taken with the ultrawide and telephoto cameras can’t be verified the same way. The Pixel 11, by contrast, can cryptographically sign photos taken with any of its cameras. That makes Google’s implementation more versatile, at the very least, even if Apple’s security claims are true. It remains to be seen how Apple’s Reference Image verification fares once the iPhone 18 Pro and Pro Max land in users’ hands.