The Claude watermark is a hidden statistical pattern that newer Anthropic models weave into the text they generate. There are no characters you can see, no tag in the file, and no change to what the words actually say. If the vocabulary here is new, our AI glossary covers the terms this post leans on. It exists so that someone holding a secret key can later test whether a passage was likely produced by Claude. That one sentence answers most of what people search for, and it leaves four harder questions behind it.
Key takeaways
- The mark is a pattern in word choice, not a hidden character. Find and replace does nothing to it, and copying and pasting carries it along.
- Only models launched on or after 2 August 2026 mark text. Anthropic currently names Fable 5.1 and Mythos 5.1.
- Detection needs Anthropic's private key, so no school, employer or browser extension can check a piece of text today.
- A detected mark says a model was involved. It cannot tell writing from heavy editing, and Anthropic says so in its own FAQ.
What the Claude Watermark Actually Is#
The mark lives in word choice, and only in word choice. When a large language model writes, it picks each next word from a short list of plausible candidates. According to Anthropic (2026), the sentence "The weather today was cold and" is very unlikely to continue with "sugary", but "overcast" and "grey" are both fine, and normally an arbitrary random number settles which one appears.
Watermarking changes where that randomness comes from. The model derives the choice from a secret key combined with a few of the words immediately before it. The result still reads as random to a person, because it is. This is because the key does not push Claude toward one favourite word across all of its output, and the preceding words feed into every calculation.
The practical consequence is that this mark survives things a hidden character would not. Copying and pasting carries it along, and Anthropic states it may persist through some editing. Find and replace does nothing to it, because there is no character to find.
Only Two Models Carry It Right Now#
This is the detail most early coverage got wrong. Marking applies to Claude models launched on or after 2 August 2026, and not to anything released before that date. Anthropic's Help Center currently names Fable 5.1 and Mythos 5.1 as the supported models. Everything older is being retrofitted during a legal transition period that closes on 2 December 2026.
| Model generation | Marks text? | Notes |
|---|---|---|
| Launched before 2 Aug 2026 | Not yet | Retrofit in progress, deadline 2 Dec 2026 |
| Fable 5.1, Mythos 5.1 | Yes | Marking active from launch |
| Future Claude releases | Yes | Marking is applied at the model level |
Table: which Claude models mark text as of 3 September 2026. Source: Anthropic Help Center, "How Claude marks AI-generated content."
Because marking sits in the model rather than in an account setting, it reaches every surface at once. Anthropic confirms the mark applies across the API, the Claude apps, Claude Code, Claude Cowork and Claude Tag, and through AWS, Google Cloud and Microsoft Foundry, worldwide rather than only in Europe.
A Law Started This, Not a Product Decision#
Anthropic did not choose the timing. Article 50 of the EU AI Act became applicable on 2 August 2026, and it requires providers of generative AI systems to mark their output in a machine readable way. The European Commission published a Code of Practice on Transparency of AI-Generated Content on 10 June 2026 to translate that requirement into concrete practice, and roughly 190 organisations signed it in July, including OpenAI, Google, Microsoft, Meta and Mistral.
Anthropic applies the mark worldwide rather than to European traffic only. The company's stated reason is that it does not yet have a durable way to scope marking by region, since marking lives in the model's sampling behaviour. Once a model marks text, it marks all of it, everywhere.
Article 50 also decides who carries the duty, and that answer surprises people. The marking obligation sits on the provider of the AI system, not on the person typing the prompt. The only disclosure duty that reaches an individual applies narrowly to unedited AI generated text published on matters of public interest inside the EU.
Almost Nobody Can Check for It#
Detection requires the secret key, and Anthropic has kept it private. The detection API exists in a private preview limited to organisations with a legal reason to verify compliance, such as regulators, law enforcement, media, fact checkers, independent researchers, educational organisations and EU civil society groups. Enterprises with their own Article 50 obligations can also apply.
For everyone else there is no tool. A school cannot check a submitted essay, an employer cannot check a report, and no browser extension can read this mark no matter what it claims. Anthropic has said access will widen over time without committing to a date.
That absence cuts both ways, and this is the part worth sitting with. Nobody can currently prove a text is watermarked, and nobody can prove it is not. Both false confidence and false accusation have room to grow in that gap, and they will arrive together the moment detection opens up.
One Vendor Marks Text, and It Is Not the One You Expect#
Anthropic has drawn the most scrutiny, and it is not the only company doing this. Google has run SynthID Text inside Gemini since 2024, published the method in Nature, and attracted almost no attention for it. Anthropic has confirmed that its own watermark is a version of that same published scheme, which traces back to a 2022 proposal by Scott Aaronson.
OpenAI is the interesting case. Reporting in 2024 established that the company had a working text watermark, with internally measured detection of long ChatGPT output at around 99.9 percent, and chose not to ship it. The reasons given were fear of false accusations and concern that non-native English speakers would be flagged disproportionately. Open weight models, the kind covered in our guide to free local AI models, apply no mark at all, and nobody has proposed a mechanism that would force them to.
Understanding the Claude watermark comes down to one distinction that the rest of this series builds on. It is a provenance signal about a model's involvement, not a verdict about who did the thinking. Anthropic states this plainly in its own FAQ, months before any detector reaches the people most likely to misread one. Treating the mark as an authorship verdict is where the real damage will happen, and the people best placed to prevent it are the ones reading about it now rather than during an accusation.
Common questions#
Does watermarking make Claude's output worse?
No. Anthropic reports no effect on the content, creativity or readability of what Claude writes. The SynthID Text paper the method is based on tested this by serving a watermarked model to part of Gemini's traffic and found no statistically significant difference in user ratings.
Does it cost more, or slow the model down?
No. Watermarking produces no extra tokens, so the model is the same price to serve and to use, and Anthropic describes the effect on speed as negligible.
Can a watermark be traced back to me?
No. Anthropic states that nothing in the watermark or its key allows anyone to recover information about a user, an organisation or a conversation. The mark identifies the model, not the person who typed the prompt.
Sources#
- How Claude's text watermark works (Anthropic, 14 Aug 2026, updated 1 Sep 2026)
- How Claude marks AI-generated content (Anthropic Help Center)
- EU AI Act, Article 50: Transparency obligations
- Signing the Code of Practice on Transparency of AI-generated Content (European Commission)
- Scalable watermarking for identifying large language model outputs (Nature, 2024)
- My AI Safety Lecture for UT Effective Altruism (Scott Aaronson, 2022)
- Everything I could find out about AI text watermarks (Kirill Balakhonov, 16 Aug 2026)
- SynthID (Google DeepMind)
Last reviewed: 3 September 2026. The list of marking models and the status of the detection API are both moving; Anthropic updates its Help Center article as models are retrofitted. Re-checked monthly until the December 2026 transition deadline passes.