You have a text, a photo, or a chat that proves your point. The question is whether a court will accept it. That is a different bar than “is it true” — it is whether the evidence can be authenticated (shown to be what you say it is) and cleared of other objections. The good news: most of what decides that is in your hands, and the steps are concrete. This checklist walks them in order.
Read this first:this is educational, not legal advice, and it is not a guarantee. Whether any specific item is admitted is a judge’s decision, made case by case on the facts. What follows is how to make your evidence strongerand harder to challenge — talk to a lawyer about your actual case.
The eight-step checklist
Work these in order, starting the moment you realize a message or file might matter. The earlier you get them right, the harder your evidence is to attack later.
- Preserve the original — and never delete it. Keep the source device and the source account intact. Deleting a message after you capture it can look like spoliation and can hurt you more than the message ever helped.
- Capture the source, not a screenshot of it. Export the message or file, or back up the device — a screenshot is a metadata-stripped picture of a screen and a weak, easily challenged form of digital evidence. See screenshots versus forensic evidence.
- Preserve the metadata. Timestamps, phone numbers, account identifiers, and message IDs are what let a record be authenticated. Keep the export or backup that carries them; do not flatten it into an image.
- Record the chain of custody. Write down where the evidence came from, who has handled it, and when. A simple, honest custody log is worth more than it looks.
- Hash it.A cryptographic hash is a digital fingerprint that proves a file has not changed since collection. Rule 902(14) lets data copied from a device be self-authenticated by “a process of digital identification” — a hash is the standard way to show it.
- Get the provider’s records where it matters. Carrier and platform records can come in as certified business records under Rule 902(11), independent of your own copy — a strong corroboration path when the other side disputes your phone.
- Match each item to how it gets authenticated. Use the decision tree below to know whether a given item rides on a witness (901), distinctive characteristics (901), or a self-authenticating certificate (902).
- Consider a forensic examiner for anything contested. For a disputed device, deleted-data recovery, or a certificate under 902(14), a credentialed examiner collects and documents the evidence so it holds up. See how evidence becomes a court exhibit.
Authentication: 901 vs. 902(14), a quick decision tree
“Authentication” just means clearing a low bar: producing enough evidence to support a finding that the item is what you claim. The judge screens that threshold question under Rule 104(b); if a reasonable jury could find the item genuine, the jury ultimately weighs it. Which path you use depends on the item:
- A person can testify to it → Rule 901(b)(1). Someone with knowledge (you, or a participant in the conversation) testifies the message is what it appears to be. The everyday path for your own texts and photos.
- It carries distinctive characteristics → Rule 901(b)(4). Contents, style, phone number, or other markings tie the message to its author even without a certificate.
- It was copied from a device by a documented process → Rule 902(14).Data identified by “a process of digital identification” (typically a hash) and certified by a qualified person is self-authenticating — no live witness needed to get it in.
- It is a carrier or platform record → Rule 902(11). Certified business records come in on the certificate, again without a live custodian in the room.
Two precision points worth knowing, because weaker guides blur them. First, Rules 902(13) and 902(14) solve authentication only — they do not clear hearsay. Second, for electronically stored information an accurate output is an “original” under Rule 1001(d), and a “duplicate” is defined in Rule 1001(e); best-evidence fights over ESI are rare, and the real contest is authentication.
Authentic is not the same as admissible: the hearsay note
A message can be perfectly authentic and still be kept out as hearsay — an out-of-court statement offered for its truth. The most common answer in these cases is that a damaging text from the opposing party is a statement by a party-opponent, which Rule 801(d)(2) defines as not hearsay at all. But hearsay has many exceptions and traps, and this is exactly the analysis to hand to a lawyer rather than resolve from a web page. Preserve the evidence correctly first; let counsel argue the hearsay.
Spoliation red flags — the mistakes that sink good evidence
Courts punish the destruction or alteration of evidence, sometimes severely. Watch for these:
- Deleting the offending message after screenshotting it. The screenshot is weak and the deletion looks like spoliation — the worst of both.
- Continuing to use, reset, or “clean up” the source device. Ordinary use overwrites data and undercuts the claim that nothing changed.
- Editing, cropping, or annotating the only copy. Alter a working copy if you must; never the preserved original.
- Letting records age out. Carriers and platforms keep data only so long — a preservation request or legal hold, sent early, is what stops the clock.
Where this fits
If you are still gathering material, start with private digital forensics for individuals. When a matter is contested and you want the collection, hashing, and certification done so it survives challenge, that is what a court-ready exhibit workflow delivers. Attorneys working a specific rule can go deeper in our guide to authenticating text messages under FRE 901 and 902.
