Apple has introduced "Apple Reference Image", an opt-in Reference mode on the iPhone 18 Pro and iPhone 18 Pro Max main camera designed to verify a photo was captured by the iPhone, not AI-generated or altered.

When Reference mode is enabled, the main camera sensor reboots into a dedicated secure operating mode and cryptographically signs the raw pixel data immediately after capture, before software image processing begins.

The iPhone's Secure Enclave Processor separately signs capture information from outside the sensor, such as exposure settings, digital zoom and lens data. Each sensor's signing identity is created at the factory and bound to the Secure Enclave.

The resulting "secure digital negative" is stored on the phone with pixel data, sensor metadata and cryptographic timestamps. To develop it, the device sends the negative to Apple's Private Cloud Compute, which verifies both signatures and confirms the components belong to the same iPhone before returning a signed JPEG. Apple calls this stronger than C2PA, which attaches provenance after software processing. One acknowledged limit: it cannot prove the scene was not staged — photographing a screen showing a deepfake still yields a valid Reference Image. The feature is opt-in, main-camera stills only, with some regional limits.