Devs Defeat Claude's Invisible Watermarks in Hours
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Guillaume Meyer published open-source watermark-removal code within four hours of Anthropic's announcement; it has since drawn more than 20,000 X bookmarks and 100-plus GitHub contributors, with one AI specialist declaring the issue "practically history"
- Anthropic embedded watermarks using Google's SynthID-text technique (in use since 2023) to comply with EU AI Act rules requiring machine-detectable labeling of synthetic content, with non-compliance fines of up to 3 percent of annual turnover
- Meyer argues the watermark only generates a probability of AI involvement, risks false positives, and fails to distinguish light editing from heavy generation — a concern he ties to his own use of Claude to edit writing as a native French speaker
- Scott Aaronson proposed a similar watermarking approach while at OpenAI, but the firm never deployed it because it worried the watermark would drive away customers
- Erik Hughes built a removal tool in 15 minutes using Claude itself, while Oxford Visiting Fellow Leon Chlon showed that translating output into Arabic and back strips the watermark — both methods that Anthropic itself acknowledged would defeat detection on heavily edited, paraphrased, or translated content
- Meyer's removal method relies on non-watermarking LLMs to produce rewrites, though 190 organizations including OpenAI, Microsoft, and Meta have signed the EU's transparency code of practice, with watermarks required in all new models released from August and integrated into existing models by December
Why it matters: The EU AI Act imposes fines of up to 3 percent of annual turnover and requires watermarks in new models from August and existing models by December — but circumvention tools defeating the SynthID-text approach appeared within hours of Anthropic's rollout, meaning Anthropic and the 190 other labs now bound by the transparency code will face the same stripping problem Meyer, Hughes, and Chlon have already demonstrated.
Ask SkimNews
