# Claude watermarks won't be visible to the eye but they will > Source: > Published: 2026-08-16 14:48:06+00:00 # Claude watermarks won't be visible to the eye but they will The core mechanism relies on manipulating the probability of the next token. Essentially, the model subtly biases its word choices—not enough to ruin the flow or change the meaning, but enough that a specialized decoder can recognize a mathematical pattern. If you're thinking about how to implement a similar AI workflow for your own custom models, this "statistical fingerprinting" is the gold standard right now. ## How the watermark actually functions The process happens during the sampling phase of the LLM agent. Rather than picking the most likely next word purely based on the prompt, the system applies a hidden mask. 1. **Token Selection:** The model identifies the top candidates for the next word. 2. **Probability Shifting:** A secret key is used to slightly nudge certain tokens over others. 3. **Pattern Embedding:** This creates a "signature" across a sequence of words. 4. **Verification:** A separate tool can analyze a piece of text and calculate the likelihood that this specific bias was applied, providing a confidence score that the text came from [Claude](/en/tags/claude/). From a prompt engineering perspective, this is fascinating because it happens at the architectural level, meaning no matter how much you tell the AI to "write like a human" or "avoid AI patterns," the watermark remains embedded in the token selection process. ## The trade-off between accuracy and detectability One of the biggest hurdles with this kind of deployment is the "accuracy tax." If you push the watermark too hard, the quality of the writing drops because the model is forced to pick the second or third-best word to satisfy the watermark pattern. If you make it too subtle, a user can bypass it by simply paraphrasing a few sentences or running the text through another LLM. Anthropic is positioning this as a way to provide a real-world solution for educators and publishers. For those looking for a practical tutorial on detecting AI, it's important to realize that these watermarks are only detectable by the company that owns the secret key. You can't just download a generic "watermark remover" and expect it to work perfectly. This shift suggests that the industry is moving away from "AI detectors" (which are notoriously unreliable) and toward "provenance markers" (which are mathematically verifiable). It's a much more robust approach to transparency in the era of generative AI. [Stop expecting LLMs to be databases because they are 9h ago](/en/news/6543/) [OpenAI is losing too many key people right before an IPO 16h ago](/en/news/6517/) [Most teenagers aren't actually obsessed with AI 1d ago](/en/news/6392/) [Can you actually make passive income from your dead code? 1d ago](/en/news/6377/) [Apple is reportedly teaming up with Alibaba to train a custom 1d ago](/en/news/6359/) [Anthropic investors are betting on a $2 trillion valuation for 2d ago](/en/news/6214/) [Next Stop letting LLMs write your content in that predictable →](/en/news/6572/)