Collection

Anthropic's Claude watermark, and why the 'removal tools' popping up are mostly snake oil

12 sources
Post cover image

Questions this post answers

How does Anthropic's Claude watermark actually work?

It embeds a statistical signal directly into word choices during text generation rather than attaching file metadata, live as of August 2026. The scheme is undisclosed, but works similarly in spirit to Kirchenbauer et al.'s green/red token list approach or Google SynthID's tournament-based method, biasing the model toward certain tokens so the resulting skew is detectable by statistical analysis even though the text reads normally. Track how AI vendors handle watermarking and disclosure requirements as they evolve, right on daily.dev.

Can watermark removal tools actually strip AI text watermarks like Claude's?

Mostly no. These tools can reliably strip superficial layers like hidden Unicode characters and file metadata (C2PA, EXIF, XMP), but that has nothing to do with the actual statistical watermark embedded in word choice. Only a full meaning-preserving rewrite through a second model destroys the real signal, and even the leading removal tool's own author has admitted that capability doesn't work yet. Developers evaluating AI-detection tooling can follow verified takes on daily.dev before trusting vendor claims.

Does paraphrasing remove an AI text watermark?

Light paraphrasing dilutes the watermark signal but usually doesn't erase it, since the statistical evidence depends on chunks of original wording surviving intact; runs of 800+ tokens of intact text can still show a detectable skew. Only a full rewrite that changes the wording entirely, done through a second model, leaves nothing left for the watermark detector to find. Keep up with how AI content-detection methods hold up under real-world editing on daily.dev.

4.1K Impressions