Blog Details

Introduction

A single social media post can be at the heart of a case. A Facebook status, an Instagram story, an X (Twitter) thread or a YouTube video routinely turns up in defamation, harassment and intellectual property matters — the post itself is often the alleged wrong, or the proof of one. The trouble is that the very thing that makes social media powerful also makes it fragile: a post can be quietly edited or deleted in seconds, and once it is gone it can be very hard to recover. This guide walks through, step by step, how to certify social media posts as evidence in India the right way — by preserving the post immediately, recording its source, hashing what you captured and producing a proper electronic-evidence certificate with e-Dex (formerly Hash Calculator).

Why Social Media Evidence Is Fragile

Unlike a signed letter, a social media post lives on someone else's server and is fully under the control of the account holder and the platform. The author can edit the wording, delete the post, set it to disappear, switch the account to private, or simply deactivate it — and the platform can remove it on its own. A post you can see today may be gone tomorrow, taking your evidence with it. On top of that, a casual screenshot of a post proves almost nothing about where it came from: nothing in the image fixes the URL, the account or the time, and a screenshot can be cropped, edited or fabricated outright. Because these posts are electronic records, Indian courts generally expect them to be supported by a certificate, not simply shown on a screen. The fix is to capture the original quickly and certify it, which is what the steps below do.

Step 1 — Preserve the Post Immediately

Speed matters most here. The moment you become aware of a relevant post, capture the original before the author can change or remove it. The simplest reliable method is to open the post in a browser and save the page as a PDF or MHTML file, which preserves the layout and the visible content as a file you can keep. Use the full single-post view where possible so the URL, the handle and the timestamp are all on the page. For higher-stakes matters, a forensic web capture (a tool that records the page along with its source and server responses) or the platform's own data export — Facebook's “Download Your Information”, Instagram's data download, X's archive, or YouTube's Takeout — gives stronger provenance than a plain save, because it comes from the platform itself. Whatever method you use, remember that e-Dex does not capture the post for you. You (or an examiner) collect and export the evidence, and e-Dex then hashes and certifies the resulting files.

Step 2 — Record the URL, Account and Capture Details

A capture is only as useful as the facts pinned to it, so write down the particulars while they are fresh. Record the full URL of the post (the exact link to the single post, not just the profile), the account name or handle that published it, and the post date and time as shown. Note who captured it, on what device, and when — the date and time of your own capture — along with the method you used (browser save, forensic capture, or platform export). These details turn an anonymous PDF into an exhibit tied to a real post, a real account and a real moment, which are exactly the questions a court will ask about social media evidence.

Step 3 — Hash the Captured Files

Now fingerprint the exact bytes. In e-Dex, add the captured file — the saved PDF or MHTML, the exported archive, and any downloaded images or video — and compute a cryptographic hash (SHA-256, and other algorithms such as SHA-512, MD5 or BLAKE3 if you wish) over each one. A hash is a fixed-length digital fingerprint: recompute it later and, if it matches, the file is bit-for-bit identical to what you captured; change a single pixel or character and the hash changes completely. This is what lets anyone — the court, the opposing party, your own expert — confirm the captured post has not been edited since it was certified, without taking your word for it.

Step 4 — Generate the Certificate

With the files hashed, generate the certificate itself. e-Dex produces a Section 63 BSA / Section 65B electronic-evidence certificate that records the source — the URL, the account and the capture method — together with the integrity hashes, with an explicit MATCH verification against each exhibit. The output follows the familiar Part A / Part B Schedule form — Part A describing the electronic record and how it was produced, Part B listing the device, the source and the hash values — so it reads the way a court expects. If you want to see the structure first, this Section 65B certificate format with an example is a useful reference, and the approach is the same one used to certify a screenshot as evidence in India.

Step 5 — Sign and Timestamp

Finally, make the certificate tamper-evident. e-Dex can apply a PAdES digital signature using a Digital Signature Certificate (DSC) on a USB token, binding the signer's identity to the document so any later edit is detectable. It can also attach an RFC-3161 trusted timestamp from a Time-Stamping Authority, providing independent proof that the certificate existed in that exact form at that moment — which matters when the underlying post may later be deleted. Both steps run from your own Windows machine; only the timestamp touches the internet, and everything else stays fully offline.

Common Pitfalls

A few mistakes account for most weak social media evidence. Acting too slowly is the biggest: if the post is deleted or edited before you capture it, there may be nothing left to certify, so preserve first and analyse later. Not recording the URL and account leaves you with a file the court cannot tie to any real post, so always capture the exact link, the handle and the timestamp. Relying on a bare screenshot instead of a full-page capture leaves you with secondary evidence that is easy to attack as cropped or fabricated. And losing the capture details — who captured it, on what device, and when — breaks the chain of custody. The five steps above are designed to avoid each of these.

A Note on Legal Advice

e-Dex helps you produce a well-structured, integrity-backed certificate; it is a tool, not legal advice and not a substitute for counsel. Who must depose to the certificate, how the post was lawfully obtained, and exactly how the certificate is tendered all depend on the facts of your matter and on the text of the provision and the Schedule as it stands. As a matter of general background, the Bharatiya Sakshya Adhiniyam 2023 replaced the Indian Evidence Act 1872 and came into force on 1 July 2024, with Section 63 BSA succeeding Section 65B IEA; the Supreme Court in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) held that a Section 65B(4) certificate is a mandatory pre-requisite for admitting secondary electronic evidence, while recognising relief where a party genuinely cannot obtain it because the device is in someone else's possession. This is general information only, the law evolves (it is now under the BSA), and you must verify the current position and take advice where the stakes warrant it. For a broader walkthrough of the rules, this guide to electronic-evidence certificates in India is a good starting point. e-Dex does not guarantee that any record will be admitted, because that is for the court to decide.

Frequently Asked Questions

Are social media posts admissible as evidence in India?
Social media posts are electronic records, so under Section 63 of the Bharatiya Sakshya Adhiniyam 2023 (the successor to Section 65B of the Indian Evidence Act) they generally need a certificate to be admitted as secondary evidence. They are not automatically admissible just because they appear online. e-Dex helps you produce a structured certificate recording the source and integrity hashes, but admissibility is decided by the court on the facts.

How do I preserve a social media post before it is deleted?
Act fast, because posts can be edited or deleted at any time. Capture the original by saving the page as a PDF or MHTML, and record the full URL, the account or handle, and the post date and time. For higher-stakes matters, a forensic web capture or the platform's own data export gives stronger provenance than a plain save.

Do I need a Section 65B certificate for a Facebook or Instagram post?
Generally yes. A Facebook or Instagram post is an electronic record, so to admit it as secondary evidence Indian courts usually expect a certificate under Section 63 of the Bharatiya Sakshya Adhiniyam 2023 (the successor to Section 65B). e-Dex helps you generate that certificate recording the URL, the account and the integrity hashes of your captured files.

Is a screenshot of a social media post enough?
Usually not on its own. A screenshot can be cropped, edited or fabricated, and it carries no proof of the source URL, the account or that it has not been altered. A stronger approach is to capture the full page, record the URL and account, hash the captured files and certify them so anyone can verify the exact bytes later.

Who can certify social media evidence?
The certificate is typically given by the person who captured and preserved the post or who is responsible for the device or process used, and who can speak to how it was produced. For higher-stakes matters a qualified forensic examiner may capture and depose to it. e-Dex helps that person produce the certificate; who must sign in your matter is a question for counsel.

Conclusion

A social media post can make or break a case — but only if it still exists when you need it and you can show the court where it came from. Capture the post immediately, record the URL and account, hash the files and wrap them in a signed, timestamped Section 63 certificate, and you give the court something it can actually verify even after the original is gone. Collect and export the post yourself or through a forensic examiner, then let e-Dex — the Digital Evidence Integrity Suite hash the exhibits, capture the details and generate a court-ready certificate on your own Windows machine, fully offline and free to try.