Verifieddit 1.5 now flags files whose Content Credential does not cover the image itself. With such a credential, the picture can be swapped and the signature still checks out. These files are marked red, and the panel names the part the signature left out. Files that leave out only header metadata get a note and keep their result.

The release also reports revoked certificates. When a file includes its issuer's revocation status, and the issuer has revoked the signer's certificate, the badge turns red and reads "Signer's certificate revoked." Earlier versions labelled these files as changed after signing.