Smartphone
Low confidence
KB2001
Release
2021
Observed span
2021 – 2024
All patterns are aggregated and anonymous — no originals retained. Privacy details →
SOF Compression TypeStart of Frame marker — identifies the JPEG compression algorithm. SOF0 = baseline DCT (most common); SOF2 = progressive DCT (multiple passes, common in web-optimised images).
JPEG compression markers (SOF0 = baseline, SOF2 = progressive).
| Observed value | |
|---|---|
| SOF0 |
DQT Quantisation Table FingerprintsThe 64-value matrix that controls JPEG lossy compression. Baked into firmware — consistent across units of the same model — and distinctive enough to act as a camera fingerprint.
JPEG quantisation table fingerprints. Identical patterns across devices indicate shared hardware or firmware lineage.
1
distinct fingerprint accumulated
JPEG Segment InventoryThe set of JPEG markers consistently present in output from this device. Marker presence and order are firmware-determined and can help distinguish camera lineages.
APP and SOF segments consistently present in output from this device.
| Observed value | |
|---|---|
| APP1Primary metadata container — holds EXIF camera data (make, model, GPS, settings) and optionally XMP. | |
| DHTDefine Huffman Table — the compression lookup table baked in by the encoder. | |
| DQTDefine Quantization Table — the 64-value lossy compression matrix. Consistent per firmware; useful as a fingerprint. | |
| SOF0Start of Frame, Baseline DCT — the most common JPEG compression type. | |
| SOIStart of Image — the 2-byte marker that opens every valid JPEG file. | |
| SOSStart of Scan — marks the beginning of the compressed image data stream. | |
| APP0JFIF application marker — identifies the file as JFIF format and may carry thumbnail and pixel density info. | |
| APP2ICC colour profile or FlashPix extension data. |
Metadata Block TypesThe metadata container formats found in files from this device — EXIF, IPTC, XMP, JFIF, and others. Different devices and software pipelines embed different combinations.
| Observed value | |
|---|---|
| Exif | |
| JFIFJPEG File Interchange Format — a baseline format header. Often absent from camera-original files; common in scanned or web-converted images. | |
| ICC_PROFILE |
Your photos carry this device fingerprint.
Vaultify strips device metadata before sharing — and can hide a private message inside your photo, invisible to forensic scanners like these.
