Face BenchmarkHow face recognition and deepfake detection are measured, from the papers.

Public deepfake datasets compared: FaceForensics++, Celeb-DF, DFDC, DF40 and more

The Face Benchmark editorsPublishedLast checked

Short answer

117 words

Nine public datasets account for almost every face deepfake detection result in the literature. FaceForensics++ (1,000 real videos, four manipulation methods, 2019) is still the usual training set; Celeb-DF v2 (590 real and 5,639 fake videos of 59 public figures) and the DFDC set (over 100,000 clips of 3,426 paid actors) are the usual unseen tests; DeeperForensics-1.0, ForgeryNet and DF40 add scale or method diversity; WildDeepfake and Deepfake-Eval-2024 are built from fakes that actually circulated. The one rule for choosing: never score a detector on the dataset it was trained on and call the result its accuracy. The table below gives each set's counts, methods, source of faces, licence and paper, as its own publication states them.

TBLPublic deepfake datasets compared

Every value is copied from the dataset's paper or official repository, read on the date in the last column. "Rights" is whether the people shown agreed to take part, as the dataset's own documentation states it. The strip under each row carries the same fields in machine-readable form, ending in a check digit.

Public face deepfake datasets, as their publications count themCounts in the unit each paper uses (videos, clips or face sequences). Rows are not comparable by size alone.
01Dataset02Year and venue03Real04Fake05Methods06Source of faces and rights07Levels or perturbations08Access09Paper10Checked
GRP LABCurated setsFakes made by the dataset's authors from videos they chose, so every manipulation is known.
FaceForensics++ (FF++)2019, ICCV1,000 videos (from 977 YouTube videos)4,000 videos (1,000 per method); 1.8 million+ manipulated images4: Deepfakes, Face2Face, FaceSwap, NeuralTextures; FaceShifter added 2020YouTube videos; no stated consentraw, c23, c40 (H.264)Google form, FaceForensics Terms of UsearXiv 1901.089712026-11-08
Strip: FaceForensics++ (FF++), 2019, ICCV, 1,000 videos (from 977 YouTube videos), 4,000 videos (1,000 per method); 1.8 million+ manipulated images, 4: Deepfakes, Face2Face, FaceSwap, NeuralTextures; FaceShifter added 2020, YouTube videos; no stated consent, raw, c23, c40 (H.264), Google form, FaceForensics Terms of Use, arXiv 1901.08971, 2026-11-08, check digit 1.
Deep Fake Detection (DFD)2019, Google and Jigsaw363 videos3,068 videos528 actors; rights clearednonewith the FF++ downloadFF++ repository2026-11-08
Strip: Deep Fake Detection (DFD), 2019, Google and Jigsaw, 363 videos, 3,068 videos, 5, 28 actors; rights cleared, none, with the FF++ download, FF++ repository, 2026-11-08, check digit 6.
Celeb-DF v22020, CVPR590 celebrity videos plus 300 YouTube-real5,639 videos1 (improved face swap)YouTube videos of 59 public figures; no stated consent; takedown on requestnoneGoogle or Tencent form, Terms to Use Celeb-DFarXiv 1909.129622026-11-08
Strip: Celeb-DF v2, 2020, CVPR, 590 celebrity videos plus 300 YouTube-real, 5,639 videos, 1 (improved face swap), YouTube videos of 59 public figures; no stated consent; takedown on request, none, Google or Tencent form, Terms to Use Celeb-DF, arXiv 1909.12962, 2026-11-08, check digit 4.
DeeperForensics-1.02020, CVPR50,000 videos10,000 videos (60,000 total; 17.6 million frames)1 (end-to-end face swap)100 subjects; rights cleared7 perturbation typesby requestarXiv 2001.030242026-11-08
Strip: DeeperForensics-1.0, 2020, CVPR, 50,000 videos, 10,000 videos (60,000 total; 17.6 million frames), 1 (end-to-end face swap), 100 subjects; rights cleared, 7 perturbation types, by request, arXiv 2001.03024, 2026-11-08, check digit 9.
DFDC (Deepfake Detection Challenge)2020, Kaggle23,654 videos104,500 videos (over 100,000 clips)8 (Deepfake, GAN-based and non-learned)3,426 paid actors who agreed to have their likeness modified19 perturbation typesKaggle and the dataset sitearXiv 2006.073972026-11-08
Strip: DFDC (Deepfake Detection Challenge), 2020, Kaggle, 23,654 videos, 104,500 videos (over 100,000 clips), 8 (Deepfake, GAN-based and non-learned), 3,426 paid actors who agreed to have their likeness modified, 19 perturbation types, Kaggle and the dataset site, arXiv 2006.07397, 2026-11-08, check digit 4.
ForgeryNet2021, CVPR99,630 video clips; 1,438,201 images121,617 video clips; 1,457,861 images15 approaches in 4 categories5,400+ subjects36 perturbation typesby requestarXiv 2103.056302026-11-08
Strip: ForgeryNet, 2021, CVPR, 99,630 video clips; 1,438,201 images, 121,617 video clips; 1,457,861 images, 15 approaches in 4 categories, 5,400+ subjects, 36 perturbation types, by request, arXiv 2103.05630, 2026-11-08, check digit 5.
DF402024varies by protocol40 deepfake techniques40built for the DeepfakeBench workflowper protocolGitHub project pagearXiv 2406.134952026-11-08
Strip: DF40, 2024, varies by protocol, 40 deepfake techniques, 40, built for the DeepfakeBench workflow, per protocol, GitHub project page, arXiv 2406.13495, 2026-11-08, check digit 1.
GRP WLDIn-the-wild setsFakes collected after they circulated, so the generator is unknown and the compression is whatever the platform applied.
WildDeepfake2020, ACM MM3,805 face sequences3,509 face sequences (7,314 sequences; 1,180,099 face images; from 707 videos)unknown mix of internet deepfakescollected from video sites; no consent possibleas found onlineby requestarXiv 2101.014562026-11-08
Strip: WildDeepfake, 2020, ACM MM, 3,805 face sequences, 3,509 face sequences (7,314 sequences; 1,180,099 face images; from 707 videos), unknown mix of internet deepfakes, collected from video sites; no consent possible, as found online, by request, arXiv 2101.01456, 2026-11-08, check digit 2.
Deepfake-Eval-20242025included in 45 hours of video, 56.5 hours of audio, 1,975 imagessame corpusreal circulating fakes, 2024social media and detection-platform users; 88 websites, 52 languagesas found onlineGitHubarXiv 2503.028572026-11-08
Strip: Deepfake-Eval-2024, 2025, included in 45 hours of video, 56.5 hours of audio, 1,975 images, same corpus, real circulating fakes, 2024, social media and detection-platform users; 88 websites, 52 languages, as found online, GitHub, arXiv 2503.02857, 2026-11-08, check digit 8.
  • FBDdataset record
  • Adataset
  • Byear
  • Creal
  • Dfake
  • Emethods
  • Frights
  • Glevels
  • Haccess
  • Ssource
  • Idate checked
  • #check digit over the line

ROWThe datasets in the table

R1

FaceForensics++

The field's default. 1,000 real videos sourced from 977 YouTube videos, each manipulated with four automated methods (Deepfakes, Face2Face, FaceSwap, NeuralTextures), with binary masks and 1,000 trained Deepfakes models released alongside. It ships at three compression levels, raw, c23 and c40, and most published training uses c23. The paper's benchmark has a hidden test set and an automated server. Detectors trained here score very well here and much lower elsewhere, which is the central fact of the field. Full page: FaceForensics++.

R2

Celeb-DF

Built because, in its authors' words, existing sets "suffer from low visual quality and do not resemble DeepFake videos circulated on the Internet". 590 original YouTube videos of 59 public figures, 5,639 face-swapped videos made with an improved synthesis process, 300 extra real YouTube videos, and a 518-video test list. It is the standard "unseen" test for detectors trained on FF++, and the scores on it are the first thing to look at in any results table. Full page: Celeb-DF.

R3

DFDC

The largest consented set: over 100,000 clips of 3,426 paid actors, produced with eight methods and 19 perturbations, released with a Kaggle competition. The paper analyses the top contest entries and reports that a model trained only on DFDC could generalise to real in-the-wild deepfakes to a useful degree. Full page: the Deepfake Detection Challenge.

R4

DeeperForensics-1.0

60,000 videos and 17.6 million frames, with 100 consenting subjects as sources and fakes from the authors' own end-to-end face swapping method. Its distinctive feature is systematic distortion: seven perturbation types standing in for real-world degradation, plus a hidden test set chosen for high human deceptive scores.

R5

WildDeepfake

707 deepfake videos found on video-sharing sites, each matched to a real source, processed into 7,314 face sequences and 1.18 million face images, split 6,508 train and 806 test. The paper's experiment is the point: image-level detectors that score between 0.90 and 0.99 accuracy on FF++ (Deepfake) or DeepFake-TIMIT all fall below 70% on WildDeepfake.

R6

ForgeryNet

The largest annotated set: 99,630 real and 121,617 fake video clips, 1.44 million real and 1.46 million fake still images, 15 manipulation approaches in four categories, 36 perturbation types and 9.39 million annotations across image and video tasks, with splits of roughly 7:1:2.

R7

DF40

Not a single dataset so much as a diversity test: 40 distinct deepfake techniques, including recent ones, arranged for the DeepfakeBench workflow with four evaluation protocols. Its paper's argument is that FF++ "contains out-of-date forgery techniques from the past four years", so detectors that look strong on it are not being tested on the fakes people now make. Full context: DeepfakeBench.

R8

Deepfake-Eval-2024

45 hours of video, 56.5 hours of audio and 1,975 images of deepfakes that circulated in 2024, gathered from social media and from users of a detection platform, spanning 88 websites and 52 languages. Open-source detectors' AUC fell by 50% for video, 48% for audio and 45% for image models compared with earlier benchmarks. Full context: deepfake detection in the wild.

01How to read the table

This is the dataset reference for the deepfake detection benchmark hub. The published detector results page reports what detectors score on these sets; this page is about the sets themselves.

Fake items in six public deepfake datasets, as each publication counts themHorizontal bars. FaceForensics++ 4,000 fake videos; Celeb-DF v2 5,639 fake videos; DeeperForensics-1.0 10,000 fake videos; WildDeepfake 3,509 fake face sequences; DFDC 104,500 fake clips; ForgeryNet 121,617 fake video clips. Each count is the unit its own paper uses, so the bars show scale, not comparable units.030404.2560808.591212.75121617FaceForensics++ (videos)4,000Celeb-DF v2 (videos)5,639DeeperForensics-1.0 (videos)10,000WildDeepfake (face sequences)3,509DFDC (clips)104,500ForgeryNet (video clips)121,617fake items as published
Figure 1Scale, not comparability: fake items per dataset in the unit each publication uses (videos, clips or face sequences). Sources: each dataset's paper or repository, and the DeepfakeBench and ForgeryNet dataset tables, read 2026-11-08.

Smaller or older sets that still appear in papers but are not in the table: UADFV (49 real and 49 fake videos, 49 subjects) and DeepFake-TIMIT (320 real and 640 fake videos, 43 subjects), as listed in the ForgeryNet paper's comparison table. No file, frame or face from any of these sets is hosted on this site.

Lab sets versus in-the-wild sets

Seven of the nine sets were made in a lab: the authors took real videos and ran manipulation software over them. That gives clean labels and large numbers, and it means every fake in the set was made by a method the authors chose, at the quality their pipeline produced. WildDeepfake and Deepfake-Eval-2024 are the opposite kind: fakes collected from the internet, made by unknown people with unknown tools. Their labels are harder to guarantee and their numbers are smaller, but they measure the thing a deployed detector will actually meet. The in the wild page covers what happens to detector scores on them.

Why counts are not comparable across sets

"Videos" means different things. FF++ counts 1,000 source clips and 1,000 manipulated outputs per method. DFDC counts short clips cut from longer recordings of the same actors. WildDeepfake counts face sequences extracted from 707 videos, which is why its headline is 1.18 million face images. A set with more rows is not a harder set, and a set with more methods is not automatically a more diverse one if the methods are all face swaps. Read the methods column with the counts.

The rights column

Three of the lab sets (DFD, DeeperForensics-1.0, DFDC) were filmed with people who consented; DFDC's were paid actors. FF++ and Celeb-DF used YouTube footage of people who did not, and Celeb-DF's documentation offers removal on request. The internet-collected sets by construction contain people who never agreed to anything. The same tension runs through face recognition datasets, including the one that used to live on this domain; the face datasets and consent page follows it.

Which dataset should you test on?

Train on one, test on several others, and report the unseen scores first. If the detector will face recent generators, include DF40 or an in-the-wild set; FF++ alone tests against 2019 methods. If false positives on real people matter, use a set whose real videos resemble your deployment, not FF++'s YouTube interviews. The cross-dataset generalisation page shows how large the published drops are, and the evaluate a detector protocol turns this into steps.

02Method and sources

Rows are built from each dataset's paper on arXiv or its official repository README, read on the date shown. Where sources disagree on a count, the table shows the more specific figure and names the disagreement here: DFDC's paper says "over 100,000 total clips"; DeepfakeBench's table gives 23,654 real and 104,500 fake; ForgeryNet's comparison table gives 23,564 real and 104,500 fake. The real count differs by 90 between the two secondary tables and should be read as about 23,600. Nothing is estimated. Changes to a dataset after this date are not reflected until the next check; the date column is the promise.

A count holds only for the release named in its row and the date it was checked; later versions of a dataset often differ, and no count says how hard a set is.

FAQQuestions

Which public deepfake dataset is the largest?

By the counts in the table, ForgeryNet holds the most items: 99,630 real and 121,617 fake video clips, plus about 1.4 million images each side. DFDC is next among video sets with 23,654 real and 104,500 fake videos. Counts are in each paper's own unit, so rows are not comparable by size alone.

Do the people in these datasets agree to take part?

It varies by row. DFDC used 3,426 paid actors who agreed to have their likeness modified, and DeeperForensics-1.0 used 100 subjects with rights cleared. FaceForensics++ and Celeb-DF v2 use YouTube videos with no stated consent. The Rights column records what each dataset's own documentation says.

How many manipulation methods does each dataset cover?

FaceForensics++ has four (Deepfakes, Face2Face, FaceSwap, NeuralTextures), with FaceShifter added in 2020. Celeb-DF v2 and DeeperForensics-1.0 each have one. DFDC has eight, and ForgeryNet 15 approaches in four categories. DF40 spans 40 techniques.

How do I get these datasets?

Access ranges from a signed terms form (FaceForensics++, Celeb-DF v2) to Kaggle (DFDC) to a request to the authors (DeeperForensics-1.0, ForgeryNet). The Access column names the route for each row, and the Paper column links the source read on the date shown.

SRCSources