What your screenshots reveal

Screenshots carry less metadata than photos — but structured text chunks, software strings and, above all, visible content. What to check before you paste one.

A screenshot has a reputation for being harmless: it is just pixels, isn't it? Less metadata than a camera photo, sure — but a screenshot is a structured image file, and its structure can carry labels, software names and timestamps.

The file is a list of chunks

PNG — the default screenshot format on almost every platform — is a sequence of chunks. Each chunk has a 4-byte length, a 4-byte type and a payload. Text chunks such as tEXt, zTXt and iTXt can hold arbitrary key/value strings.

Fig. 01Anatomy of a screenshot (PNG)

Screenshot.png · chunk stream

Signature89504E47

IHDRwidth / height

tEXt / iTXtsoftware, labels

IDATpixels

IENDend

The signature identifies the file. IHDR describes the image size, IDAT holds the compressed pixels, and the text chunks in between are where the metadata lives — or hides.PNG specification, ISO/IEC 15948

In a hex view, the text chunks announce themselves by their ASCII type name:

Fig. 02A text chunk in the byte stream

offsethexannotation

000089504E470D0A1A0A0000000D49484452.PNG........IHDRsignature + IHDR

00200000001274455874536F667477617265....tEXtSoftwaretEXt chunk

The bytes 'tEXt' mark a metadata chunk. What follows is a keyword and a value — often the name of the tool that produced the file.Hex view of a PNG tEXt chunk (ISO/IEC 15948)

What typically leaks

Fig. 03Fields found in common screenshots

Software	Snipping Tool 11.2401 / macOS 15.2
Device	MacBook Pro 16-inch
CreationTime	2026-09-23T08:14:02Z
Pixel dimensions	1512 × 982
Visible content	tabs, notifications, names

None of this identifies a person on its own. Combined, it builds a surprisingly precise picture of your machine and habits.

More important than metadata: the content itself

For screenshots, the real risk usually sits in the pixels, not the properties:

Notification pop-ups that show names, e-mail subjects or message previews.
Browser tabs that reveal open documents, tickets or internal tools.
Window titles and file paths in the title bar or a terminal prompt.
Avatars and account names in the corner of a chat window.

Metadata cleaning will not fix any of that. It is worth a second look at the image itself.

How to check and clean

Drop the screenshot into ShredHub to see its text chunks and any software strings.
Clean with the standard preset to empty the metadata fields.
Re-scan the result, then look at the picture once more for content leaks.
When in doubt, crop or redact before you share.

Takeaway

Screenshots are cleaner than photos but not clean. The metadata tends to be small — the visible content is where the sensitive information usually is. Check both.