{"slug": "text-watermarking-how-it-works", "title": "Text Watermarking: How It Works", "summary": "AI labs can embed invisible watermarks in generated text by using a secret key to steer word choices, enabling later detection of AI-authored content. The watermark is only detectable with the key, and rewriting the text removes it, while light editing does not. Services like Pangram cannot detect these watermarks because they lack the keys.", "body_md": "A secret key held by the AI lab steers word choice, deliberately choosing less likely words at certain places to allow later detection. The following is a simplified demo.\n\nThe highlighted words are where ```\noverrode the model's top word\nchoice. Only the key holder can\nrecompute these weights and prove the pattern is there; to everyone else the highlighted words look like ordinary chance, and the watermark is invisible. Click a highlighted word to see the choices it was picked from.\n```\n\nEvery steered word changes what comes next, just like real generation. The faintly shaded text after each highlighted word follows from that choice.\n\nFor simplicity, in this demo the key only steers six \"choice points\" in this passage. In reality, AI watermarking uses key-based calculation for every single word.\n\nThe g number on each word is its *watermark weight* — how much the key favours it. But the calculation is not simply \"highest weight wins\", it's in proportion to its probability.\n\n**No key, no watermark.** This is the same passage written with no watermark key involved: the model simply takes its most likely word. There is no watermark for anyone to find later.\n\nA watermark detector gets only the provided text. Each word is scored with the detector's secret watermark key. It re-derives each word's weight from the words in front of it. A real detector does that for every word; this demo does it for the six words at the choice points above. The text scores high only under the key that wrote it. A high score indicates a watermark match.\n\nA single weight proves nothing, because steering only tilts the average. A real detector counts every word in the text, and the average is worth trusting only because the sample is large.\n\nNo. The watermark only lives in words the model chose. Deleting a paragraph, reordering sections or trimming a sentence chooses no new words.\n\nStill nothing a watermark detector can use. Those few words may well be the model's, and they may well carry weights under its key. But detection is an average over every scored word in the text, and a handful of words cannot move the average of several hundred.\n\nYes. The watermark is the word choices the model made, so rewriting the text yourself, or with an AI that does not watermark its output will remove it.\n\nLight editing will not do it. Swap a few words and most of the weights are unchanged, so the average barely moves.\n\nNo. Services like Pangram don't have the watermark keys used by AI labs. They've trained on AI output and look for various tells of AI writing to determine if a text is AI generated or not.", "url": "https://wpnews.pro/news/text-watermarking-how-it-works", "canonical_source": "https://watermarking.mochi.is", "published_at": "2026-08-18 04:48:14+00:00", "updated_at": "2026-08-18 05:10:58.556636+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-products", "ai-tools"], "entities": ["Pangram"], "alternates": {"html": "https://wpnews.pro/news/text-watermarking-how-it-works", "markdown": "https://wpnews.pro/news/text-watermarking-how-it-works.md", "text": "https://wpnews.pro/news/text-watermarking-how-it-works.txt", "jsonld": "https://wpnews.pro/news/text-watermarking-how-it-works.jsonld"}}