Why “Save As” Strips Credentials vs. “Export As”

“Save As” strips Content Credentials because it operates on Photoshop’s legacy document-preservation pipeline, whereas “Export As” is built on the modern distribution pipeline designed to compile, sign, and inject C2PA manifests. When you use “Save As” or “Save a Copy” to generate formats like JPEG or PNG, the application prioritizes backward file-format compatibility and standard EXIF/XMP blocks. It bypasses the JUMBF (JPEG Universal Metadata Box Format) compilation routine required to cryptographically bind credentials to exported assets.

Fast Fix

Always output finished images using File > Export > Export As. In the export dialog, verify that the Content Credentials module in the right-hand settings panel is toggled on and configured to either Attach to files or Publish to Content Credentials cloud. Avoid using “Save As” or “Save a Copy” for final client deliverables.


Architectural Contrast: The Two File Pipelines

Understanding why this occurs requires looking at how Photoshop separates master project files from consumer-facing media:

Feature / Behavior“Save As” / “Save a Copy”“Export As”
Primary PurposeWorking file preservation (state capture)Asset distribution and web publication
C2PA Manifest CompilationBypassed for non-native raster formatsActive (Calculates hashes, signs assertions)
JUMBF Metadata InjectionNo (Preserves legacy EXIF/IPTC only)Yes (Injects cryptographic container)
Cloud Registry SynchronizationDisabledSupported (Publishes to Adobe Cloud)
File Format SupportFull format library (PSD, PSB, TIFF, TGA)Distribution formats (JPG, PNG, WebP, SVG)

How the Pipeline Split Breaks Provenance

                      [Active Photoshop Canvas]
                                 │
         ┌───────────────────────┴───────────────────────┐
         ▼                                               ▼
   "Save As" Pipeline                            "Export As" Pipeline
         │                                               │
  Writes raw pixel stream                         Generates SHA-256 pixel hash
  & standard EXIF blocks                          Collects ingredient assertions
         │                                               │
  Skips C2PA manifest builder                     Compiles JUMBF metadata box
         │                                               │
         ▼                                               ▼
  Output: Plain Image File                       Output: Signed C2PA Image Asset
  (No Cryptographic Proof)                       (Valid Credentials & Attribution)

1. The Legacy “Save As” Engine

The “Save As” routine was created decades before the Coalition for Content Provenance and Authenticity (C2PA) standard existed. Its primary job is to write pixels and layers to disk as quickly as possible with minimal metadata overhead.

When you select JPEG or PNG inside the “Save As” dialog, Photoshop uses its traditional encoder. This encoder does not initialize cryptographic signing certificates, does not communicate with Adobe’s Content Authenticity cloud servers, and drops the JUMBF container to maintain compliance with older legacy readers.

Note: The only file formats that retain active Content Credentials tracking through “Save As” are native working files (PSD and PSB), because Photoshop keeps the manifest alive in the background scratch memory for future editing sessions.

2. The Modern “Export As” Engine

The “Export As” workspace was built specifically for generating delivery-ready web and print assets. Adobe integrated C2PA packaging directly into this engine:

  1. Photoshop takes a snapshot of the flattened output canvas.
  2. It calculates a cryptographic hash (SHA-256) of the final pixel array.
  3. It bundles the edit assertions, tool usage records, and connected author accounts into a structured manifest.
  4. It signs the manifest using Adobe’s digital signing key (or your custom enterprise certificate).
  5. It injects the completed JUMBF wrapper directly into the binary header of the JPEG, PNG, or WebP file.

If you skip this pipeline, none of these steps occur. To evaluate how these pipelines impact delivery size, see Why Content Credentials Increase Your File Size.


Resolution: Establishing a Reliable Export Workflow

Step 1: Switch to the Distribution Pipeline

To ensure credentials travel with your deliverables:

  1. Open your project in Photoshop.
  2. Go to File > Export > Export As… (Shortcut: Ctrl+Alt+Shift+W on Windows, Cmd+Opt+Shift+W on macOS).
  3. On the right-hand panel, locate the Content Credentials section.
  4. Ensure the status displays a checkmark indicating that credentials are ready to publish.
+--------------------------------------------------------------+
| Export As: Right Panel                                       |
|                                                              |
| Format: JPEG                                                 |
| Quality: 7                                                   |
|                                                              |
| Content Credentials:                                         |
|   Status: [X] Included in Export                             |
|   Storage: (*) Publish to cloud  ( ) Attach to file          |
+--------------------------------------------------------------+

If you notice missing verification pins on the resulting output, review Why Your Export is Missing the “CR” Content Credential Pin.

Step 2: Choose the Correct Storage Method

Within the “Export As” window, choose your storage method based on where the image will be published:

  • Publish to Content Credentials cloud: Recommended for images posted to social media or distributed across the web. If a client CMS or social platform strips file metadata, the file can still be authenticated via visual matching. Review Troubleshooting “Cloud Storage” vs. “Local Storage” for Credentials.
  • Attach to files: Embeds the manifest inside the file itself. Recommended for direct client handoffs, private archives, or offline environments.

Step 3: Prevent Accidental Stripping by Legacy Workflows

  • Never use “Save for Web (Legacy)”: This dialogue explicitly strips non-essential metadata to minimize bandwidth consumption. It cannot write C2PA manifests.
  • Avoid Quick Export shortcuts until configured: If you use File > Export > Quick Export as PNG/JPG, ensure it is configured correctly. Navigate to Preferences > Export, scroll to Quick Export, and verify that Include Content Credentials is checked.

Diagnosing Missing Metadata on Client Deliverables

If you already delivered assets using “Save As” and your client or platform claims the file lacks authentication:

  1. Open How to Verify an Image Using the Adobe Verify Website.
  2. Upload the delivered file. If the tool returns “No credentials found,” the manifest was never written.
  3. Open the original master .PSD file in Photoshop.
  4. Confirm your edit history is intact via How to View “Edit History” via the Content Credentials Panel.
  5. Re-export the asset using Export As.