Support & Resources

How Can We Help?

Guides, answers, and resources for creators and developers

For Everyone

Frequently Asked Questions

Everything you need to know about Humark, biometric signing, and protecting your creative work.

Humark is a biometric content authentication platform. It lets artists and creators prove human authorship by signing their work with FaceID or TouchID. The signature is permanent, cryptographically verifiable, and tied to your biometric identity.

Yes. Humark is free forever for individual artists. You can sign and protect unlimited artwork at no cost. Paid plans (Creator at $9/mo and Pro at $24/mo) add features like priority verification, analytics, and bulk operations.

When you sign artwork with Humark, your phone uses its secure enclave (the same chip that powers FaceID/TouchID) to create a cryptographic signature. Your biometric data never leaves your device. We call this a "Pulse Signature" because it proves a living human was present at the moment of signing.

No. Humark is attribution infrastructure, not an AI detector. AI detection tools try to guess whether content was machine-generated. Humark works the other way: it lets creators prove their work is human-made by signing it with their biometric identity. Think of it as a notary stamp, not a lie detector.

Your Pulse Signature stays with the original registration forever. If someone copies, screenshots, or re-uploads your work, anyone can verify it against the Humark registry. The original registration with your identity and timestamp serves as permanent proof of authorship.

No. The signature is created using your device's secure enclave, which is tamper-proof hardware. Your biometric data is processed on-device using zero-knowledge proofs, meaning even Humark never sees your biometrics. Faking a signature would require physically possessing your device and your face or fingerprint.

C2PA (Coalition for Content Provenance and Authenticity) is an open standard for content credentials, backed by Adobe, Microsoft, and others. Humark is C2PA-compliant, meaning your signatures are interoperable with the broader content authenticity ecosystem. Platforms that support C2PA can automatically recognize Humark-signed content.

Yes. The EU AI Act requires AI-generated content to be labeled. Humark provides the inverse: proof that content was human-created. This helps creators, platforms, and publishers demonstrate compliance with transparency requirements.

A Pulse Signature is Humark's term for a biometric-bound cryptographic signature. It combines three things: your biometric proof (via device secure enclave), a timestamp, and a cryptographic hash of your artwork. Together, they create an unforgeable record that a specific human signed a specific piece of work at a specific moment.

Visit humark.id/pricing, choose a plan, and verify your email. If you registered on the mobile app, use the same email address. Your plan syncs automatically between the app and web.

Getting Started

User Guide

How to sign your first artwork and manage your Humark account.

1

Download the App

Humark is available on iOS. Download it from the App Store and sign in with Apple. Your biometric identity (FaceID or TouchID) becomes your signing key. No passwords needed.

2

Sign Your Artwork

Select a photo, illustration, or any creative file from your camera roll. Preview the details, then confirm with FaceID or TouchID. Humark creates a Pulse Signature: a cryptographic proof that you, a specific human, signed this specific work at this specific moment.

3

Your Work Is Protected

Once signed, your artwork is registered in the Humark registry with a permanent, tamper-proof record. Anyone can verify your authorship by checking the file against the registry. Your signed works appear in your dashboard with verification status and provenance history.

4

Upgrade Your Plan

Humark is free for individual artists. If you need priority verification, analytics, or bulk operations, visit humark.id/pricing to upgrade. Use the same email you signed up with, and your plan syncs automatically to the mobile app.

For Developers

Developer FAQ

Common questions about integrating the Humark API.

SHA-256 of the raw file bytes. Hash the original file before any compression or resizing. The hash must be hex-encoded (64 characters).

It depends on your plan. Starter: 1,000 requests/day. Growth: 10,000 requests/day. Enterprise: 100,000 requests/day. The demo key (hk_demo_pilot_2026) is limited to 100 requests/day.

Contact our team or sign up for a 10-day free pilot. Production keys unlock all authenticated endpoints and higher rate limits.

Yes. You can include C2PA claims and signatures when registering assets. Humark stores and serves C2PA manifests as part of the provenance chain.

The asset hash is not in our registry. This means no creator has registered this file through Humark yet. It does not indicate the content is AI-generated, only that it hasn't been registered.

When you register a webhook URL, we POST a JSON payload to your endpoint whenever a subscribed event occurs. Each request includes an X-Humark-Signature header containing an HMAC-SHA256 signature so you can verify the payload authenticity.

For Developers

API Integration Guide

Follow these steps to go from zero to verifying assets in production.

1

Get Your API Key

For testing, use the demo key below. It gives you read-only access to all public endpoints with a 100 requests/day limit.

Demo Key

hk_demo_pilot_2026

For production access with higher rate limits and write endpoints, sign up for a 10-day pilot or contact our team.

Pass your key in either header:

auth-headers.txt
Authorization: Bearer hk_demo_pilot_2026
# or
X-Humark-API-Key: hk_demo_pilot_2026
2

Verify Your First Asset

First, compute the SHA-256 hash of the file you want to verify. Hash the raw file bytes before any compression or transformation.

hash.js
const crypto = require('crypto');
const fs = require('fs');

const hash = crypto.createHash('sha256')
  .update(fs.readFileSync('artwork.png'))
  .digest('hex');

console.log(hash);
// e.g. "a1b2c3d4e5f6...64 hex characters"

Then call the verify endpoint with the hash:

verify.sh
curl https://api.humark.id/v1/verify/{hash}

Verified asset response:

response-verified.json
{
  "data": {
    "status": "verified",
    "sha256": "a1b2c3d4e5f6...7852b855",
    "creator": {
      "displayName": "Yuki Tanaka",
      "publicKey": "did:key:z6MkhaX..."
    },
    "registeredAt": "2026-03-01T12:00:00Z",
    "shieldVersion": "1.0"
  },
  "meta": {
    "requestId": "req_abc123",
    "timestamp": "2026-03-08T10:30:00Z"
  }
}
3

Register an Asset

Register a human-created asset in the Humark registry. This endpoint requires authentication.

register.sh
curl -X POST https://api.humark.id/v1/register \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "sha256": "a1b2c3d4e5f6...",
    "creatorId": "did:key:z6MkhaXgBZD...",
    "metadata": {
      "title": "Sunset over Kyoto",
      "tags": ["photography", "landscape"]
    },
    "c2pa": {
      "claim": "...signed C2PA claim...",
      "signature": "...C2PA signature..."
    },
    "perceptualHash": "ph_abc123..."
  }'
4

Set Up Webhooks

optional

Receive real-time notifications when events happen in the registry.

create-webhook.sh
curl -X POST https://api.humark.id/v1/webhooks \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-platform.com/webhooks/humark",
    "events": [
      "asset.registered",
      "asset.verified",
      "asset.tamper_detected"
    ]
  }'

Ready to protect your work?

Download the Humark app and sign your first artwork for free. No account setup needed beyond Apple Sign In.

Join the Waitlist

Want to integrate?

Start with a free 10-day pilot. Full API access, dedicated integration support, and no commitment.

Start Free Pilot