undetectable.me

How to remove metadata or ID3 tags from a music file

Clearing the ID3 tags and embedded cover-art data on a track is worth doing, but the audio is unchanged, so the acoustic fingerprint that Shazam and Content ID match still points to the master.

By The undetectable.me team
4 min read
Contents

Clearing the ID3 tags on a music file removes the artist, album, year and any embedded cover-art metadata, which is worth doing, but it does not change a single audio sample, so the acoustic fingerprint that systems like Shazam and YouTube Content ID match against the master recording survives untouched, and a stripped track can still be identified.

What ID3 holds, and the artwork hidden inside it

The ID3 tag on an MP3, the equivalent atoms on an M4A, and the Vorbis comment on a FLAC are where a music file keeps its human-readable fields: title, artist, album, track number, year, genre, encoder, and often a comment or an owner string. All of these are container fields, sitting alongside the audio rather than inside it, and a standard tool clears them in one step. ExifTool removes the whole tag block with a single all-tags directive, and the Python library mutagen reads and deletes ID3 frames directly.

There is one trap specific to music files. Cover art is usually embedded inside the tag itself, in an ID3 APIC frame, and that embedded image can carry its own EXIF: its own camera make, timestamp and sometimes GPS from wherever the artwork was shot or exported. Clearing the text fields while leaving the artwork in place can leave a second metadata block behind, tucked inside the first. A full strip has to clear the whole block, artwork included, not just the visible tags.

The audio is unchanged, so the fingerprint stays

Here is the catch, and it is the one that matters for music. Stripping ID3 tags changes the label on the file. It changes nothing about the recording. The tag is the label; the signal is the evidence.

Acoustic fingerprinting systems match on the evidence. Shazam and YouTube Content ID build a compact fingerprint from the audio itself, the pattern of the recording across time and frequency, and match that fingerprint against a reference database of known masters. Because the fingerprint is computed from the samples and not from the tags, clearing the ID3 block does not move it at all. A track with every tag wiped still fingerprints to the same master and can be matched to it, which is why Content ID keeps flagging re-uploads that carry no identifying tags whatsoever. This is a category error, not a metadata failure: metadata tells a player what to display, while acoustic fingerprinting listens to the recording. If the file is a copy of a known master, stripping its tags does not make it anonymous, it just makes it an untagged copy of a known master.

The device signature rides along too

Beyond the acoustic fingerprint of the track, a recording you made yourself also carries the signature of the gear that captured it. Every microphone colours the sound in an individual way, a frequency response consistent enough to name the device. Buchholz, Kraetzer and Dittmann (IH 2009) classified microphones from their recordings using Fourier coefficients at up to 93.5 percent accuracy across seven microphones, and Hanilci, Ertas, Ertas and Eskidere (IEEE TIFS 2012) reached 92.56 and 96.42 percent identification on 14 cell phones. More recent transformer-based work from Qamhan, Alotaibi and Selouani (Applied Sciences 2023) reports source-microphone identification from 97.6 to 99.98 percent inter-model accuracy. Cleaning the file up does not help: Cuccovillo, Giganti and Bestagini (ACM ICMR 2022) found that denoising a clip yields “an average accuracy increase of about 25%” for microphone classification, so noise reduction sharpens the device signature rather than hiding it. The depth version of these signal-domain traces is in strip ENF and microphone fingerprint from audio.

What stripping ID3 is, and is not, good for

Clearing the tags on a music file is real privacy hygiene. It removes the fields that name you as the uploader or encoder, it clears the timestamp that dates the file, and it closes the embedded-artwork EXIF leak that most people never think about. For keeping your name and your capture details off a file you are about to share, it is exactly the right move.

What it is not is a way to make a track unidentifiable. The acoustic fingerprint points to the master no matter what the tags say, and if you recorded the audio yourself, the device signature is in the samples as well. Both live in the sound, and the sound is what a tag strip leaves alone. This mirrors the general rule for audio in remove metadata from an audio or MP3 file: the container comes off easily, the signal does not. If your aim is to keep a track from matching a known master or a Content ID reference, that is a content-level question, not a metadata one. And if the question is instead whether a track will be flagged as AI-made, that is a detection question, handled at detectai.

Sources

  • Buchholz, Kraetzer, Dittmann (2009). Microphone Classification Using Fourier Coefficients. IH 2009.
  • Hanilci, Ertas, Ertas, Eskidere (2012). Recognition of Brand and Models of Cell-Phones From Recorded Speech Signals. IEEE TIFS.
  • Qamhan, Alotaibi, Selouani (2023). Source Microphone Identification Using Swin Transformer. Applied Sciences.
  • Cuccovillo, Giganti, Bestagini (2022). Spectral Denoising for Microphone Classification. ACM ICMR 2022.
#metadata#id3#music#anonymising#privacy
Last updated
3 July 2026
Category
Anonymising