Hugging Face Blog

AI Watermarking 101: Tools and Techniques

Sebastian Raschka
Aug 22

How Claude Watermarks AI-Generated Text

The article titled "How Claude Watermarks AI-Generated Text" presents a 48‑minute video walkthrough that explains the process of token sampling, watermark detection, and watermark removal in AI‑generated text. It provides a detailed, step‑by‑step demonstration of how these techniques are applied and how they can be reversed.

By Sebastian Raschka, PhD
Towards Data Science
Sep 6

Text Watermarking in Python: Catch Whoever Copies Your Writing

The article explains how AI companies embed watermarks into billions of words daily and shows how readers can apply three main watermarking techniques to their own writing. It details practical steps for implementing these methods in Python and discusses experimental results that test which watermarks endure copy‑paste, editing, and paraphrasing. The post provides actionable guidance for writers seeking to protect their content from unauthorized duplication.

By Chien Vu Minh
arXiv Computer Vision
Sep 7

AngelFingerprint: A Traceable, Explainable, and White-Box Stealthy Watermark for Text-Guided Image Editing

AngelFingerprint introduces a watermarking framework for text-guided image editing that embeds the editing prompt’s CLIP text embedding directly into the diffusion model’s weights via a LoRA module. The watermark is recoverable from image pixels alone, providing an explainable trace of the edit while remaining stealthy even under full white-box access. Experiments on the MagicBrush dataset show the extractor achieves 86% top‑1 accuracy in 200‑way prompt retrieval, outperforming prompt inversion methods.

By Bo-Han Kung, Futa Waseda, Ching-Chun Chang, Isao Echizen, Shang-Tse Chen
arXiv Computer Vision
Oct 28

PGID: Progressive Guided Inversion and Denoising for Robust Watermark Detection

PGID: Progressive Guided Inversion and Denoising is a training‑free, plug‑and‑play framework that protects semantic watermarking in diffusion models from imprint removal and forgery attacks. It restores detection reliability by projecting perturbed latents back to their original regions through progressive inversion‑denoising cycles, eliminating intermediate deflections and mitigating adversarial perturbations. Extensive evaluations show that PGID successfully recovers removed watermarks and identifies forged instances across multiple schemes.

By Minh Quoc Duong, Chun Tong Lei, Chun Pong Lau
arXiv AI
Sep 11

Watermarks Without Verification: AI Text Watermarking After the EU AI Act

The paper discusses the EU AI Act’s requirement for generative AI providers to embed detectable watermarks in their outputs, noting that Anthropic’s Claude models and Google’s Gemini use SynthID‑Text by default. It critiques the lack of verifiability of claims about watermark quality, privacy, and robustness, and evaluates the open‑source SynthID‑Text implementation on two open‑weight models, finding minimal impact on prose and modest correctness loss on code. The authors argue that the real governance issue is the inability to verify these assertions and outline necessary steps—such as output release, configuration disclosure, accredited audits, shared evaluation protocols, and interoperable detection—to address the gaps.

By Alexander Nemecek, Vipin Chaudhary, Erman Ayday
arXiv AI
Oct 1

WARP: A Unified Benchmark for Invisible Image Watermarking -- Robustness and Protection Against Attacks

arXiv:2609.40031v1 Announce Type: cross Abstract: Digital image watermarking is increasingly critical in media contexts, as emerging regulations and industry practices require marking AI-generated co...

By Khaled Abud, Aleksey Yakushev, Aleksandr Akimenkov, Irina Serzhenko, Kirill Aistov, Egor Kovalev, Dmitry Obydenkov, Sergey Lavrushkin, Anastasia Antsiferova, Dmitriy Vatolin, Yury Markin, Kirill Lukianov