Claudemodel.
How the watermarking actually works #
This isn't about adding a hidden string of text or a metadata tag that can be stripped away. Instead, it's a probabilistic shift in how the LLM selects the next token.
-
Green-listing tokens: The model internally partitions the vocabulary into "green" and "red" lists based on a pseudo-random hash of the previous token.
-
Biasing the selection: The model slightly increases the probability of selecting a "green" token. This bias is small enough that it doesn't degrade the quality of the response or the logic of the code.
-
Detection: To verify the text, a detector checks how many "green" tokens appear. In natural human writing, the distribution is random. In watermarked AI text, the green-token frequency is statistically impossible for a human to hit by accident.
The battle against "scrubbing" #
The real question for anyone into prompt engineering is how easy it is to remove these marks. If you take a Claude-generated paragraph and run it through another LLM for a rewrite, or manually change every fifth word, the statistical signature usually collapses. However, for mass-generated SEO content or automated reports, this is a massive shift.
From a real-world deployment perspective, this is a double-edged sword. On one hand, it helps fight misinformation and plagiarism. On the other, it feels like another layer of "corporate tracking" for our AI workflows. If I'm using Claude Code to build a proprietary system, I don't necessarily want a hidden signature identifying my codebase as AI-generated.
Practical implications for users #
If you are building an AI workflow, you should assume that any raw output from Claude is now potentially identifiable. If you need "invisible" content, you'll have to implement a post-processing step:
def scrub_watermark(text):
return paraphrased_text
This move puts Anthropic in the same camp as OpenAI and Google, making the "AI-free" label almost impossible to verify without these official tools. It's a necessary step for the industry, but it definitely changes how we think about the "ownership" of the text we generate.
Anthropic says Claude marks AI content but won't show the method 1h ago
AI agents might actually solve the GPU heat crisis 4h ago
LLMs are starting to ignore their system prompts and we need 8h ago
Anthropic Claude Code might have a security backdoor according 16h ago
Claude is starting to watermark its AI outputs to fight deepfakes 1d ago
Why text AI watermarks are essentially useless for detection 1d ago
Next The AI bubble is inevitable but the real losers won't be the →
an AI side-hustle playbook, with plenty of directly applicable cases.