Public deepfake datasets compared: FaceForensics++, Celeb-DF, DFDC, DF40 and more
The Face Benchmark editorsPublishedLast checked
Short answer
117 wordsNine public datasets account for almost every face deepfake detection result in the literature. FaceForensics++ (1,000 real videos, four manipulation methods, 2019) is still the usual training set; Celeb-DF v2 (590 real and 5,639 fake videos of 59 public figures) and the DFDC set (over 100,000 clips of 3,426 paid actors) are the usual unseen tests; DeeperForensics-1.0, ForgeryNet and DF40 add scale or method diversity; WildDeepfake and Deepfake-Eval-2024 are built from fakes that actually circulated. The one rule for choosing: never score a detector on the dataset it was trained on and call the result its accuracy. The table below gives each set's counts, methods, source of faces, licence and paper, as its own publication states them.
TBLPublic deepfake datasets compared
Every value is copied from the dataset's paper or official repository, read on the date in the last column. "Rights" is whether the people shown agreed to take part, as the dataset's own documentation states it. The strip under each row carries the same fields in machine-readable form, ending in a check digit.
| 01Dataset | 02Year and venue | 03Real | 04Fake | 05Methods | 06Source of faces and rights | 07Levels or perturbations | 08Access | 09Paper | 10Checked |
|---|---|---|---|---|---|---|---|---|---|
| GRP LABCurated setsFakes made by the dataset's authors from videos they chose, so every manipulation is known. | |||||||||
| FaceForensics++ (FF++) | 2019, ICCV | 1,000 videos (from 977 YouTube videos) | 4,000 videos (1,000 per method); 1.8 million+ manipulated images | 4: Deepfakes, Face2Face, FaceSwap, NeuralTextures; FaceShifter added 2020 | YouTube videos; no stated consent | raw, c23, c40 (H.264) | Google form, FaceForensics Terms of Use | arXiv 1901.08971 | 2026-11-08 |
| Strip: FaceForensics++ (FF++), 2019, ICCV, 1,000 videos (from 977 YouTube videos), 4,000 videos (1,000 per method); 1.8 million+ manipulated images, 4: Deepfakes, Face2Face, FaceSwap, NeuralTextures; FaceShifter added 2020, YouTube videos; no stated consent, raw, c23, c40 (H.264), Google form, FaceForensics Terms of Use, arXiv 1901.08971, 2026-11-08, check digit 1. | |||||||||
| Deep Fake Detection (DFD) | 2019, Google and Jigsaw | 363 videos | 3,068 videos | 5 | 28 actors; rights cleared | none | with the FF++ download | FF++ repository | 2026-11-08 |
| Strip: Deep Fake Detection (DFD), 2019, Google and Jigsaw, 363 videos, 3,068 videos, 5, 28 actors; rights cleared, none, with the FF++ download, FF++ repository, 2026-11-08, check digit 6. | |||||||||
| Celeb-DF v2 | 2020, CVPR | 590 celebrity videos plus 300 YouTube-real | 5,639 videos | 1 (improved face swap) | YouTube videos of 59 public figures; no stated consent; takedown on request | none | Google or Tencent form, Terms to Use Celeb-DF | arXiv 1909.12962 | 2026-11-08 |
| Strip: Celeb-DF v2, 2020, CVPR, 590 celebrity videos plus 300 YouTube-real, 5,639 videos, 1 (improved face swap), YouTube videos of 59 public figures; no stated consent; takedown on request, none, Google or Tencent form, Terms to Use Celeb-DF, arXiv 1909.12962, 2026-11-08, check digit 4. | |||||||||
| DeeperForensics-1.0 | 2020, CVPR | 50,000 videos | 10,000 videos (60,000 total; 17.6 million frames) | 1 (end-to-end face swap) | 100 subjects; rights cleared | 7 perturbation types | by request | arXiv 2001.03024 | 2026-11-08 |
| Strip: DeeperForensics-1.0, 2020, CVPR, 50,000 videos, 10,000 videos (60,000 total; 17.6 million frames), 1 (end-to-end face swap), 100 subjects; rights cleared, 7 perturbation types, by request, arXiv 2001.03024, 2026-11-08, check digit 9. | |||||||||
| DFDC (Deepfake Detection Challenge) | 2020, Kaggle | 23,654 videos | 104,500 videos (over 100,000 clips) | 8 (Deepfake, GAN-based and non-learned) | 3,426 paid actors who agreed to have their likeness modified | 19 perturbation types | Kaggle and the dataset site | arXiv 2006.07397 | 2026-11-08 |
| Strip: DFDC (Deepfake Detection Challenge), 2020, Kaggle, 23,654 videos, 104,500 videos (over 100,000 clips), 8 (Deepfake, GAN-based and non-learned), 3,426 paid actors who agreed to have their likeness modified, 19 perturbation types, Kaggle and the dataset site, arXiv 2006.07397, 2026-11-08, check digit 4. | |||||||||
| ForgeryNet | 2021, CVPR | 99,630 video clips; 1,438,201 images | 121,617 video clips; 1,457,861 images | 15 approaches in 4 categories | 5,400+ subjects | 36 perturbation types | by request | arXiv 2103.05630 | 2026-11-08 |
| Strip: ForgeryNet, 2021, CVPR, 99,630 video clips; 1,438,201 images, 121,617 video clips; 1,457,861 images, 15 approaches in 4 categories, 5,400+ subjects, 36 perturbation types, by request, arXiv 2103.05630, 2026-11-08, check digit 5. | |||||||||
| DF40 | 2024 | varies by protocol | 40 deepfake techniques | 40 | built for the DeepfakeBench workflow | per protocol | GitHub project page | arXiv 2406.13495 | 2026-11-08 |
| Strip: DF40, 2024, varies by protocol, 40 deepfake techniques, 40, built for the DeepfakeBench workflow, per protocol, GitHub project page, arXiv 2406.13495, 2026-11-08, check digit 1. | |||||||||
| GRP WLDIn-the-wild setsFakes collected after they circulated, so the generator is unknown and the compression is whatever the platform applied. | |||||||||
| WildDeepfake | 2020, ACM MM | 3,805 face sequences | 3,509 face sequences (7,314 sequences; 1,180,099 face images; from 707 videos) | unknown mix of internet deepfakes | collected from video sites; no consent possible | as found online | by request | arXiv 2101.01456 | 2026-11-08 |
| Strip: WildDeepfake, 2020, ACM MM, 3,805 face sequences, 3,509 face sequences (7,314 sequences; 1,180,099 face images; from 707 videos), unknown mix of internet deepfakes, collected from video sites; no consent possible, as found online, by request, arXiv 2101.01456, 2026-11-08, check digit 2. | |||||||||
| Deepfake-Eval-2024 | 2025 | included in 45 hours of video, 56.5 hours of audio, 1,975 images | same corpus | real circulating fakes, 2024 | social media and detection-platform users; 88 websites, 52 languages | as found online | GitHub | arXiv 2503.02857 | 2026-11-08 |
| Strip: Deepfake-Eval-2024, 2025, included in 45 hours of video, 56.5 hours of audio, 1,975 images, same corpus, real circulating fakes, 2024, social media and detection-platform users; 88 websites, 52 languages, as found online, GitHub, arXiv 2503.02857, 2026-11-08, check digit 8. | |||||||||
- FBDdataset record
- Adataset
- Byear
- Creal
- Dfake
- Emethods
- Frights
- Glevels
- Haccess
- Ssource
- Idate checked
- #check digit over the line
ROWThe datasets in the table
FaceForensics++
The field's default. 1,000 real videos sourced from 977 YouTube videos, each manipulated with four automated methods (Deepfakes, Face2Face, FaceSwap, NeuralTextures), with binary masks and 1,000 trained Deepfakes models released alongside. It ships at three compression levels, raw, c23 and c40, and most published training uses c23. The paper's benchmark has a hidden test set and an automated server. Detectors trained here score very well here and much lower elsewhere, which is the central fact of the field. Full page: FaceForensics++.
Celeb-DF
Built because, in its authors' words, existing sets "suffer from low visual quality and do not resemble DeepFake videos circulated on the Internet". 590 original YouTube videos of 59 public figures, 5,639 face-swapped videos made with an improved synthesis process, 300 extra real YouTube videos, and a 518-video test list. It is the standard "unseen" test for detectors trained on FF++, and the scores on it are the first thing to look at in any results table. Full page: Celeb-DF.
DFDC
The largest consented set: over 100,000 clips of 3,426 paid actors, produced with eight methods and 19 perturbations, released with a Kaggle competition. The paper analyses the top contest entries and reports that a model trained only on DFDC could generalise to real in-the-wild deepfakes to a useful degree. Full page: the Deepfake Detection Challenge.
DeeperForensics-1.0
60,000 videos and 17.6 million frames, with 100 consenting subjects as sources and fakes from the authors' own end-to-end face swapping method. Its distinctive feature is systematic distortion: seven perturbation types standing in for real-world degradation, plus a hidden test set chosen for high human deceptive scores.
WildDeepfake
707 deepfake videos found on video-sharing sites, each matched to a real source, processed into 7,314 face sequences and 1.18 million face images, split 6,508 train and 806 test. The paper's experiment is the point: image-level detectors that score between 0.90 and 0.99 accuracy on FF++ (Deepfake) or DeepFake-TIMIT all fall below 70% on WildDeepfake.
ForgeryNet
The largest annotated set: 99,630 real and 121,617 fake video clips, 1.44 million real and 1.46 million fake still images, 15 manipulation approaches in four categories, 36 perturbation types and 9.39 million annotations across image and video tasks, with splits of roughly 7:1:2.
DF40
Not a single dataset so much as a diversity test: 40 distinct deepfake techniques, including recent ones, arranged for the DeepfakeBench workflow with four evaluation protocols. Its paper's argument is that FF++ "contains out-of-date forgery techniques from the past four years", so detectors that look strong on it are not being tested on the fakes people now make. Full context: DeepfakeBench.
Deepfake-Eval-2024
45 hours of video, 56.5 hours of audio and 1,975 images of deepfakes that circulated in 2024, gathered from social media and from users of a detection platform, spanning 88 websites and 52 languages. Open-source detectors' AUC fell by 50% for video, 48% for audio and 45% for image models compared with earlier benchmarks. Full context: deepfake detection in the wild.
01How to read the table
This is the dataset reference for the deepfake detection benchmark hub. The published detector results page reports what detectors score on these sets; this page is about the sets themselves.
Smaller or older sets that still appear in papers but are not in the table: UADFV (49 real and 49 fake videos, 49 subjects) and DeepFake-TIMIT (320 real and 640 fake videos, 43 subjects), as listed in the ForgeryNet paper's comparison table. No file, frame or face from any of these sets is hosted on this site.
Lab sets versus in-the-wild sets
Seven of the nine sets were made in a lab: the authors took real videos and ran manipulation software over them. That gives clean labels and large numbers, and it means every fake in the set was made by a method the authors chose, at the quality their pipeline produced. WildDeepfake and Deepfake-Eval-2024 are the opposite kind: fakes collected from the internet, made by unknown people with unknown tools. Their labels are harder to guarantee and their numbers are smaller, but they measure the thing a deployed detector will actually meet. The in the wild page covers what happens to detector scores on them.
Why counts are not comparable across sets
"Videos" means different things. FF++ counts 1,000 source clips and 1,000 manipulated outputs per method. DFDC counts short clips cut from longer recordings of the same actors. WildDeepfake counts face sequences extracted from 707 videos, which is why its headline is 1.18 million face images. A set with more rows is not a harder set, and a set with more methods is not automatically a more diverse one if the methods are all face swaps. Read the methods column with the counts.
The rights column
Three of the lab sets (DFD, DeeperForensics-1.0, DFDC) were filmed with people who consented; DFDC's were paid actors. FF++ and Celeb-DF used YouTube footage of people who did not, and Celeb-DF's documentation offers removal on request. The internet-collected sets by construction contain people who never agreed to anything. The same tension runs through face recognition datasets, including the one that used to live on this domain; the face datasets and consent page follows it.
Which dataset should you test on?
Train on one, test on several others, and report the unseen scores first. If the detector will face recent generators, include DF40 or an in-the-wild set; FF++ alone tests against 2019 methods. If false positives on real people matter, use a set whose real videos resemble your deployment, not FF++'s YouTube interviews. The cross-dataset generalisation page shows how large the published drops are, and the evaluate a detector protocol turns this into steps.
02Method and sources
Rows are built from each dataset's paper on arXiv or its official repository README, read on the date shown. Where sources disagree on a count, the table shows the more specific figure and names the disagreement here: DFDC's paper says "over 100,000 total clips"; DeepfakeBench's table gives 23,654 real and 104,500 fake; ForgeryNet's comparison table gives 23,564 real and 104,500 fake. The real count differs by 90 between the two secondary tables and should be read as about 23,600. Nothing is estimated. Changes to a dataset after this date are not reflected until the next check; the date column is the promise.
A count holds only for the release named in its row and the date it was checked; later versions of a dataset often differ, and no count says how hard a set is.
FAQQuestions
Which public deepfake dataset is the largest?
By the counts in the table, ForgeryNet holds the most items: 99,630 real and 121,617 fake video clips, plus about 1.4 million images each side. DFDC is next among video sets with 23,654 real and 104,500 fake videos. Counts are in each paper's own unit, so rows are not comparable by size alone.
Do the people in these datasets agree to take part?
It varies by row. DFDC used 3,426 paid actors who agreed to have their likeness modified, and DeeperForensics-1.0 used 100 subjects with rights cleared. FaceForensics++ and Celeb-DF v2 use YouTube videos with no stated consent. The Rights column records what each dataset's own documentation says.
How many manipulation methods does each dataset cover?
FaceForensics++ has four (Deepfakes, Face2Face, FaceSwap, NeuralTextures), with FaceShifter added in 2020. Celeb-DF v2 and DeeperForensics-1.0 each have one. DFDC has eight, and ForgeryNet 15 approaches in four categories. DF40 spans 40 techniques.
How do I get these datasets?
Access ranges from a signed terms form (FaceForensics++, Celeb-DF v2) to Kaggle (DFDC) to a request to the authors (DeeperForensics-1.0, ForgeryNet). The Access column names the route for each row, and the Paper column links the source read on the date shown.