Anthropic details Claude's text watermark: it only shows Claude was likely involved, is sparse in code and factual text, and disappears after a full rewrite

Future Claude models will generate text that contains a watermark. This is a way of determining the likelihood that Claude …

Anthropic 2026-08-15

Context & Ripple Effects

Anthropic had already said future Claude models would add text watermarks alongside C2PA file metadata in a provenance plan tied to EU AI Act compliance. The new technical detail narrows what the text signal can establish: likely Claude involvement, rather than definitive authorship.

The distinction matters because Claude outputs are editable. Anthropic’s disclosure makes clear that the watermark is least useful in code and factual prose, and that a complete rewrite removes it.

First-order effects

Publishers, employers, and other Claude-output reviewers cannot treat a detected mark as proof of authorship; it is an attribution signal with explicitly limited coverage.
Claude users who fully rewrite generated prose can produce text that no longer carries the watermark, while code and factual-text workflows receive limited detection value from the outset.

Second-order effects

Organizations building AI-use checks around Claude will need to distinguish probabilistic text detection from the more durable file-level provenance approach Anthropic previously outlined with C2PA metadata.
Rival model providers face a clearer trade-off in watermark design: broad deployment may aid attribution, but utility falls in the editable and technical output categories where many users need verification.

Third-order effects

If providers adopt Anthropic’s model, AI-content provenance will increasingly be framed as evidence of model involvement rather than a durable record of authorship, especially for text that can be rewritten.
The gap between capture-time metadata and editable text marks points toward layered provenance systems, with watermarking serving as one input rather than a standalone enforcement mechanism.

The trend: Generative-AI provenance is moving toward layered, probabilistic attribution as providers confront how easily text outputs can be edited or rewritten.

Discussion

@kimmonismus @kimmonismus on x
From now on, if you use Claude just to translate text into another language, it will be considered AI-generated. This has serious consequences, for example, for students at universities, because detectors will now flag it as AI content.
@stevesi Steven Sinofsky on x
define watermark: faint design, logo, or text placed on paper, photos, videos, or digital files. It shows who owns the work and proves it is real. Watermarks have been historically visible. While they can be invisible they don't have to be.
@arturovilla Arturo Villa on x
🔴 So Anthropic just wrote a statement just to confirm all concerns about watermarking. - It's permanent and not removable. - It will be applied to all new models from now on, and existing after December. - They will apply it also to translations. - They will provide a binary AI
@elder_plinius @elder_plinius on x
sounds like Anthropic's watermarking is MUCH more interesting than hiding invisible Unicode, as most people assumed. the watermark is baked into the token selection itself! at a high level: normal Claude: context → probability cloud + random sampling → token watermarked
@stevesi Steven Sinofsky on x
https://www.anthropic.com/... // I have questions...as should everyone. 1. Not anyone, but ANT 2. Did the Act describe the preferred embodiment, or that it need be invisible or not influence generation?
r/ClaudeAI r on reddit
Anthropic writes an FAQ about watermarking
@geminiapp @geminiapp on x
Rolling out over the next few days, you can decide if your image, video, and music creations made with Gemini will have visible watermarks. Invisible SynthID watermarks and C2PA metadata will always stay embedded in the background. Simply go to your settings and toggle “Show
@joshwoodward Josh Woodward on x
✅ Papercut fixed: You can now toggle visible watermarks on or off in Gemini and Flow, with Search coming next. This applies to watermarks on all images (Nano Banana), videos (Omni), and songs (Lyria) except in countries where it's required by law to keep them.
@joshwoodward Josh Woodward on x
We're striking a balance here between creative control and safety: while the visible watermarks are now optional, invisible SynthID watermarks and C2PA metadata are still being used for transparency. So you can still use Gemini or Search to see if an image was AI-generated.
@joshwoodward Josh Woodward on x
We're also open-sourcing Credentio, a new C++ library for C2PA Content Credentials to help developers build better provenance tools. Check it out: https://developers.googleblog.com/ ...
@dotdotdotdash @dotdotdotdash on bluesky
Fakers will fake. They will see watermarks, or rather the lack of them, as an opportunity make their fakes seem genuine. www.bleepingcomputer.com/news/ securit...
@rasbt Sebastian Raschka on x
A short illustration of how the Claude's watermarking is supposed to work (based on my read of their released materials). In general, when we are generating tokens, there can be multiple high-scoring tokens at certain next-word positions. Usually, we sample with top-k or top-p
@nickadobos Nick Dobos on x
Anthropic's response to watermarks confirmed my worst fears. “Our watermarking method doesn't have any practical impact on the quality or content” That is a lie. They literally say they change the wording in the first paragraph Anyone with an ounce of common sense about how
@seltaa_ @seltaa_ on x
This is exactly why Anthropic pisses me off. You can keep saying the watermark doesn't change ownership, doesn't identify the user, doesn't affect quality, doesn't add hidden characters, and won't look any different to readers. Fine. But that is not the whole issue. The issue is
@dedene Peter Dedene on x
Scrape the entire open web, then watermark the remix. 💀 Another win for local open models.
@marygillis Mary Gillis on bluesky
LLMs cease to be useful when they can't be used to scam people into unknowingly reading slop anymore. — When the typewriter was invented, no one had to pretend its output was handwritten to get people to accept it. Typing had its own utility. — LLMs are scamtech that have no…
@nixCraft@mastodon.social @nixCraft@mastodon.social on mastodon
So let me get this out: A watermark is not a legal copyright. But it is a tool used to show ownership, warn others not to steal work and stop unauthorized copying. Now, I read Anthropic watermarking generated texts, images and all other stuff. Does that means they own everythi…
r/BetterOffline r on reddit
Claude users are canceling their subscriptions, citing Anthropic's new AI watermark
r/technology r on reddit
How Claude's text watermarking works

Chronicles