AI watermarking doesn't visibly alter text. Instead, it uses a secret key to slightly boost the probability of certain words appearing in a sequence. This creates a statistically significant pattern that can only be detected by a tool with access to the original model and the secret key.

Effective AI detection frames the problem as large-scale authorship identification. By training on paired examples of human versus LLM-generated text on the same prompts, detection models learn to recognize the unique statistical "smell" or stylistic signature of each major AI model.

Claude's watermark is a subtle pattern of word choices, not hidden characters. To bypass it, provide your own draft and instruct the AI to only fix grammar and punctuation, explicitly telling it not to rewrite the content. Anthropic confirms this prevents a detectable watermark.

While making detection tools public seems beneficial, it introduces a significant risk. Adversaries can repeatedly query the detector with different inputs to learn its patterns and eventually reverse-engineer the secret key. This would allow them to either remove watermarks or fool that specific detector.

Anthropic's Claude is weaving invisible watermarks directly into its text output, making simple copy-pasting detectable as AI-written. This fundamentally changes the tool's use case for marketers, repositioning it from a final content generator to an assistant for creating initial drafts or first-pass edits that require significant human revision.

DeepMind’s SynthID Bio embeds watermarks in protein sequences by substituting certain amino acids with functionally similar ones (e.g., leucine for isoleucine). This is analogous to choosing a synonym in text. The change is imperceptible to the protein's function but detectable as a watermarked pattern.

Despite being a key compliance tool for the EU AI Act, current text watermarking technology is fragile. The statistical fingerprints embedded in AI-generated text can be removed with little effort by running the content through readily available paraphrasing tools, undermining the robustness requirements of the law.

Watermarking isn't a one-size-fits-all solution. High-dimensional data like images (millions of pixels) offers ample space to hide an imperceptible signal. In contrast, low-dimensional data like text requires a completely different method based on biasing word choice to avoid altering its meaning.

The AI detection arms race now includes "humanizers": specialized LLMs that rewrite AI-generated text to evade detection. This is the modern, sophisticated version of the old plagiarism tactic of running copied text through a thesaurus to change just enough keywords to fool detectors and teachers.