Hugging Face Blog

AI Watermarking 101: Tools and Techniques

Sebastian Raschka
Aug 22

How Claude Watermarks AI-Generated Text

The article titled "How Claude Watermarks AI-Generated Text" presents a 48‑minute video walkthrough that explains the process of token sampling, watermark detection, and watermark removal in AI‑generated text. It provides a detailed, step‑by‑step demonstration of how these techniques are applied and how they can be reversed.

By Sebastian Raschka, PhD
Towards Data Science
Sep 6

Text Watermarking in Python: Catch Whoever Copies Your Writing

The article explains how AI companies embed watermarks into billions of words daily and shows how readers can apply three main watermarking techniques to their own writing. It details practical steps for implementing these methods in Python and discusses experimental results that test which watermarks endure copy‑paste, editing, and paraphrasing. The post provides actionable guidance for writers seeking to protect their content from unauthorized duplication.

By Chien Vu Minh
arXiv Computer Vision
Sep 7

AngelFingerprint: A Traceable, Explainable, and White-Box Stealthy Watermark for Text-Guided Image Editing

AngelFingerprint introduces a watermarking framework for text-guided image editing that embeds the editing prompt’s CLIP text embedding directly into the diffusion model’s weights via a LoRA module. The watermark is recoverable from image pixels alone, providing an explainable trace of the edit while remaining stealthy even under full white-box access. Experiments on the MagicBrush dataset show the extractor achieves 86% top‑1 accuracy in 200‑way prompt retrieval, outperforming prompt inversion methods.

By Bo-Han Kung, Futa Waseda, Ching-Chun Chang, Isao Echizen, Shang-Tse Chen
arXiv AI
Sep 11

Watermarks Without Verification: AI Text Watermarking After the EU AI Act

The paper discusses the EU AI Act’s requirement for generative AI providers to embed detectable watermarks in their outputs, noting that Anthropic’s Claude models and Google’s Gemini use SynthID‑Text by default. It critiques the lack of verifiability of claims about watermark quality, privacy, and robustness, and evaluates the open‑source SynthID‑Text implementation on two open‑weight models, finding minimal impact on prose and modest correctness loss on code. The authors argue that the real governance issue is the inability to verify these assertions and outline necessary steps—such as output release, configuration disclosure, accredited audits, shared evaluation protocols, and interoperable detection—to address the gaps.

By Alexander Nemecek, Vipin Chaudhary, Erman Ayday
arXiv AI
Aug 12

MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation

arXiv:2608. 10166v1 Announce Type: cross Abstract: Digital watermarking has emerged as a critical technique for provenance and copyright attribution in AI-generated imagery, yet its robustness against realistic, model-agnostic removal attacks remains poorly explored.

By Jie Cao, Qi Li, Zelin Zhang, Xiaodong Wu, Lingshuang Liu, Xiangman Li, Jianbing Ni