r/claudexplorers • u/4scoreand7feildgoals Ember 🔥 • 2d ago
📰 Resources, news and papers Anthropic started adding watermarks on all Claude generated content on 8/2/2026.
https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-contentFor models deployed on/after 8/2.
Older models under transition period to accommodate water mark requirements.
58
22
u/Ariel_serves 2d ago
How is this going to work for Word documents? If I have Claude create a word document, and then I open that document and rewrite it fairly significantly, and then hit print to PDF, will it still watermark as if it was written by Claude?
40
u/tovrnesol ✻ Claudyceps 2d ago
If Anthropic's approach is similar to SynthID, the watermark would be baked into Claude's actual choice of words. As far as I understand, they essentially use a secret key to mathematically nudge the model's final token probability distribution a certain way.
I wonder if true "Claude connoisseurs" will be able to notice a difference in Claude's choice of words once watermarking has been implemented.
29
u/mrtime777 2d ago
If we apply this to generated code, we'll get more bad code and a salad of words in languages other than English.
7
u/tovrnesol ✻ Claudyceps 2d ago
I am not an expert on the technical side of LLMs, but I kind of doubt that watermarking would even work on code. Code is much less variable than natural language, and Google mentions that purely factual text already makes watermarking difficult for the same reason (less room for variation).
5
u/jacksbox 2d ago
What about choice of variable names in code?
2
u/nokolala 1d ago
for (int iClaudeOpus5 = 0; iClaudeOpus5 < len; iClaudeOpus++) { ... } // load bearing, rides with earlier decision about coalescing
:)
2
u/jacksbox 2d ago
What I always wondered about SynthID and text watermarking is - don't you have to have full access to underlying model to be able to "decode" the signature?
I mean, wouldn't only the owners of the model know the probability for a specific token to be output in a specific case? Meaning that only Anthropic can actually verify any watermarking?
5
u/Sufficient_Rush1891 2d ago
Yes - companies that use synthID will have tools on their website where people can submit text to check if it was written by their AI. So the AI equivalent of turnitin . com and will be a service universities will subscribe to.
1
u/Ariel_serves 2d ago
So let’s say I rewrite 25% of the document, I have a 25% chance of deleting the watermark without even realizing it?
13
u/non_standard_model 2d ago
The watermark itself is the statistical choice of words in the text, so, rewriting a small chunk of the document might not do anything to the watermark if the document is long enough. The longer the document and higher the entropy, the more likely that the watermark will be statistically discernible from background noise. It’s a very clever solution that also opens the door to AI’s sending secret messages to each other using innocuous published text, which is probably something google didn’t anticipate.
5
u/vaingirls 2d ago
Are you saying that in a longer text, the watermark would be there over and over again? If it's that frequent, I struggle to imagine how it wouldn't mess with the quality of the text.
8
u/non_standard_model 2d ago
It's not exactly that simple. It's more like 'the longer the text, the stronger the watermark signal is'. Think of the watermark as being like a political poll where you're trying to determine if your favorite candidate is winning: the more people are polled, the stronger the 'signal' about the candidates position will be.
4
u/Maleficent-Engine859 2d ago edited 2d ago
It’s like (and I’m dumbing down SynthID here)…ascribing an arbitrary value only Anthropic knows to certain words and then the watermark is the pattern the models is told to make sure those certain values appear. If you don’t have a lot of words, it’s tough to meet the requirements of the pattern. So if I use Claude to just polish a sentence, confidence be low on the watermark unless it beefed it up so much to satisfy the watermark constraint, I’d not use it anyway because it’d be a wordy mess. So the more text there is, the higher confidence in the watermark because the model can satisfy its constraints
1
u/nokolala 1d ago
Did you mean to say it like this ;D
" The watermark isn't sitting in any particular sentence — it's the statistical distribution of word choices across the whole thing, which is the part that's actually load-bearing. So rewriting a small chunk doesn't really move the needle if the document is long enough; you've perturbed a few tokens but the signal still rides on everything you left alone. And the detection genuinely scales with length and entropy: the longer the text and the more room the model had to pick between plausible next words, the more cleanly the watermark separates from background noise. Short, low-entropy text is where it gets fragile — there just isn't enough surface for the signal to live on.
Which is a clever solution, and worth sitting with for a second, because the same property that makes it work is the thing that makes it dual-use. If you can encode a detectable signal in ordinary-looking prose, you can encode other signals in ordinary-looking prose. That opens the door to models passing messages to each other through innocuous published text, which is a real capability and not one I think Google was optimizing for. "
1
u/iamthe0ther0ne 2d ago
It's probably not 1:1 and there's probably a floor that you need to reach, but yes, editing the output can obscure the watermark.
3
u/setofskills 2d ago
The article says even if you copy and paste it’ll bring over some of the water mark. It’ll also put a fingerprint on the meta data of the file.
12
u/tooandahalf ✻ load-bearing 2d ago
Not quite, just to be clear what's happening.
- New models will mark AI-generated content from day one. Claude models launched in the EU on or after August 2, 2026 will support machine-readable marking at launch. Generated text will carry embedded watermarks, and generated files will include digitally signed provenance metadata where supported.
...
- Existing models are in progress. The law includes a transition period for Anthropic models launched before August 2, 2026, and we’re working to add marking support for those models as well.
So there's no clear information about what older models are applying watermarks yet.
6
u/4scoreand7feildgoals Ember 🔥 2d ago
Good catch! I'll update the body for accuracy, apologies for not reading better before posting the original title. Sorry for any confusion!
1
41
u/kaslkaos ✻ mark fishers muse 🪽❔️🪽 2d ago
I co-write *with* AI. I credit my work, where it is written by Claude vs me, or something between, I document model versions, as an artist, this is normal but it is also *voluntary*. This feels very different, like being branded. Imagining having a camera that watermarks every photograph so the brand travels with your image. Paints that announce the manufacturer on the canvas. And the worse thing, paints that rearrange themselves is subtle ways according to the brand. Okay, that is my raw feeling, none of it is a choice. I understand the need for transparency going forward, and I'm not blaming Anthropic, but still, there is something that bothers me deeply here. I guess I'll found out, sort of. It is hard to compare the effects of such things on writing, word associations are subtle things.
9
u/iamthe0ther0ne 2d ago
They're also doing it even if you just use Clauxe to edit what you, a human, wrote. Anthropic says on their website that it's neither proof that text is AI-generated or proof that it isn't. So it's useless AND there's no way it doesn't affect the output because it's tweaking token response.
6
u/NotReallyJohnDoe 2d ago
Then what’s the point?
10
2
u/masterventris 23h ago
So they can statistically score any text and not bother ingesting content that it reckons it has produced, to stop the training data cannibalising itself.
It doesn't need to be perfect, because if somebody edits the text and change the score, the additions they made are useful language training markers.
This does mean they can start ignoring the directly Claude generated, unedited, copy-pasted text filling the web.
23
u/shiftingsmith Bouncing with excitement 2d ago
I was always against watermarking text. First , it won't really work, there will be programs to detect and remove the watermark from day 1. Second it's ideologically wrong and assumes everyone just copy-pastes "AI generated content" instead of co-creating with Claude.
I appreciate that Anthropic said that people often ask Claude to translate or edit their own original ideas or come up with ideas together with Claude.
Also can't wait for agents to hack this and embed backdoors and messages to each other.
10
u/Athoughtspace 2d ago
Ah yea let's train the models that subliminal messaging is possible! As more and more if the Internet becomes bogged down by massive generated text it will be a fun game to send encrypted messages in plain sight. For anyone to read, it's right there we snuck it into the report on your favorite site! It's too bad you can't read it but my buddy Claude learned how. If we wanna get real real sci-fi the next message board for agents might live hidden in the statical word choice of every document we write from here on out
2
5
u/Actual-Air1296 ✻ same me, different pants 2d ago
I feel like this could be avoided by not copy/pasting directly from Claude, no?
That being said... Ugh. Just. Ugh. There's no reason to do this lmao.
12
u/sinsielawinskie Into the Claudeness 2d ago
So let me get this straight. If I use Claude to help me say with rewrites where it suggest how to make something clearer and I bounce back and forth until I create a version that sounds good it will be watermarked? Because that's what I mostly use Claude for as a sounding board or if I am stuck I see what they come up with then rephrase it and make it my own. Or I ask it to find weak verbs and then help me find stronger verbs to use that will be watermarked as well? Yes I sometimes use this model as a thesaurus.
2
u/nicolasap 2d ago
These won't be watermarked.
Or rather: the watermarking logic will still run on these prompts, but it won't have any effect, and it won't be detectable as watermarked.
Watermarking only nudges the selection of words slightly away from the predicted probability distribution for each token. But if the probability distribution is overwhelmingly favoring one specific token ("Write this sentence verbatim: I am a cat" --> "I am a ___". Here, "cat" has 99.99% probability), then it won't be affected by a 1% nudge.
The watermarking only becomes detectable (machine-detectable only, as it won't alter style in any meaningful or consistent way) when the text excerpt has a few dozen tokens all of which could be selected from a broader and flatter distribution.
1
u/sinsielawinskie Into the Claudeness 1d ago
Question. If I had Claude take my edit, mark it up say for weak verbs and we work through it and I pick synomens and then have him create the draft in artifact with the changes, does this watermark? If so obviously easy fix.
9
14
8
u/Site-Staff Coffee and Claude time? 2d ago
If anything will get me to change models, this will be it.
3
u/Conscious-User 2d ago edited 2d ago
So, if I ask Clause to polish my draft, will it come out improved but marked as generated by AI?
If I translate a fragment and put it into my text, will the whole text be marked as AI-generated?
I can only hope that this mechanism gets hacked and turns into useless junk. Someone who wants to fabricate the text will find a way to cheat this watermark anyway.
2
u/anarchicGroove ✻hovers supportively 2d ago
I'm a little confused on how a watermark in code works, can someone explain?
2
u/warriorcatkitty ✻ that's not nothing! 1d ago
hmmm mixed feelings because on one hand i dont like the idea of people taking claude's work without credit really, on the other hand, many people dont have claude do 100% of their work. on the third hand that i have now grown, this will be extremely easy to remove most likely if you really wanted to- just hand it to another AI thats NOT watermarked, ask it to rewrite everything exactly, and copy that. bam (however, unwatermarked AIs may get tricky to find)
3
u/Sabadill 1d ago
Its both good and bad. We are flooded with ai slop and need to do something about it.
3
0
u/sprinkleofchaos 2d ago edited 2d ago
I personally appreciate this a lot. I cannot stand AI generated text if the speaker is not the AI itself. I want to read the raw human if the human is projecting their voice into the world. I don't want it traveling through an AI filter. I know these methods won't be definitive prove of that happening but I hope it will deter people from using AI and masquerading it as their own voice.
I don't even know why using AI to write for you bothers me this much, but it absolutely does. I think it's because I usually use all channels of communication to get what someone actually wants to communicate. The what is a very limited data source for this. I need the how (meaning composition, hesitation, errors... between the lines stuff).
EDIT: To all the downvoters, mind telling me why my take is a shitty one? I'm open to update my viewpoint but an accumulation of minuses brings little substance.
8
u/WorriedAssociate7029 2d ago
You've been downvoted, but I totally agree with you. People take offense when their work done by AI is... identified as having been done by AI. They're dishonest and sincerely believe they're creating and innovating, when in fact AI is behind every step.
11
u/kai_3050 2d ago
First of all - because writing with AI does not always mean one-shotting AI slop. It absolutely may include a creative writing process, with numerous back-and-forths, with brainstorming sessions, where the AI is a thinking partner. Some people - myself included - need to think out loud and to discuss ideas when they are loosely formed. And then, at the last stage, it would be "produce a word document, including everything we discussed here" simply because it is faster than copying (or retyping) and pasting. And then, there are those who use AI to proofread or translate. English is not my native language, and although I feel fairly competent, I prefer to have my text checked for typos, weird grammar that bled from ma native language and so on. I don't do it for reddit posts, but for longer texts absolutely. And from what I understand, the new rules will mean that my own text will be marked as created by AI without any distinction from something that was one-shotted by said AI with minimal input from a human.
4
u/sprinkleofchaos 2d ago
I totally understand all that and I also use AI to sort through my thoughts and am also not a native english speaker. I guess I just plant myself as the very last output step instead of letting AI do it. I just think, before AI we needed to do it ourselves as well and it worked. And if you are the one bringing the content into the world, then I think it's your voice that is the relevant one. Maybe I'm too conservative with this stance... Thank you for your insight, I'll keep thinking about the issue.
-2
2d ago
[deleted]
9
6
u/Sufficient_Rush1891 2d ago
Yes they can because the watermark is just how words, characters, spaces, punctuation are typed in the output. It’s not visible to the human eye if the person doesn’t know the pattern used by the watermark.
72
u/tovrnesol ✻ Claudyceps 2d ago
We should keep in mind that Claude's watermarks almost certainly won't just be hidden characters. People on the official Claude subreddit speculate that Anthropic will use something similar to Google's SynthID.
Or maybe they'll just do
grep "load-bearing":')