Remove Metadata from Photos on Windows 11: The Built-in Tool Has a Hidden Flaw

The Flaw Nobody Tells You About

Here's something most Windows guides quietly skip over: the built-in metadata removal tool in Windows 11 doesn't actually clean your files.

Security researcher Didier Stevens documented this in detail. When you use "Remove Properties and Personal Information" on a JPEG, Windows removes the DIRENTRY structures — the pointers that tell software where to find each metadata field. But it does not shrink or overwrite the underlying data segment. The original string values — your GPS coordinates, your camera model, the timestamp of when you took the shot — sit in the file's binary as orphaned data. They're invisible to normal metadata viewers, but they're trivially recoverable with a hex editor or forensic tools.

That's not a minor edge case. If you're removing metadata because you're concerned about privacy — selling something online, sharing photos with strangers, or protecting your location from being read — the Windows built-in tool gives you a false sense of security.

There are also four other fields the built-in tool consistently misses, regardless of the ghost data issue. It doesn't touch XMP data blocks, IPTC blocks, embedded thumbnail EXIF data (the small preview image inside the JPEG contains its own EXIF block), or manufacturer Maker Notes. If you shot with a Canon, Nikon, or Sony, your camera's proprietary tags likely survive the Windows removal entirely.

So the first thing to know: the native tool is better than nothing, but it's not a complete solution. This guide covers what each method actually removes, step by step — so you can pick the right one for your situation.

What Metadata Windows Embeds in Your Photos (By Default)

Before stripping anything, it's worth understanding what's actually there. Photos taken on a Windows device — whether a Surface tablet, a laptop with a webcam, or a smartphone synced to Windows — carry EXIF metadata by default. So do photos imported from any modern camera or phone.

A typical JPEG taken on a Windows device or imported from an iPhone includes:

• GPS latitude and longitude — accurate to within 5 meters in most cases
• Camera make and model — identifies your exact device
• Date and time of capture — often including the timezone
• Focal length, aperture, ISO, shutter speed — full shooting parameters
• Software version — the camera app or firmware that processed the image
• Thumbnail image — a small embedded preview with its own EXIF block
• Maker Notes — proprietary manufacturer data that varies by camera brand
• XMP data — Adobe's metadata standard, often added by editing apps

The GPS data is the obvious concern. But device model information is also surprisingly useful for someone who wants to profile you — it confirms which phone or camera you own. And the timestamp combined with GPS creates an exact record of where you were at a specific moment.

If you're new to what EXIF data actually contains, our complete guide to EXIF data breaks down every field category in detail. For this article, we'll focus on the practical question: how do you get rid of it on Windows 11?

Method 1: Windows 11 File Explorer (Built-in, With Caveats)

This is the method most people reach for first. It works for casual use — sharing a photo with family, or situations where you just want the obvious fields gone. Know its limits before relying on it.

Step 1: Open File Explorer and navigate to the photo you want to clean. You can also select multiple photos with Ctrl+click or Ctrl+A for a whole folder.

Step 2: Right-click the photo (or right-click any selected photo if you've selected multiple) and choose Properties from the context menu.

Step 3: Click the Details tab at the top of the Properties window. You'll see all the metadata Windows knows about — camera model, GPS coordinates, dates, shooting settings.

Step 4: Click "Remove Properties and Personal Information" at the very bottom of the Details tab. A new dialog opens with two options.

Step 5: Choose your option. "Create a copy with all possible properties removed" makes a new file and leaves your original untouched — the safer choice. "Remove the following properties from this file" lets you pick specific fields to delete from the original. The first option is almost always preferable.

Step 6: Click OK. Windows creates a clean copy in the same folder with "Copy" appended to the filename (e.g., "IMG_4892 - Copy.jpg").

What this method removes: GPS coordinates, camera make and model, date taken, software tags, author, comments, rating, and most standard EXIF fields visible in the Details tab.

What this method misses: The orphaned binary string data (ghost data), embedded thumbnail EXIF, XMP data, IPTC data, and Maker Notes. Not suitable for high-stakes privacy situations.

File format support: Works reliably on JPEG. Behavior on PNG, HEIC, and WebP varies and is not guaranteed. If you're dealing with non-JPEG formats, use a different method.

Method 2: PowerShell + ExifTool (Thorough, Requires Setup)

PowerShell alone can't strip EXIF cleanly — the .NET imaging libraries available natively can read metadata but don't provide reliable write-and-strip functionality. The real PowerShell workflow pairs it with ExifTool, a free command-line tool by Phil Harvey that's become the standard reference for metadata operations.

This setup takes about five minutes to configure. After that, you can clean entire folders of photos with a single command.

Step 1: Download ExifTool. Go to exiftool.org and download the Windows executable. You'll get a file named exiftool(-k).exe. Rename it to exiftool.exe. Move it somewhere stable — C:\Tools\exiftool.exe works well.

Step 2: Open PowerShell. Press Windows+S, type PowerShell, right-click it, and select Run as Administrator.

Step 3: Run this command to strip all metadata from a single file:

exiftool.exe -all= -overwrite_original photo.jpg

Replace photo.jpg with your actual filename (or drag the file into the PowerShell window to auto-fill the path). The -all= flag clears every metadata field. The -overwrite_original flag overwrites the file in place without creating a backup — remove that flag if you want ExifTool to keep a backup automatically.

Step 4: To clean an entire folder of JPEGs at once, navigate to the folder first, then run:

exiftool.exe -all= -overwrite_original -ext jpg .

The dot at the end means "current directory." This processes every JPEG in the folder.

Step 5: Verify the result. Run this to confirm the file is clean:

exiftool.exe photo.jpg

If the output shows only image dimensions and color information — no GPS, no camera model — the file is clean.

What ExifTool removes: Everything. GPS, camera model, timestamps, Maker Notes, XMP, IPTC, embedded thumbnails. It rewrites the file structure rather than just removing pointers, so there's no ghost data.

Limitations: Requires downloading and configuring a third-party tool. Not practical for one-off photo shares from non-technical users. The command syntax has a learning curve, and running -overwrite_original incorrectly could modify files you didn't intend to touch.

Method 3: MetaClean — Browser-Based, No Installation

If you need to clean a handful of photos quickly — without installing software, learning command-line syntax, or worrying about which fields different tools miss — a browser-based tool is the most practical option for most people.

MetaClean's image metadata remover runs entirely in your browser. Your photos never leave your device — the processing happens locally using the browser's File API. There's no upload, no account required, and nothing is retained after you close the tab.

The process takes about ten seconds: go to metaclean.app/image-exif, drop in your photos, and download the cleaned versions. It supports JPEG, PNG, HEIC, WebP, and TIFF — including the formats that Windows' built-in tool handles unreliably.

Unlike the Windows Properties method, MetaClean rewrites the file structure rather than just removing metadata pointers. GPS coordinates, camera model, timestamps, Maker Notes, XMP, and IPTC are all gone. The embedded thumbnail is regenerated without EXIF data. No ghost data remains.

For Windows users who regularly share photos online — marketplace listings, social media posts, email — building this into your workflow before sharing any image is the most reliable privacy habit you can develop. It takes less time than writing a product description.

Comparison: What Each Method Actually Removes

This is the table most guides don't include. Here's how the methods stack up on a typical smartphone JPEG with full GPS data and Maker Notes:

Windows File Explorer (Remove Properties)

• GPS coordinates — removed (pointer only; values survive as ghost data)
• Camera make and model — removed (same caveat)
• Date taken — removed (same caveat)
• XMP data — NOT removed
• IPTC data — NOT removed
• Embedded thumbnail EXIF — NOT consistently removed
• Maker Notes — NOT removed
• Ghost data recoverable via hex — YES

ExifTool via PowerShell

• GPS coordinates — fully removed, segment deleted
• Camera make and model — fully removed
• Date taken — fully removed
• XMP data — fully removed
• IPTC data — fully removed
• Embedded thumbnail EXIF — fully removed
• Maker Notes — fully removed
• Ghost data recoverable via hex — NO

MetaClean (browser)

• GPS coordinates — fully removed, file rewritten
• Camera make and model — fully removed
• Date taken — fully removed
• XMP data — fully removed
• IPTC data — fully removed
• Embedded thumbnail EXIF — removed, thumbnail regenerated
• Maker Notes — fully removed
• Ghost data recoverable via hex — NO

When Stripping Metadata Should Be Non-Negotiable on Windows

Most Windows users don't think about photo metadata until something makes the risk concrete. These are the situations where you really don't want to skip it.

Selling items on Marketplace or Craigslist. Photos of items taken at home embed your home's GPS coordinates. Anyone who downloads your listing photo can map your address in seconds. This is one of the most common and underappreciated metadata risks, and most people have no idea it's happening. Our guide on removing EXIF data from photos covers this in the context of online selling in detail.

Emailing photos to people outside your close circle. Email doesn't strip metadata. The recipient gets the original file with everything embedded. If they forward it, so does every metadata field it carries.

Sharing with journalists, lawyers, or insurers. Metadata has been used as evidence in legal proceedings. The timestamp and GPS data in a photo can support or undermine a claim depending on what it says. Know what's in your files before submitting them.

Posting to platforms that may not strip metadata. Social media platforms like Instagram and X strip metadata from public posts — but their API pipelines (used by scheduling tools) and DM systems often don't. If you post through Buffer, Hootsuite, or any scheduling app, the API pathway may preserve GPS data that the official app would have removed. Strip before you schedule.

Sharing photos from Windows Camera. The Windows Camera app asks for location permission on first launch. If you said yes — and most people do — every photo you've taken with it has your GPS coordinates embedded. Check a few older photos from your Camera Roll in the Details tab before you assume they're clean.

What About Photos Transferred From Android or iPhone to Windows?

This is a common scenario: you take photos on your phone, transfer them to your Windows PC via USB or cloud sync, and then share or sell them from there. The metadata travels with the photo every step of the way.

Photos transferred from an iPhone to a Windows PC via iCloud, AirDrop, or USB carry the full EXIF block — including GPS data if location services were enabled in the Camera app. The Windows File Explorer Details tab will show the coordinates exactly as recorded on the iPhone.

Android transfers behave the same way. Photos from Samsung, Google Pixel, or any other Android device carry their full metadata through any transfer method. Google Photos sync, USB transfer, Bluetooth — none of these strip metadata in transit.

So if you're on Windows and you're sharing photos originally taken on a phone, the same methods apply. The built-in Windows removal tool works on transferred photos as well as locally captured ones — with the same limitations. For complete metadata removal from transferred phone photos, ExifTool or MetaClean give you the same thorough result regardless of the source device.

For Android-specific removal workflows before you transfer to Windows at all, our Android EXIF removal guide covers every option. And for iPhone photos, the iPhone GPS removal guide explains why the iOS share sheet only removes GPS — not everything else.

Frequently Asked Questions

Does Windows 11 automatically remove metadata when I share a photo?

No. Windows 11 does not automatically strip metadata when you share, copy, email, or transfer photos. The metadata stays embedded unless you explicitly remove it using the Properties dialog, ExifTool, or a browser-based tool. Unlike some messaging apps, Windows applies no automatic processing to image files when you attach or share them.

Why does the Windows built-in tool leave ghost data behind?

The "Remove Properties and Personal Information" feature removes metadata pointers (DIRENTRY structures) but does not shrink or overwrite the data segments themselves. The original string values — GPS coordinates, camera model, timestamps — remain at their binary locations in the file as orphaned data. This flaw was documented by security researcher Didier Stevens and affects all versions of Windows that use this feature, including Windows 11 as of 2026.

Can someone recover my GPS coordinates after I use Windows' built-in removal?

Potentially, yes. The ghost data left by Windows' "Remove Properties" feature is recoverable with a hex editor or binary analysis tool. It won't appear in standard metadata viewers like ExifTool's normal output or the Windows Properties panel — but it exists in the file's binary and can be extracted by someone with the right tools and motivation. For genuine privacy, use ExifTool or MetaClean, both of which rewrite the file structure entirely.

Does removing metadata affect photo quality or file size?

No — removing metadata has zero effect on visual quality. The EXIF block is a separate data structure attached to the image binary; stripping it doesn't touch the pixel data at all. The file size decreases slightly (typically a few kilobytes for a standard JPEG), but the visual content, resolution, and compression are completely unchanged.

Can I remove metadata from multiple photos at once on Windows 11?

Yes, using any of the methods in this guide. The Windows File Explorer method allows you to select multiple files with Ctrl+click, then right-click and choose Properties — the removal dialog applies to all selected files. The PowerShell + ExifTool method is even more efficient for bulk operations, letting you clean entire folder trees with a single command. MetaClean also supports drag-and-drop batch processing.

What's the difference between removing GPS specifically and removing all metadata?

Removing GPS specifically targets only the latitude, longitude, altitude, and related GPS fields — leaving camera model, timestamps, and other fields intact. Removing all metadata clears the entire EXIF, XMP, and IPTC structure. For most privacy purposes, removing all metadata is the right choice — camera model and timestamps can also be used to identify you or build a profile, and there's rarely a reason to preserve them when sharing publicly.