Anthropic launches Claude text watermarking

Claude's watermark is a version of Google DeepMind's SynthID-Text approach, published in Nature in 2024, and Anthropic has applied it automatically to every Claude model released after August 2, 2025 ^[1][11]. Anthropic says watermarking has no effect on output quality, creativity, or readability, and a watermarked response reads as indistinguishable from an unwatermarked one ^[3].

Under the hood, the method works by nudging which word gets picked at each generation step rather than altering anything a reader can see: a secret key, run against the recent context, effectively holds a knockout tournament among the plausible next-words at every step, and which words win reshuffles continuously so no single word or phrase is ever permanently favored. A detector that holds the same key can rerun that same scoring process over a piece of text and recover the statistical pattern it left behind. Google's own testing of this approach at scale, across roughly 20 million live Gemini responses, found only about a hundredth of a percentage point difference in thumbs-up rate and a roughly 0.5% increase in latency versus unwatermarked generation - a data point that helps explain why Anthropic can claim the watermark doesn't touch output quality.

The signal isn't uniform, though: short or fact-heavy text gives the model very few alternative word choices to encode the pattern into, so detection is weaker on that kind of output ^[3]. Editing resilience follows a related logic - the watermark travels with text that's copied and pasted, and light editing probably won't remove it, but a complete rewrite in which every word is replaced will strip it entirely ^[3]. TechCrunch frames the light-editing case directly: if content has only been lightly edited, nearly all the words are the human author's own, and there's very little, if anything, for the watermark to attach to ^[3].

The trigger is regulatory: EU AI Act Article 50 requires providers serving the EU market to mark AI-generated content in machine-readable form, with fines of up to €15 million or 3% of global turnover for non-compliance, and that requirement became enforceable on August 2, 2026 ^[6]. Anthropic was one of roughly 190 signatories to the EU Code of Practice on Transparency of AI-Generated Content, signed in July 2026, ahead of that deadline ^[2]. Rather than scope the watermark to EU traffic, Anthropic rolled it out worldwide - the Claude platform API, Claude.ai, Claude Code, Claude Cowork, Claude Tag, and deployments through AWS, Google Cloud, and Microsoft Foundry - with no opt-out for any user ^[2]. The technical cutover predates the announcement: every Claude model released after August 2, 2025 already generates watermarked text by default, with older models gaining support in the coming months ^[1][5].

A detected watermark is a probability, not a verdict. the-decoder.com frames Anthropic's forthcoming detection API - still being finalized - as useful for flagging likely AI involvement, but explicit about its limits: it can only flag that Claude was likely involved in creating a text, not whether Claude wrote the whole thing or just edited it heavily, and not whether a text came from a human or a different AI model at all ^[5]. That gap between what the mark proves and what people want it to prove is already generating friction - critics warn schools, employers, and platforms could treat a flagged result as conclusive evidence despite Anthropic's own hedging that a mark only shows content 'may have been processed by Claude' ^[4]. Reliability cuts the other way too: text from Claude models released before August 2, 2025, or text that's been heavily rewritten, may carry no detectable mark at all, which limits the system as a tool for ruling AI writing out ^[10].

The detection API that lets third parties check Claude's watermark doubles as a tool attackers can use to defeat it. Reporting describes services stripping the mark for roughly four cents per pass, effectively using the detector as a feedback loop to hunt for a clean rewrite ^[9]. Within a morning of Anthropic's August 15 technical writeup, an MIT-licensed 'watermarks-remover' project on GitHub had already crossed 10,000 stars, adding support for stripping Claude, SynthID-Text, and OpenAI provenance marks alongside C2PA and EXIF file metadata - a fast, visible signal of how much demand exists for evasion tooling. Technical estimates circulating among users put the actual rewrite threshold at around a quarter of a document: roughly 25% of the text needs to be replaced before the underlying token pattern breaks down enough to erase the signal, and doing that rewrite with a different model just embeds that model's own watermark instead. A wave of fraudulent or malware-laden 'watermark removal' apps has also emerged to capitalize on that demand, a problem expected to worsen as more providers adopt watermarking ^[8].

The rollout has produced real user backlash: TechCrunch reported dozens of users on X claiming to cancel Claude subscriptions over the watermarking rollout ^[2], with Reddit split between users who see it as unfairly implicating light editors, such as a student who used Claude to reorganize a paragraph, and users who argue that objecting to detection is itself suspicious ^[4]. Fortune frames the underlying tension as a response to 'AI slop' backlash that risks conflating light, legitimate use with mass low-quality generation - a flat 'AI' label 'risks treating someone generating a thousand fake news videos the same as a writer using Claude to clean up a paragraph' ^[7], the same tension that drove some users to call the policy an unfair tool for catching them 'cheating' at school or work ^[4].