WhatsApp voice notes, photos and videos as evidence
A voice note, photo or video is your proof? Preserve the original, then certify it.
In 2026, a WhatsApp voice note, photo or video works as evidence when you keep the untouched original file. A screenshot drops the metadata, a re-recording loses the original, and re-sharing re-encodes it. ProofSnap preserves each original from your export, hashes it and adds an eIDAS qualified timestamp.
Export the chat with its media, send it to us, and within 48 hours you get a sealed package: the original voice notes, photos and videos preserved, each hashed, with an eIDAS qualified timestamp, for a flat $59.99.
Not sure you can export the media? Email us first and we will check before you pay.
Original media preserved · eIDAS qualified timestamp · Verifiable by anyone
John Smith
online
Illustrative example. We preserve each voice note, photo and video as the original file, hash it, and timestamp the package, so the media is hard to dispute and ready for an expert.
Every package can be verified by anyone, for free, in the open Trust Verifier.
Quick answer
Can WhatsApp voice notes, photos and videos be used as evidence?
Yes, but the original media has to be preserved and authenticated, not screenshotted or re-recorded. Media is fragile: screenshotting a photo drops its metadata, re-recording a voice note loses the original, and even re-sharing through WhatsApp re-encodes the file. Courts want a provable date, an unaltered original file and, for who is speaking or what is shown, some form of authentication.
Export the chat with its media, and we preserve each file untouched, hash it with SHA-256 and add an eIDAS qualified timestamp. One conversation with its media is $59.99, in 48 hours.
Certification proves the file is intact and dated, and preserves the original for an expert. It does not identify the speaker or prove a clip is not a deepfake. Admissibility and weight are decided by the court.
Voice notes, photos and videos, and what each one needs
Each kind of media has its own weakness. The common answer is the same: preserve the original file and authenticate it, do not lean on a copy of a copy.
Voice notes
A voice note is an audio file, usually .opus. WhatsApp re-encodes audio when it is forwarded or re-shared, which changes the file even when the words are identical, so the original matters. Certification hashes and timestamps the file you export.
It does not identify the speaker; that is authenticated by testimony, context, or an expert voice comparison, working from the clean original.
Photos
A screenshot of a photo is a new image with no EXIF metadata and no link to the source. The original file, preserved and hashed, is the stronger exhibit. Metadata can also be stripped or spoofed, so it is one signal, not proof on its own.
Certification does not prove a photo was not staged; that is a question of content the court weighs.
Videos
Same rule, bigger files. Preserve the original video from the export rather than a re-shared or screen-recorded copy. For a standalone screen or call recording, our Video SnapPack in the extension captures with audio and a timestamp.
Certification fixes the file and its date; whether the footage is edited or AI-made is examined separately.
Why WhatsApp media loses value with every copy
Every step away from the original file makes the evidence easier to challenge. These are the four that quietly weaken it.
Screenshotting a photo drops the metadata
A screenshot is a fresh image with no EXIF data and no link to the original. Forensic preservation keeps the source file; a phone-gallery screenshot does not.
Re-recording a voice note loses the original
Playing a voice note into another recorder creates a second-generation copy without the original file or its metadata. The original .opus is what an expert needs to examine.
Re-sharing re-encodes the file
Forwarding media through WhatsApp, or saving and re-uploading it, re-encodes it and strips metadata, changing the file even when the content looks identical.
No hash, date or chain of custody
A media file sitting in your gallery has no integrity hash, no independent date and no record of how it was handled. Certification adds all three around the preserved original.
The deepfake question
"How do we know the audio or video is not AI-generated?"
In 2026 this is a real objection. AI can produce convincing fake audio and video, and the US Advisory Committee on Evidence Rules has been weighing changes to the authentication rules, including a proposed rule on AI and machine-generated evidence.
Certification does not detect a deepfake. What it does is make your genuine media much harder to dismiss, in two ways:
An early, provable date
The qualified timestamp fixes the latest time by which the file existed, so a fake would have had to exist by then too.
The untouched original
We preserve the source file so a forensic expert has the real thing to test for manipulation. A fresh screenshot or re-recording gives them nothing to work with.
ProofSnap is an evidence tool, not legal advice. For a call recording or a covertly made clip, recording laws differ by country, so consult a qualified lawyer.
From "I have the recording" to a sealed package, in four steps
A done-for-you service. Export the chat with its media, send it, and you receive the sealed package within 48 hours.
Export the chat with media
Use Export chat and choose Attach media (or Include media), so the actual files come with it.
See exact steps ↓Upload on the secure page
A secure upload page opens right after payment. Upload the export and tell us which media matters plus any case reference.
We certify and deliver
You receive a signed ZIP with the preserved original media, per-file SHA-256, a line-numbered transcript, Bitcoin anchor and eIDAS timestamp, within 48 hours.
Step 1 in detail
How to export the chat with its voice notes and media
This is the one thing that matters most: choose Attach media (iPhone and Desktop) or Include media (Android). A Without media export contains only text placeholders like "audio omitted", not the actual voice notes, photos and videos.
WhatsApp has a built-in per-chat export on your phone (iPhone and Android) and in the WhatsApp Desktop app (Mac and Windows). Send us the export with media and we do the rest.
On a computer, in WhatsApp Desktop (Mac and Windows)
Export from WhatsApp Desktop
In the WhatsApp Desktop app on Mac or Windows, this is the quickest route:
- 1Right-click the conversation in your chat list (or click the chevron that appears on hover), then click Export chat.
- 2Choose Attach media. Do not pick Without media, or the voice notes, photos and videos will be missing.
- 3The file is saved straight to your Downloads folder. Send us that .zip.
You get a _chat.txt plus the media files. Desktop is easiest when the media is large or the chat is already on your computer.
On your phone (iPhone and Android)
Export from your phone
On iPhone: open the chat with that person or group, then:
- 1Tap the contact or group name at the top to open contact info.
- 2Scroll down and tap Export chat.
- 3Choose Attach media, then Save to Files.
On Android: open the chat with that person or group, then:
- 1Tap More options (the three-dot menu at the top right).
- 2Tap More, then Export chat.
- 3Choose Include media, then pick how to save it.
Export chat grayed out, or media too large?
The in-app Export chat is disabled when Advanced Chat Privacy is on for that chat; in that case turn it off, use a device backup or email us. Very large chats and videos can be cut from a with-media export, so for a media-heavy chat the message database below is the most complete source.
For the exact click-by-click with screenshots, see our guide to exporting a WhatsApp chat for court, or WhatsApp's guide to exporting your chat history.
Send us everything (recommended)
The primary artifact is the _chat.txt export plus its media folder. For the strongest media exhibit, also send, if you have it, the WhatsApp message database, which holds the original media files. We seal the database as sent, hashed and timestamped, never opened. If authenticity is ever disputed, an independent forensic expert can verify the media against the source. Decrypting the database needs its key, which the custodian provides separately.
Optional: the message database
Find your device below, then send us the folder it points to. When in doubt, send more rather than less.
Connect by USB and copy the whole WhatsApp folder:
Android/media/com.whatsapp/WhatsApp/ (older devices /sdcard/WhatsApp/)
- •
Media/: the voice notes, photos and videos - •
Databases/:msgstore.db.crypt15and dated backups
Your 64-digit key: WhatsApp › Settings › Chats › Chat backup › End-to-end encrypted backup.
The message database lives inside a device backup, so make a full local backup:
- 1.Plug the iPhone into a Mac (Finder) or Windows PC (Apple Devices / iTunes)
- 2.Check Encrypt local backup, set a password, back up
- 3.Send the whole backup folder:
~/Library/Application Support/MobileSync/Backup/(Mac)%APPDATA%\Apple\MobileSync\Backup\(Windows)
Encrypting the backup is what keeps the WhatsApp media complete.
Zip this whole folder as-is (needs Full Disk Access):
~/Library/Group Containers/group.net.whatsapp.WhatsApp.shared/
- •Attachments: the
Media/andMessage/folders (voice notes, photos, videos) - •Messages:
ChatStorage.sqlitewith its-waland-shmsidecars
Too large to zip whole? Send the Media folder plus the .sqlite with its sidecars.
Zip the whole folder for whichever build you have:
- •Store / older app:
%LOCALAPPDATA%\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\LocalState\including cached media - •Newer WebView2 build (default since late 2025):
%APPDATA%\WhatsApp\includingCache\and the IndexedDB store
Not sure which you have? Zip both paths if present, or just tell us.
Your files stay encrypted. Keep your key or backup password yourself. We seal the database and backups exactly as sent, hashed and timestamped, and never open them. You only hand the key to an independent forensic expert if authenticity is ever disputed. After we deliver your finished package, we keep our working copy for 30 days for support and disputes, then delete it automatically.
What you get back
A readable transcript, with the media preserved and hashed
We render your conversation into a clean, line-numbered Chat Conversation Transcript PDF: photos shown inline exactly where they were sent, and each voice note and video referenced by file name and linked to the preserved original inside the package, with a SHA-256 hash on every file.
The original media files preserved untouched, each with its own SHA-256 hash
Photos rendered inline, in place; voice notes and videos referenced by name and linked to the file
Cover sheet: parties, case reference, date range, media count, and the package SHA-256
Bitcoin anchor plus an eIDAS qualified timestamp, verifiable by anyone for free
Two layers of proof, and what each one means
Both layers are included in every certification. The qualified timestamp is what carries legal weight in the EU.
Bitcoin OpenTimestamps
The SHA-256 hash of your sealed manifest is anchored in the Bitcoin blockchain: a decentralized, independent, tamper-resistant proof that the media existed no later than a point in time. How much weight it carries is for the court to decide.
eIDAS qualified timestamp
Legal presumption in the EU
Issued by Disig a.s., a Qualified Trust Service Provider on the EU Trusted List.
"A qualified electronic time stamp shall enjoy the presumption of the accuracy of the date and the time it indicates and the integrity of the data to which the date and time are bound."
What certification proves, and what it does not
What certification proves
- Each media file existed in that exact state no later than the timestamp.
- No file has been altered since it was sealed.
- The original media is preserved for later expert examination.
- If you also send the message database, an expert can examine it later, including the account each message and its media are bound to.
What it does not do
- It does not identify who is speaking in a voice note; that is authenticated by testimony, context or an expert.
- It does not prove a photo was not staged or that a clip is not a deepfake; it preserves the original for that analysis.
- Admissibility and weight are decided by the court.
We make each media file verifiable from the moment we seal it, and fix the latest time at which it existed, and we preserve the untouched original for an expert. The court still decides authorship and meaning, as it always does.
Built to support authentication in US courts and the eIDAS presumption in the EU, with acquisition and chain of custody following the principles of ISO/IEC 27037, the international standard for preserving digital evidence. Recording laws differ by country, so for a call recording or a covertly made clip, consult a qualified lawyer.
Pricing
Already exported the chat with its media? We certify it as-is.
One certification covers one conversation, including its voice notes, photos, videos and any supporting file.
WhatsApp Chat Certification
1 conversation with its media · certified in 48 hours
- Original voice notes, photos and videos preserved
- SHA-256 hash on every media file
- Line-numbered transcript, photos shown inline
- eIDAS qualified timestamp + Bitcoin anchor
- Verifiable by anyone, for free
Right after payment, a secure upload page appears where you send us your files. Very large videos or many media files? Mention it when you email us and we will confirm the best option.
- Add a signed technical report at checkout, $24.99. It documents what we received and how it was sealed, is signed by the examiner, and is available in 29 languages.
A standalone recording, not a chat?
To capture a screen or call recording with audio and a timestamp yourself, the Video SnapPack in the ProofSnap extension is built for that. Email us if you are unsure which fits.
The full WhatsApp service?
See the complete WhatsApp chat evidence service, or read whether WhatsApp screenshots are admissible.
Frequently asked questions
For a website, not a chat
Need to prove a web page or a screen recording?
If your evidence is a website, a social post, a live stream or a screen recording with audio, ProofSnap is a Chrome extension that lets you capture it as evidence yourself, in seconds. Same integrity you read about here: a SHA-256 hash, an RSA-4096 signature, a Bitcoin blockchain timestamp and a Provenance Certificate, packaged into an 11 to 15 file evidence ZIP you can verify for free. The Video SnapPack adds signed screen and call recording with audio.
Standard SnapPack
10 captures · no expiration · one-time purchase
Pay-as-you-go, no subscription. All features: export, metadata, a short video proof, Provenance Certificate and blockchain timestamp.
Video SnapPack
75-min recording with audio + bundled credits
$19.99 / video · also 1× $24.99 or 10× $169.99
Signed screen or call recording with audio, includes 3 captures and 3 eIDAS stamps bundled. White-label branding included.
Subscription
Essential · Professional · Enterprise
Annual plans available
For regular use: monthly capture allowances, File Certification and eIDAS stamps on higher tiers. Includes a 7-day free trial (a credit card is required to start).
Prefer no subscription and no auto-renewal? The Standard SnapPack at $4.99 is a one-time purchase. SnapPacks are bought inside the extension after you install it. See the full ProofSnap pricing and features on getproofsnap.com.
Free to install · capture your first evidence in under a minute.