Apple introduces tamper-proof Reference Image mode for iPhone 18 Pro models

Reference Image mode embeds a digital tamper-evidence seal directly in the iPhone 18 Pro’s main camera sensor, using a private key that only the device possesses. When a photo is taken, the sensor signs the raw image data and prevents firmware alteration, while the phone’s security processor adds its own signature. The image and its metadata are uploaded to Apple’s Private Cloud Compute service, where the signatures and signed timestamps—issued roughly every 15 minutes—are checked before the file is processed into a JPEG with a final signature.

Users must opt in via Settings and can compare the signed RAW DNG file with the developed image in the Photos app; the raw file is deleted after 30 days unless saved. Offline capture still receives the latest cached timestamp, and if verification fails, the system falls back to a default earliest date of March 31, 2026. Apple says the cloud service cannot access the actual images, preserving privacy while providing a verifiable chain of evidence.