How to Authenticate a Website Screenshot in Court (FRE 902 Guide, 2026)

July 11, 2026 · Updated July 12, 2026

You found the page. The defamatory post, the infringing product listing, the contract terms that quietly changed. You hit Print Screen, dropped the image into your exhibit file, and moved on.

Then opposing counsel objects, and the screenshot is out.

This happens more often than most solo and small-firm lawyers expect, and it is almost always preventable. This guide covers why ordinary screenshots fail authentication, what Federal Rules of Evidence 902(13) and 902(14) changed in 2017, and the specific steps that turn a web capture into a record designed to support authentication under FRE 902(13) and 902(14).

Why plain screenshots get excluded

A screenshot is just an image file. It carries no reliable record of what URL it shows, when it was taken, who took it, or whether it was edited afterward. Anyone with five minutes and free software can fabricate one. Courts know this, so when a screenshot matters and the other side challenges it, judges ask the obvious questions: who captured this, when, and how do we know it is accurate?

Iglesia Ni Cristo v. Cayabyab, No. 5:18-cv-00561-BLF (N.D. Cal. Mar. 31, 2020) is a clean example. The plaintiff offered screenshots of the defendants’ social media pages and YouTube videos to support a trademark claim at summary judgment. The court excluded them. The attorney’s declaration did not say who took the screenshots or when, and the plaintiff offered no testimony from the person who captured them, nor any other evidence to authenticate them. The underlying content may well have been real. It did not matter. The evidence failed before anyone reached the merits.

The lesson is not that screenshots are useless. It is that a screenshot without capture metadata and a credible capture process is a bare assertion, and bare assertions draw objections.

What FRE 902(13) and 902(14) changed

Until December 2017, authenticating electronic evidence under Rule 901 usually meant calling a witness at trial: the person who took the screenshot, or a forensic examiner who could vouch for the process. That is expensive, and for a solo practitioner it is often the difference between using a piece of evidence and quietly dropping it.

The 2017 amendments added two categories of self-authenticating electronic evidence to Rule 902:

Rule 902(13) covers “a record generated by an electronic process or system that produces an accurate result, as shown by a certification of a qualified person.” Think system logs, or the output of an automated capture tool.

Rule 902(14) covers “data copied from an electronic device, storage medium, or file, if authenticated by a process of digital identification, as shown by a certification of a qualified person.”

The phrase doing the heavy lifting in 902(14) is process of digital identification. The Advisory Committee notes point directly at cryptographic hash values: a hash is an alphanumeric fingerprint of a file, and when an original and a copy have matching hashes, there is a very high probability the two are identical. The notes also leave room for other reliable identification methods as technology develops.

In practice, these rules let you replace a live authentication witness with a written certification, prepared in advance, that describes the process used and complies with the certification requirements of Rule 902(11) or (12). You still have to give the other side reasonable written notice and make the record and certification available for inspection, so they can challenge the process before trial instead of ambushing you during it.

Two honest caveats. First, self-authentication gets your capture past the authenticity objection; it does not make the content admissible by itself. Hearsay, relevance, and the original-document rules still apply. Second, 902(13) and (14) are federal rules. Many states have adopted parallel provisions, but check your jurisdiction.

What a defensible web capture needs

Working backward from the rules and from cases like Iglesia Ni Cristo, a web capture that can support a 902(13)/(14) certification needs four things:

1. A recorded who, what, when, and where. The URL, the exact date and time of capture, and the identity of the system or person that performed it. This is precisely what the Iglesia Ni Cristo declaration was missing.

2. A cryptographic hash computed at capture time. The file’s fingerprint has to be taken the moment the evidence comes into existence, before anything can touch it. A hash computed weeks later only proves the file has not changed since the hash, not that it matches what was on the web.

3. A neutral, automated capture process. When you personally take the screenshot, you become a potential witness to your own exhibit, and your capture process becomes something opposing counsel can cross-examine you about. A capture made by an automated system, documented by that system, keeps you out of the chain of custody.

4. A way for anyone to verify the record independently. The strongest position is a capture whose integrity the other side can check themselves, without trusting you or your vendor. If verification requires a login to a service that could disappear before the case ends, that is a dependency worth thinking about.

A practical checklist for solo lawyers

Before you capture:

1. Identify the exact URLs that matter. Capture each one separately rather than relying on one page to prove another.
2. Choose a capture method that records URL, timestamp, and process automatically, and that computes a hash at capture. Screenshots from your own phone or laptop should be a last resort, not the plan.

At capture:

3. Capture the full page as it actually rendered, not a cropped fragment. Context defeats “taken out of context.”
4. Save the machine-readable record, not just an image. A capture that preserves the page’s actual content is far harder to attack than pixels alone.

After capture:

5. Store the capture and its hash somewhere durable, where they cannot be altered and will not vanish if a vendor shuts down or a subscription lapses.
6. Prepare the 902(13)/(14) certification early. It must describe the process, be signed by a qualified person, and satisfy the Rule 902(11) certification requirements.
7. Serve reasonable written notice on the other parties and make the record and certification available for inspection. The notice requirement is built into the rule; missing it forfeits the shortcut.
8. Keep a copy of everything, including the verification instructions, in your case file.

Where Permavault fits

Permavault was built around exactly these requirements. Paste a URL and a neutral automated system captures the full page, fingerprints every file with cryptographic hashes at capture, and stores the result on a permanent decentralized network of roughly 300 independent nodes, funded by a long-term storage endowment. The capture is made by the system, not by you, so you stay out of the chain of custody.

Every capture comes with a verifiable record anyone can check without trusting us, and an optional Certificate of Authenticity, from $9, documents the capture process. The Legal tier adds a qualified electronic timestamp from Disig a.s., an EU-listed qualified trust service provider, applied to the signed capture manifest, plus an independent Bitcoin-anchored timestamp and a declaration template designed to support authentication under FRE 902(13) and 902(14). Under eIDAS Article 41, a qualified electronic timestamp carries a presumption of the accuracy of its date and time in EU courts.

It costs $4.99 per capture. The price is on the page. No subscriptions, no sales calls, no annual contracts.

Pages change. Links rot. Vendors shut down. The capture you make today should not depend on any of that, and with the right process, it does not have to.

Frequently asked questions

Are screenshots admissible in court at all? Often, yes. If the opposing party does not challenge them, or a witness with knowledge testifies they accurately depict what the witness saw, screenshots come in routinely under Rule 901. The problem arises when a screenshot is contested and there is no record of who captured it, when, or how. That is the gap that sank the screenshots in Iglesia Ni Cristo v. Cayabyab.

Do I still need a witness if I use FRE 902(13) or 902(14)? Not for authenticity. A written certification from a qualified person, served with reasonable written notice, replaces the live foundation witness. You still need to satisfy hearsay, relevance, and best-evidence rules, and the other side can still attack the weight of the evidence.

What counts as a “process of digital identification” under 902(14)? The Advisory Committee notes point to cryptographic hash values: a fingerprint of the file that, when it matches between original and copy, indicates with very high probability that the two are identical. The notes leave room for other reliable methods as technology evolves. The key is that the hash must be computed at capture, by a documented process.

Is the Wayback Machine enough? Sometimes, and courts have accepted Internet Archive captures with proper certification. But you cannot control what the Wayback Machine crawls or when, more than 340 local news sites now limit its access to their pages, and a page can change or vanish before the crawler ever sees it. For evidence that matters, make your own capture at the moment you find the page.

Does any of this help in EU courts? The FRE 902 framework above is US federal law. For EU matters, Permavault’s Legal tier includes a qualified electronic timestamp from Disig a.s., an EU-listed qualified trust service provider, applied to the signed capture manifest. Under eIDAS Article 41, a qualified electronic timestamp carries a presumption of the accuracy of the date and time it indicates in EU courts. Questions of admissibility and weight remain for the court in either system.

Do state courts follow FRE 902(13) and 902(14)? Many states have adopted parallel rules, but adoption is not universal and details differ. Check your jurisdiction’s rules of evidence before relying on the federal shortcut in state court.

This article is general information about the Federal Rules of Evidence, not legal advice for any specific matter. Admissibility always depends on the facts, the jurisdiction, and the judge.