Archive a Website for Legal Evidence: A DIY Workflow

To archive a website for legal evidence, use several methods together, because no single one is enough on its own. Take screenshots that show the URL and the time. Save a full offline copy of the relevant pages. Calculate a SHA-256 hash of that copy so you can show it was not changed. Ask an independent third party, such as the Wayback Machine, to capture the page too. Record every step in an evidence log. This guide shows how to do each step yourself, when one page is enough and when you need the whole site, and what none of these methods can capture.

This article explains general principles, not legal advice. Rules on evidence differ between countries and between types of proceedings. If a lot depends on the outcome, talk to a lawyer before you rely on a do-it-yourself capture.

Is a screenshot enough as evidence?

Sometimes a screenshot is accepted, especially in small disputes where the other side does not contest it. It is still the weakest form of web evidence, because it is easy to attack. An opposing party or a skeptical judge will usually ask four questions:

• Date: When was this taken? The clock in the corner of a screenshot can be changed, and file dates change when a file is copied.
• Source: Was this really the URL you claim? A cropped image often hides the address bar.
• Completeness: What was above, below or behind a link? A screenshot shows one viewport and leaves out the terms, footnotes and linked pages that give it context.
• Tampering: Anyone can edit an image or change text in the browser's developer tools before taking the screenshot.

In the US, these questions fall under authentication rules such as Federal Rule of Evidence 901. Many other systems, including Germany's, let courts weigh evidence freely, so there is no fixed checklist. Either way, the practical question is the same: can you show convincingly that what you present is what the website displayed at that time? Using several independent methods together answers that much better than a single image. The same principles apply if you are searching in German for Website als Beweis sichern.

Three ways to archive a website for legal evidence, compared

The methods cover each other's gaps. A screenshot shows what a visitor saw. The offline copy keeps the full text and context. The third-party capture is an independent record that you did not produce yourself.

One page or the whole site?

Many disputes depend on context, not on a single sentence. Ask yourself what the other side could say is missing. Common cases:

• Price or advertising claims: the product page, plus the linked terms and conditions, shipping and cancellation pages, and any footnote pages the price refers to.
• Contract terms: the terms as they stood on a specific date, plus the order page that linked to them.
• Copied content or copyright infringement: every page that uses your text or images, often spread across a blog, a shop and category pages.
• Identifying the operator: the imprint, about page, privacy policy and contact page, which show who runs the site.
• Defamatory or misleading statements: the article plus the comments, author page and related posts, if they still load without a login.

When in doubt, capture more than you think you need. A page you did not save may be gone next week. A single-page capture is fine for one isolated statement. Once your argument depends on how pages link to each other, save the relevant section or the whole site.

Step-by-step: how to preserve website evidence yourself

1. Prepare

Use a clean browser profile or a private window. That way your own logins, cookies and personalized content do not appear in the capture. Check that your computer's clock is set automatically. Create one folder for the case and leave the original files in it untouched from now on.

2. Screenshots and a screen recording

Take full-page screenshots of each key page, making sure the address bar is visible. Better still, make a short screen recording: open the URL, scroll slowly through the page, click through to the linked terms, and show the system clock. A video is harder to fake than a single image, and it shows how the pages connect.

3. A full offline copy as a ZIP

Enter the start address on the Website Downloader home page. The service downloads the subpages with their images, stylesheets, scripts and fonts and delivers one ZIP file that opens in any browser. It runs in the browser, so there is nothing to install, and you can watch the progress live. The free plan covers up to 100 subpages, which is often enough for a shop section or a set of legal pages. For larger sites, see the pricing page. Download the ZIP to your own storage immediately: free archives are kept for only one day on the server. For more detail, see the guide to downloading a website as a ZIP.

4. Hash every file with SHA-256

A SHA-256 hash is a fingerprint of a file. Change one byte and the fingerprint changes completely. If you record the hash now, you can later show that the ZIP, screenshots and video are the same files you made on the capture date. Run the command for your system on each file:

• Windows: certutil -hashfile evidence.zip SHA256 or, in PowerShell, Get-FileHash evidence.zip -Algorithm SHA256
• macOS: shasum -a 256 evidence.zip
• Linux: sha256sum evidence.zip

A hash on its own does not prove when you made the file. To fix the date, send the list of hashes to someone independent on the same day, for example your lawyer by email. You can also use a trusted timestamping service. In the EU, qualified electronic timestamps under the eIDAS regulation have special legal standing.

5. A third-party capture with Save Page Now

Submit each key URL to the Internet Archive's Save Page Now form at web.archive.org. Note the capture URL it returns, which contains the timestamp, and take a screenshot of the result. This record exists independently of you. Keep in mind that it is public, and that the site owner can ask for captures to be excluded later. That is why your own copy still matters. archive.today is a similar independent service you can use as a second source.

6. Keep an evidence log

A simple table or text file is enough. For every capture, record:

• the URL and what the page shows
• the date, time and time zone
• who made the capture, on which device and with which browser and tool
• the file name and its SHA-256 hash
• the Wayback or archive.today capture URL
• any limitations, such as comments section requires login, not captured
• any witness who watched the capture

Then copy the whole case folder to a second location and do all your work on the copies.

What no method captures

Be clear about the limits, because the other side will point them out:

• Pages behind a login, including most social media feeds, customer accounts and members' areas. Neither Website Downloader nor the Wayback Machine can access them.
• Content built entirely with JavaScript. Some single-page apps built with React, Vue or Angular produce an offline copy that contains the page shell but not the text.
• Server features such as search, forms, shopping carts and live comments. They do not work in any offline copy.
• Sites that block automated downloads. Some return a 403 error. Website Downloader reports this instead of producing an empty archive.

For these cases, fall back on a screen recording and full-page screenshots, hash those files, and write the limitation into the log. For social media posts, also record the account handle, the post's direct URL and any visible post ID. If it is your own account, the platform's data export can add a further record. When posts are central to a case, a notary's record or a professional capture service may be worth the cost.

What if the page has already been deleted?

Check the Wayback Machine first. Search the URL and look through the calendar of captures for the date that matters. Each capture's address contains a timestamp. Keep a list of those capture URLs together with screenshots that show the archive's toolbar and date. The Internet Archive has a procedure for requesting an affidavit about its captures. Check its current terms if you need one.

To get a browsable copy of a lost site, the Wayback Machine downloader rebuilds it from a capture. Restores of up to 100 pages are free, and larger sites cost a one-time 14.99 EUR. The restore removes the playback toolbar and the links back to archive.org. That is ideal for reading, but for evidence it removes the visible link to the source. So hash the restored ZIP, and keep the original capture URLs and toolbar screenshots alongside it. The Wayback restore guide walks through the process.

Legal and privacy caveats

Saving a page to preserve evidence is generally treated very differently from republishing it. Still, an archive of someone else's site may contain personal data: names, photos, customer reviews, comments. Under the GDPR, keeping such data to establish or defend legal claims can usually be justified, but it should be proportionate. Capture what the case needs, store it securely, limit who can access it, and delete it once the matter is closed. Do not publish or share the archive beyond the people involved in the case.

Involve a lawyer early if the claim is significant, if deadlines are involved, or if the content may disappear soon. Some jurisdictions have formal ways to preserve evidence, such as a notarial record, a court-appointed expert or an urgent preservation order. These carry more weight than any do-it-yourself capture. Your own careful capture is still valuable as a fast first step and as material for your lawyer.

FAQ

Is the Wayback Machine accepted as evidence?

Courts in several countries have accepted Wayback Machine captures, often supported by an affidavit or by witness testimony about how the archive works. They have also rejected them where the capture was incomplete or its origin was disputed. Treat a capture as strong supporting evidence, not as a guarantee, and combine it with your own hashed copy.

Can the other side dispute my copy?

Yes, and they may well try. The layered approach is your answer to that. A screen recording, a hashed offline copy, a hash list sent to a third party on the same day, an independent archive capture and a detailed log are much harder to question together than any one of them alone.

How long should I keep the archived copy, and where?

Keep it at least until the matter is fully resolved, including any appeals and the relevant limitation periods. Ask your lawyer how long that is in your situation. Store at least two identical copies, for example on an encrypted drive and in encrypted cloud storage, and recheck the hashes from time to time.

How do I prove the date of a capture?

Your own file dates are weak proof because they are easy to change. Stronger options are an independent capture with its own timestamp, a hash list emailed to your lawyer, a qualified or trusted timestamp, or a notary who records the page. Using more than one of these makes the date much harder to challenge.