How verification works

What is stored

The SHA-256 fingerprint of the file you chose, an RFC 3161 timestamp from an independent timestamp authority, and the details you entered — typically a title, a creator name, and a creative field. Optional location or AI-creation notes can be added later. They are not required to issue the record.

What is not stored

The file itself. After the fingerprint is created, the file is discarded. Lyricsmit cannot play it back, download it, or recover it. If you lose the original file, the record still shows that a file with that fingerprint existed at that time — it does not replace your copy.

How the RFC 3161 timestamp works

RFC 3161 is a public standard for trusted timestamps. A timestamp authority receives a fingerprint, records the time, and signs that pairing. The stamp does not depend on Lyricsmit remaining online to be checked against the public TSA infrastructure. It shows when that fingerprint was presented — not who wrote the song or who owns the rights.

How a recipient verifies a record

1. Open the verification link you send them. No login is required.
2. They see the record ID, fingerprint preview, timestamp, and whether the record is still active.
3. If they still have the original file, they can hash it independently and compare. The same file always produces the same SHA-256 fingerprint.

Go to verify →

What Lyricsmit does not prove

Lyricsmit creates proof-of-existence records. It does not determine ownership, authorship, originality, copyright status, or legal rights. A verification page is not a copyright registration, a contract, or a court finding.