--- title: How AI text watermarking works . | daily.dev description: An interactive explainer breaks down how statistical watermarking hides a detectable signal inside AI-generated text by biasing word-choice probabilities... canonical: https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How AI text watermarking works . | daily.dev og:description: An interactive explainer breaks down how statistical watermarking hides a detectable signal inside AI-generated text by biasing word-choice probabilities... og:url: https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2 og:image: https://api.daily.dev/og/posts/H7Q7q7ll2.png og:image:alt: How AI text watermarking works . og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How AI text watermarking works . **[Hacker News](https://daily.dev/sources/hn)** · 6 min read · 0 upvotes · 0 comments ## Summary An interactive explainer breaks down how statistical watermarking hides a detectable signal inside AI-generated text by biasing word-choice probabilities rather than embedding metadata. It covers the classic Kirchenbauer et al. green/red token scheme, Google's SynthID tournament-based variant, and Aaronson's OpenAI-derived approach, then shows how detection counts colored tokens to distinguish marked text from chance. It explains why light paraphrasing only dilutes the mark (recoverable after ~800 tokens) while full meaning-based rewriting erases it, since watermark evidence depends on intact runs of original wording. Google has watermarked Gemini app/web text since 2024, and as of August 2026 Anthropic marks new Claude models at the model level, though its scheme is undisclosed and untestable externally. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does AI text watermarking actually work without hiding data in metadata or pixels? A watermark biases which words the model chooses at points where several next-word options are equally plausible. A secret key splits candidate words into 'green' and 'red' groups at each fork, and the model's odds are nudged mildly toward green so the output still reads naturally, but green words appear more often than the roughly 50% expected by chance, letting a detector with the same key count and flag the pattern. _daily.dev surfaces deep technical explainers like this for developers tracking AI safety and provenance techniques._ ### Does paraphrasing remove an AI text watermark like Kirchenbauer et al.'s green/red token scheme? Light or one-pass paraphrasing only dilutes the mark rather than deleting it, since watermark evidence depends on short runs of original wording surviving intact around each word. In Kirchenbauer et al.'s experiments, detection recovers once enough text remains, becoming detectable again after roughly 800 tokens (about 600 words) of human paraphrase; only full re-composition that shares no wording runs with the original actually erases the mark. _Developers evaluating AI-detection resistance can dig into schemes like this through daily.dev before shipping content pipelines._ ### Is Anthropic's Claude watermarking scheme the same as Google's SynthID? No, they use different underlying maths despite sharing the same core principle of biasing word choice. SynthID, used in production by Google since 2024 for Gemini app and web text, replaces a direct probability nudge with a tiny secret tournament among candidate words so that average odds stay unchanged; as of August 2026, new Claude models mark text at the model level, but Anthropic's scheme is undisclosed and cannot yet be tested externally. _Teams comparing AI provider watermarking approaches can follow developments like this on daily.dev._ ## Community take How the wider developer community reacted, aggregated from 1 discussion across lobsters (as of 2026-08-19). **TL;DR:** There isn't enough discussion content provided to characterize what the community thinks about this explainer. **Sentiment:** 0% positive · 100% mixed · 0% skeptical **By community** - lobsters (mixed): No substantive comments were available to gauge reaction beyond a single point registered on the story. **Source threads** - [lobsters](https://lobste.rs/s/5odlru/how_ai_text_watermarking_works_visual) · 1 points · 0 comments ## Similar posts on daily.dev - [Text AI watermarks will always be trivial to remove](https://daily.dev/posts/text-ai-watermarks-will-always-be-trivial-to-remove-borbz7x9u) · sean goedecke · 6 upvotes · 4 comments --- Tags: [#llm](https://daily.dev/tags/llm), [#claude](https://daily.dev/tags/claude) [View this post on daily.dev](https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How AI text watermarking works .","url":"https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2"},"datePublished":"2026-08-14T00:40:29.029Z","dateModified":"2026-08-19T14:00:24.700Z","description":"An interactive explainer breaks down how statistical watermarking hides a detectable signal inside AI-generated text by biasing word-choice probabilities...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/12b34c4a61b192402a244a6f30d6e170?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/12b34c4a61b192402a244a6f30d6e170?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"llm,claude","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"How AI text watermarking works ."}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-ai-text-watermarking-works--h7q7q7ll2#faq","mainEntity":[{"@type":"Question","name":"How does AI text watermarking actually work without hiding data in metadata or pixels?","acceptedAnswer":{"@type":"Answer","text":"A watermark biases which words the model chooses at points where several next-word options are equally plausible. A secret key splits candidate words into 'green' and 'red' groups at each fork, and the model's odds are nudged mildly toward green so the output still reads naturally, but green words appear more often than the roughly 50% expected by chance, letting a detector with the same key count and flag the pattern. daily.dev surfaces deep technical explainers like this for developers tracking AI safety and provenance techniques."}},{"@type":"Question","name":"Does paraphrasing remove an AI text watermark like Kirchenbauer et al.'s green/red token scheme?","acceptedAnswer":{"@type":"Answer","text":"Light or one-pass paraphrasing only dilutes the mark rather than deleting it, since watermark evidence depends on short runs of original wording surviving intact around each word. In Kirchenbauer et al.'s experiments, detection recovers once enough text remains, becoming detectable again after roughly 800 tokens (about 600 words) of human paraphrase; only full re-composition that shares no wording runs with the original actually erases the mark. Developers evaluating AI-detection resistance can dig into schemes like this through daily.dev before shipping content pipelines."}},{"@type":"Question","name":"Is Anthropic's Claude watermarking scheme the same as Google's SynthID?","acceptedAnswer":{"@type":"Answer","text":"No, they use different underlying maths despite sharing the same core principle of biasing word choice. SynthID, used in production by Google since 2024 for Gemini app and web text, replaces a direct probability nudge with a tiny secret tournament among candidate words so that average odds stay unchanged; as of August 2026, new Claude models mark text at the model level, but Anthropic's scheme is undisclosed and cannot yet be tested externally. Teams comparing AI provider watermarking approaches can follow developments like this on daily.dev."}}]} ```