Five ways to prove a file existed on a date. Which should you use?
If you just need to show that a file existed by a certain date, a hash timestamp is the cheapest thing that holds up: OpenTimestamps on your own, or a registry that does it for you. If you're in the US and this is a work you'd actually go to court over, registering it with the Copyright Office does things no private method can. Emailing the file to yourself is the one to drop. The US Copyright Office says outright that it isn't a substitute for registration.
All five methods answer the same narrow question: did this exact file exist no later than this date? None of them decides who made it or who owns it. They differ in cost, speed, how many files you can realistically cover, and who can check the result without asking you. The table below sums it up. The sections after it explain each row, with links to each method's own documentation.
The five methods side by side
| Method | Cost | Time to a usable result | Who can check it | What it adds beyond "existed by" |
|---|---|---|---|---|
| Email it to yourself | Free | Instant | Only through your mailbox | Nothing the law recognises |
| Notary (Taiwan example) | Statutory fee, from NT$1,000 a deed; certification at half | One visit per document | Anyone shown the notarial document | A public officer's record of the act they witnessed |
| US copyright registration | $45 / $65 online / $125 paper | Average 3.4 months for clean online claims | Public catalogue | Legal effects: needed to sue over a US work, possible statutory damages, prima facie evidence |
| OpenTimestamps | Free | A few hours for Bitcoin confirmation | Anyone with the file and the .ots proof | Nothing beyond the hash |
| A registry (OpenStela) | Free to register, within storage and daily limits | Fingerprint at once, anchored that night | Anyone, through a public page or offline from the Proof Pack | Your attribution, contribution, tools and rights declaration, timestamped with the file |
Fees and times checked 2026-10-08. Sources are linked in each section below.
1. Emailing the file to yourself
This is the habit people call "poor man's copyright": mail yourself the file, or post it to yourself in a sealed envelope, and keep the dated copy. The US Copyright Office's general FAQ answers it directly: "There is no provision in the copyright law regarding any such type of protection, and it is not a substitute for registration."
The technical problem is simple. The evidence sits in an account you control. You'd be asking someone to trust both the mail provider's records and you. It costs nothing and it's better than having nothing at all, but don't build on it. If it's already your habit, keep doing it as a backup and add one of the methods below.
2. A notary
A notary is a public officer, and their record is strong evidence of whatever they actually witnessed. What they witness is the catch. In Taiwan, Article 101 of the Notary Act (last amended 2019-04-03) says that when a notary certifies a private document, the signer signs it in front of the notary or confirms the signature as theirs. That's an act about the signature. A notary doesn't judge whether your drawing is original. What a notarised file-and-hash statement gives you is a public officer's dated record that this document, naming this hash, was presented by you on that day.
Cost is set by statute in Taiwan. A deed whose value can't be calculated is NT$1,000 (Art. 112), certifying a document costs half of the corresponding deed fee (Art. 120), and work outside office hours adds half (Art. 122). Notary rules and fees differ by country. If you're elsewhere, ask a local notary what their certificate actually covers.
The real cost is the visit. You do it once per document, so people notarise a finished album or a signed contract, not every draft.
3. Government copyright registration
Where it exists, this is the only option on the list with legal effects built into the statute. In the US the Copyright Office FAQ says registration is voluntary, because copyright exists from creation, but "you will have to register, however, if you wish to bring a lawsuit for infringement of a U.S. work." Registered works "may be eligible for statutory damages and attorney's fees," and registration within five years of publication is "prima facie evidence in a court of law."
What it costs, from the Office's fee schedule: $45 for a single author filing one work online, $65 for the Standard Application, $125 on paper. How long it takes, from the Registration Processing Times sheet covering cases closed 2026-04-01 to 2026-09-30: online claims with a digital upload and no back-and-forth averaged 3.4 months. Claims that needed correspondence averaged 5.3 months.
Two things to know if you work with AI. The Office's registration guidance of 2023-03-16 (88 Fed. Reg. 16,190) asks you to disclose AI-generated material in the application. That means the registration covers your human contribution, not the generated parts. Can AI art be copyrighted? goes through that in detail. And the fee is per filing, so it doesn't scale to fifty drafts a week.
Not every country has this. Taiwan doesn't. The Intellectual Property Office's copyright Q&A collection (October 2021) explains that under Article 10 of the Copyright Act, protection starts when the work is finished, with no registration at any agency. It adds that because copyright is a private right, you carry the burden of proving it, so keep drafts, backups, edit histories and discussions. That's exactly the gap the other four methods fill.
4. OpenTimestamps
OpenTimestamps is a free, open standard for blockchain timestamping. You hash the file (in the browser, so the file isn't uploaded) and public calendar servers batch the hash into Bitcoin. You keep a small .ots proof file next to the original. The servers are donation-funded and need no account or API key.
Per the client's README, it "takes a few hours" for the timestamp to be confirmed in Bitcoin. Until then the proof is incomplete, and you "upgrade" it to add the path into the chain. Verifying with the command-line client needs a local Bitcoin Core node (a pruned one is fine). The website also has an in-browser verifier.
It's honest about its scope: "A timestamp proves that some data existed prior to some point in time." That's all it says. The proof doesn't record what the file is, what you called it, or what you claim about it. If you lose either the original file or the .ots file, you can't verify anything. For a bare date on a hash, it's a very good answer, and you don't need anybody's service for it.
5. A registry like OpenStela
A registry does what OpenTimestamps does, plus it writes down what the hash is about. When you register a work, OpenStela builds an authorship record first: the file's SHA-256 fingerprint, the name you publish under, your stated creation date, the AI tools you used, your own description of what you contributed (required when AI was involved), and a rights declaration. That record is hashed and goes into a Merkle tree with that night's other records. The tree's 32-byte root is written to Arbitrum One. The file itself never goes on chain.
What you get on top of a bare timestamp: a public page others can read, a fingerprint anyone can paste into the verify page, and a Proof Pack you can download. The Proof Pack holds the record, its Merkle proof and the chain transaction, so the check can be redone offline without trusting us. How a registered work is verified walks through that recomputation. The record itself is frozen once written. You can only change the title, a note and whether it's public.
Cost: registering works is free, within 300 MB of uploaded files per account (links take almost none) and a daily cap on how many works one account can register. Characters are free up to 50 per account. See pricing. The limits are real. The record is only as good as the file you keep, and the contribution text is your own statement, which we don't check.
Which one to use, and when
Most creators end up combining them. Here's a reasonable default:
- Every draft and every release: a hash timestamp. Use OpenTimestamps if you only want the date, or a registry if you also want your attribution and contribution on the record and a page you can link to.
- Finished work you'd sue over, in the US: register it with the Copyright Office as well. Nothing private gets you the legal effects quoted above.
- A contract, or a one-off document someone else must accept: a notary, if the other side or a court in your country expects one.
- Emailing yourself: keep it as a habit if you like, but don't count it as one of your methods.
Whatever you choose, keep the original file byte-for-byte unchanged. Every hash method vouches for a fingerprint, and none of them can vouch for a file you edited or lost. Write down how you made it at the time, too. The older post How do I prove a file existed on a certain date? explains why that note is worth as much as the date. What does an ID actually prove? sets out the line between evidence and ownership.
This is general information, not legal advice.
要證明檔案在某一天就存在,五種方法哪個好?
如果你只是要證明「這個檔案最晚在某一天就已經存在」,最便宜又站得住的是雜湊時間戳:自己用 OpenTimestamps,或交給登錄平台代勞。如果作品會在美國市場流通、而且是真的會為它打官司的那種,再去美國著作權局登記;那是任何民間做法都給不了的法律效果。至於把檔案寄給自己,可以直接放棄。美國著作權局白紙黑字寫著,它不能代替登記。
先講清楚一件事:這五種方法回答的都是同一個很窄的問題,也就是「這一份一模一樣的檔案,最晚在這天以前就存在了嗎?」。沒有一種方法能判定作品是誰做的、歸誰所有。它們的差別在於花多少錢、等多久、實際上能涵蓋多少檔案,以及別人能不能不透過你就自己查驗。下面先用一張表整理,後面逐項說明,連結都指回各方法自己的官方說明。
五種方法並排比較
| 方法 | 費用 | 多久拿到可用的結果 | 誰能查驗 | 除了「某天已存在」還多了什麼 |
|---|---|---|---|---|
| 寄 email 給自己 | 免費 | 立即 | 只能透過你的信箱 | 法律上沒有承認任何效果 |
| 公證人(以台灣為例) | 法定費用,公證書起價新台幣 1,000 元,認證減半 | 每份文件跑一趟 | 任何看到公、認證文書的人 | 公證人對其親自見證事項的紀錄 |
| 美國著作權登記 | 線上 45/65 美元,紙本 125 美元 | 線上、免往返補件的案件平均 3.4 個月 | 公開目錄 | 法律效果:美國作品起訴前要先登記、可能適用法定賠償、初步證據 |
| OpenTimestamps | 免費 | 比特幣確認約需數小時 | 任何持有原檔與 .ots 證明檔的人 | 除了雜湊本身,沒有其他資訊 |
| 登錄平台(OpenStela) | 登記免費(有空間與每日件數限制) | 指紋立即產生、當晚上鏈 | 任何人:公開頁,或用 Proof Pack 離線重算 | 你的署名、貢獻說明、使用工具、權利聲明,和檔案一起蓋上時間 |
費用與時程查證日:2026-10-08。來源附在下面各段。
一、把檔案寄給自己
這就是俗稱的「窮人的著作權」:把檔案 email 給自己,或用掛號把一份副本寄給自己、不拆封保存,靠信件上的日期來證明。美國著作權局的一般問答講得很直接:著作權法中沒有任何關於這種保護方式的規定,它也不能取代登記。
技術上的問題也很單純:證據放在你自己掌控的帳號裡,等於要別人同時相信郵件服務商的紀錄、也相信你沒動過手腳。它不花錢,有總比沒有好,但不要把它當主要依靠。如果你本來就有這個習慣,可以繼續當備份,再搭配下面任何一種方法。
二、找公證人
公證人是依法執行職務的人,他親自見證的事項,紀錄效力很強。關鍵在於「他見證了什麼」。依公證法(最新修正日期 2019-04-03,民國 108 年 4 月 3 日)第 101 條,公證人認證私文書時,要讓當事人當面在文書上簽名,或承認那是自己的簽名。也就是說,認證處理的是「簽名」這個行為;公證人不會替你判斷這張圖是不是原創。你拿一份載明檔案雜湊的聲明書去認證,得到的是:某位公證人記錄了你在某天提出這份載有該雜湊的文件。
費用由公證法直接規定:標的價額不能算定的公證事件收新台幣 1,000 元(第 112 條);文書認證依作成公證書的費用減半收取(第 120 條);在夜間、例假日等非上班時間辦理,加收二分之一(第 122 條)。法院公證處與民間公證人都適用同一套收費標準。其他國家的制度與費用各不相同,如果你在國外,直接問當地公證人他的證書到底證明什麼。
真正的成本是跑一趟。每份文件都要親自去,所以一般人只會拿完成的專輯母帶、簽好的合約去公證,不會每張草稿都去。
三、政府著作權登記
在有這種制度的國家,這是五種方法裡唯一由法律直接賦予效果的一種。先講台灣:台灣沒有著作權登記制度。經濟部智慧財產局的《民眾經常諮詢著作權案例 Q&A》(110 年 10 月,即 2021 年 10 月出版)第一題就說明:依著作權法第 10 條,我國採「創作保護主義」,著作人在著作完成時就享有著作權,不需要向任何機關申請登記或註冊。同一題也提醒,著作權是私權,權利人要自己負舉證責任,所以建議保留草稿、備份、增刪紀錄、討論紀錄等資料,作為日後發生爭議時的依據。另外它也提到著作權法第 13 條:在原件或發行的重製物上,或公開發表時,以通常方法表示本名或眾所周知的別名,就推定為著作人。
所以在台灣,「留證據」這件事本來就落在創作者自己身上,正好是其他四種方法要補的缺口。
再講美國。很多台灣創作者的作品賣到海外、在美國平台上架,這時美國的規則就有關係了。美國著作權局一般問答寫道:登記原則上是自願的,因為著作權在創作完成時就存在;但如果要就美國著作提起侵權訴訟,就必須先登記。已登記的作品在勝訴時可能適用法定賠償與律師費;在發行後五年內完成登記,在法庭上構成初步證據(prima facie evidence)。
費用依著作權局收費表:單一作者、單一作品的線上申請 45 美元,標準線上申請 65 美元,紙本申請 125 美元。時程依著作權局的登記處理時間表(統計 2026-04-01 至 2026-09-30 結案的案件):線上申請並上傳數位檔、不需往返補件的案件平均 3.4 個月;需要往返補件的平均 5.3 個月。
用 AI 創作的人還要注意兩件事。第一,著作權局 2023-03-16 發布的登記指引(88 Fed. Reg. 16,190)要求在申請時揭露 AI 生成的內容,所以登記涵蓋的是你自己的貢獻,不是生成出來的部分;細節見〈AI 生成的圖有著作權嗎?〉。第二,規費按件計,一週做五十張草稿的人不可能每張都登。
四、OpenTimestamps
OpenTimestamps 是免費、開放的區塊鏈時間戳標準。你在瀏覽器裡算出檔案的雜湊(檔案本身不會上傳),公開的「日曆伺服器」把雜湊批次寫進比特幣鏈,你拿到一個小小的 .ots 證明檔,跟原檔放在一起保存。日曆伺服器靠捐款營運,不需要註冊帳號,也不需要 API 金鑰。
依官方客戶端的說明文件,時間戳要「幾個小時」才會被比特幣鏈確認;在那之前證明檔是不完整的,之後要做一次「upgrade」,把通往區塊的路徑補進證明檔。用命令列客戶端查驗時需要本機跑一個 Bitcoin Core 節點(修剪過的節點也可以);官網另外有瀏覽器版的查驗工具。
它對自己能做什麼講得很老實:「時間戳證明某些資料在某個時間點之前就已存在。」就這樣而已。證明檔裡不記錄這是什麼檔案、你叫它什麼名字、你對它主張了什麼。原檔或 .ots 檔只要掉了一個,就什麼都查不了。如果你要的只是替一個雜湊蓋上日期,這是很好的答案,而且不必用任何人的服務。
五、登錄平台(以 OpenStela 為例)
登錄平台做的事包含 OpenTimestamps 那一段,再多記下「這個雜湊是關於什麼」。你在作品頁登記一件作品時,OpenStela 會先組一張著作紀錄:檔案的 SHA-256 指紋、你公開發表用的名義(筆名也可以)、你聲明的創作日期、用了哪些 AI 工具、你自己寫的貢獻說明(用了 AI 就必填),以及權利聲明。這張紀錄算出雜湊後,和當晚其他紀錄疊成一棵 Merkle 樹,只有樹根那 32 bytes 寫上 Arbitrum One。檔案本身從頭到尾不上鏈。
比起單純的時間戳,你多拿到:一個別人看得懂的公開頁;一組任何人都能貼到查驗頁查的指紋;一份可下載的 Proof Pack,裡面有紀錄本體、Merkle 證明路徑和鏈上交易,可以完全離線、不必信任我們就重算一遍。重算的步驟見〈一件登記過的作品怎麼被查驗〉。紀錄一旦寫入就凍結,之後能改的只有標題、備註和是否公開。
費用:登記作品免費,但每個帳號的上傳空間是 300 MB(連結型作品幾乎不佔空間),而且每個帳號每天能登記的件數有上限;角色每個帳號 50 隻以內免費。詳見價格。限制也要講清楚:紀錄的價值取決於你手上還留著那份原檔;貢獻說明是你自己的聲明,平台不審查內容。
該用哪一種、什麼時候用
多數創作者最後是組合著用。以下是一個合理的預設:
- 每一版草稿、每一次發表:雜湊時間戳。只要日期就用 OpenTimestamps;想把署名和貢獻說明也記進去、還要一個能分享的頁面,就用登錄平台。
- 在美國流通、真的會為它打官司的完成作品:另外去美國著作權局登記。上面引的那些法律效果,民間方法都給不了。
- 合約,或對方、法院要求的單份文件:找公證人。
- 寄給自己:想保留這個習慣可以,但不要把它算成一種方法。
不論選哪一種,原檔都要一個位元組都不改地保存下來。所有雜湊類的方法擔保的都是指紋,沒有一種能替你改過或弄丟的檔案作證。另外,當下就把「怎麼做出來的」寫下來;為什麼這段紀錄跟日期一樣重要,見舊文〈怎麼證明一個檔案在某一天就已經存在?〉。存證與權利之間的界線,〈一組編號到底證明什麼〉有完整說明。
本文為一般資訊,不是個案法律意見。
Questions常見問題
Does any of these prove I'm the author?這五種方法,有哪一種能證明我是作者嗎?
No. Each one shows that a file existed by a date. US registration comes with legal presumptions, but it covers the human-authored parts you claim and can still be challenged. A registry record shows what you claimed and when, which is evidence if a dispute comes up. It isn't proof that the claim is true.
不能。每一種都只能說明某個檔案在某天之前已經存在。美國登記附帶法律上的推定,但只涵蓋你主張的人類創作部分,而且仍可被推翻。登錄平台的紀錄說明你在什麼時候主張了什麼,發生爭議時多一個可查驗的證據,但不代表主張的內容一定為真。
Is OpenTimestamps enough on its own?只用 OpenTimestamps 夠嗎?
For a date on a hash, yes. It's free and anyone can check it. What it leaves out is context: the proof doesn't record the work's name, your name or what you contributed. Keep the .ots file and the original file together.
如果你只要替雜湊蓋日期,夠。它免費,任何人都能查。它沒有的是脈絡:證明檔不記錄作品名稱、你的名字或你做了什麼。記得把 .ots 檔和原檔放在一起保存。
I'm in Taiwan. Where do I register copyright?我在台灣,要去哪裡登記著作權?
Nowhere. Taiwan doesn't have a copyright registration system. Protection starts when the work is finished. The Intellectual Property Office's advice is to keep evidence of how you made the work, because the burden of proof is yours.
哪裡都不用。台灣沒有著作權登記制度,著作完成時就受保護。智慧財產局的建議是保留創作過程的資料,因為舉證責任在你身上。
Why not just put the file on a blockchain?為什麼不乾脆把檔案整個放上區塊鏈?
Because you don't need to. Every method here works from the file's fingerprint. Putting a 32-byte root on chain is enough to fix the date, and the file stays with you, private unless you choose to show it.
因為沒必要。這裡每一種方法都是從檔案的指紋出發。把 32 bytes 的樹根寫上鏈就足以固定日期,檔案留在你手上,你沒決定公開就不會被人看到。