Google SynthID Detector Public Launch

Google's framing is that anyone can check if media was made with AI from Google or its partners ^[1], but the company is explicit that the tool only confirms the presence of a SynthID watermark, not the absence of AI involvement - a negative result does not prove a file is human-made ^[2]. Analysts describe the distinction bluntly: SynthID "works more like a barcode scanner than a lie detector" ^[3]- it reads a label when one exists and says nothing useful when it doesn't. That gap showed up immediately in hands-on testing: the detector correctly identified ChatGPT and Gemini images, but returned a flat "no AI watermarks detected" on a clearly AI-made puppy video simply because the generator wasn't a SynthID partner ^[4]. Technically, the watermark is embedded directly into an image's pixels, into every frame of a video, into the audio spectrogram before it's converted back to a waveform, or into the probability distribution of next-word choices for text - a design meant to survive ordinary edits like compression, trimming, and filtering, per Google DeepMind's own technical explainer. That makes the detector's blind spot a coverage problem - which companies opted in - rather than a technical flaw in the watermark itself.

The detector currently recognizes marks only from Google, OpenAI, Nvidia, and Kakao; Apple is "coming soon" with no release date, even though an Apple account is already one of the three sign-in options required to use the tool ^[5][8]. Everything outside that club is effectively invisible: a Grok-generated image went completely undetected in testing ^[7], and neither xAI's Grok nor Anthropic's Claude watermark their output at all ^[6]. Meta isn't a holdout waiting to join, either - it runs its own separate, incompatible AI-detection system, and a Reuters investigation cited by Gizmodo found that system "sometimes fails to flag content that was created with Meta's AI tools," particularly cropped images ^[7]. Google itself concedes the fragmentation won't resolve quickly: building industry-wide standards takes time because image, audio, and video all carry different technical requirements ^[6].

Google's own robustness testing found watermarked images withstood 300 successive rounds of randomized compression and resizing, but became undetectable once those already-degraded images were cropped by roughly 20 percent ^[8]. That's a narrow survival window, and academic security researchers have already found a way through it: a team presenting MarkNull at USENIX Security 2026 demonstrated watermark-removal techniques that defeat SynthID while preserving image quality ^[3]. The skepticism isn't confined to a conference paper - Reddit discussions describing the watermark as trivially stripped via a simple screenshot-and-upscale trick, plus talk of building a dedicated removal tool, were already circulating before this week's public rollout even reached a general audience.

The public tool caps usage at roughly ten checks a day per signed-in user, combined across images, video, and audio ^[8], and access itself requires signing in with a Google, OpenAI, or Apple account ^[5]. Combined with the partner-only coverage and the cropping vulnerability, the launch reads less like a finished authentication layer for the internet and more like a narrow, rate-limited first checkpoint - useful for confirming when Google-ecosystem AI tools were involved, largely uninformative for everything else.

Google and DeepMind's own announcements framed the launch as an industry-wide transparency milestone, and that framing traveled - a Japanese tech-news account picked up the story, describing it as the moment ordinary users can run their own fake-detection checks. The reception inside AI-builder communities was less celebratory. On generative-AI forums, the open question wasn't whether the tool works, but why Google is moving into deepfake detection at this scale and who else could realistically compete once it does - alongside a side debate over whether Europe's content-labeling rules are the real driver. Separately, skepticism about whether the watermark can be defeated predates this week's wider rollout entirely - a workaround culture that beat the global launch to the internet.