Anthropic has begun embedding an imperceptible, key-detectable signal into Claude's generated text — built on Google DeepMind's SynthID-Text, tracing back to a 2022 proposal by Scott Aaronson, and conceptually continuous with the green-list/soft-bias watermarking family formalized in the Kirchenbauer et al. 2023 ICML paper.
At low-stakes points in generation — where several next-word choices are equally valid — the watermark uses a secret key together with the preceding words to settle which word Claude picks. Detection later recomputes that same choice with the key, a form of keyed detection that needs no access to the model itself.
During generation, Claude reaches a point where multiple next-word choices are equally viable without changing meaning.
The watermarking system uses a secret key together with the words that came immediately before to settle which of the equally viable words is picked, instead of an arbitrary random number generator.
Claude outputs the selected word; to a reader, the choice looks like ordinary, unremarkable phrasing.
This key-plus-context selection repeats at every low-stakes point throughout generation, accumulating a consistent, imperceptible pattern.
To detect the watermark, a holder of the secret key recomputes, for a candidate text, what the key-driven choice would have been at each low-stakes point.
The recomputed pattern is compared against the candidate text; a strong, consistent match indicates the text was generated by Claude's watermarked output, while short text, factual/proofreading passages, code, math, or a fully rewritten passage yield a weak or absent signal.
Claude's production watermark did not emerge from nothing — it sits at the end of a documented technical chain.
Conceptually, Claude's approach belongs to the same family as the soft watermark variant described in Kirchenbauer et al.'s 2023 paper "A Watermark for Large Language Models" — both bias token selection toward a keyed, pseudorandomly-chosen subset rather than forbidding alternatives outright. Readers who want the full academic-paper knowledge graph, including the paper's statistical detection test and worked green-list/red-list example, can explore the companion article: A Watermark for Large Language Models – Interactive Knowledge Graph →
Anthropic implemented watermarking to comply with the EU AI Act. In July 2026, Anthropic and roughly 190 other organizations signed this voluntary code, whose marking requirement took effect on 2026-08-02.
Every entity below is derived directly from the companion RDF-Turtle file — 95 nodes, 214 links, zero orphans.
Query this knowledge graph on URIBurner. The editor opens on the canonical SAMPLE entity-type summary, scoped to the named graph this document would occupy once uploaded. Pick a recipe, edit freely, then run live or copy.
Reproduced verbatim. Execute loads the query into the workbench below and runs it live.
PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
SELECT ?type (SAMPLE(?s) AS ?sampleEntity) (SAMPLE(?label) AS ?sampleLabel) (COUNT(?s) AS ?entityCount)
WHERE {
GRAPH <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl> {
?s rdf:type ?type .
OPTIONAL { ?s rdfs:label|<http://schema.org/name> ?label }
}
}
GROUP BY ?type
ORDER BY DESC(?entityCount)PREFIX schema: <http://schema.org/>
SELECT ?q ?question ?answer
FROM <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl>
WHERE {
?q a schema:Question ;
schema:name ?question ;
schema:acceptedAnswer ?a .
?a schema:text ?answer .
}
ORDER BY ?questionPREFIX schema: <http://schema.org/>
PREFIX : <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl#>
SELECT ?term ?name
FROM <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl>
WHERE {
:glossarySection schema:hasDefinedTerm ?term .
OPTIONAL { ?term schema:name ?name }
}
ORDER BY ?termPREFIX schema: <http://schema.org/>
PREFIX : <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl#>
SELECT ?work ?workName ?basedOn
FROM <https://linkeddata.uriburner.com/DAV/demos/daas/claude-watermark-2026-claude_sonnet_5-1.ttl>
WHERE {
?work schema:isBasedOn ?basedOn ;
schema:name ?workName .
}
ORDER BY ?workName↪ A feature that embeds an imperceptible, algorithmically detectable signal into text generated by Claude, so machine-generated content can be identified with the right key.
↪ At 'low-stakes' generation steps, where several word choices work equally well, the watermark uses a secret key together with the preceding words to settle which word Claude picks, producing a pattern that is verifiable only with the key.
↪ To comply with the EU AI Act, specifically the EU Code of Practice on Transparency of AI-Generated Content that Anthropic and around 190 other organizations signed in July 2026, whose requirement took effect on 2026-08-02.
↪ Anthropic states it has a negligible impact on model speed and no practical impact on the quality or content of Claude's outputs; internal testing showed no impact on content, creativity, or readability.
↪ No. The watermark contains no identifying information and cannot be traced to a specific person, organization, or chat.
↪ It is built on Google DeepMind's SynthID-Text technique.
↪ SynthID-Text traces back to a 2022 watermarking proposal by computer scientist Scott Aaronson.
↪ Both belong to the same family of green-list/soft-bias watermarking methods: the paper's soft watermark variant adds a logit bias toward a pseudorandomly selected green-list of tokens, and Claude's production watermark uses the same underlying principle of biasing low-stakes token choices in a keyed, detectable way.
↪ It works poorly on small text samples with few word choices, on factual passages with limited alternative phrasings, and on proofreading tasks, since all of these leave little room for low-stakes word choice.
↪ No. Exact outputs such as mathematics and code resist watermarking because they leave little or no room for equally-viable word substitutions.
↪ Light editing may preserve the watermark, but a complete rewrite of the text eliminates it.
↪ No. Detection cannot distinguish between 'Claude wrote this' and 'Claude edited this'.
↪ No. The watermark cannot identify text written by other AI systems; it only detects Claude's own watermark pattern.
↪ Anthropic published the announcement on 2026-08-14.
Five terms are reused directly from the companion Kirchenbauer et al. knowledge graph rather than re-defined; seven are newly introduced by this document.
Deploying a watermarking scheme in a production system primarily to satisfy a regulatory transparency requirement, as distinct from watermarking motivated purely by research or misuse-mitigation goals.
European Union legislation regulating artificial intelligence, whose transparency obligations for AI-generated content are the compliance driver behind Claude's watermark.
A voluntary code implementing EU AI Act transparency obligations, signed by Anthropic and roughly 190 other organizations in July 2026, requiring AI providers to mark generated text as of 2026-08-02.
The subset of the vocabulary favored for sampling at a given generation step under the watermarking scheme.
The logit bias added to green-list tokens in the soft watermark variant, controlling the strength of the watermark signal.
Detecting a watermark by reproducing its embedding pattern using the same secret key that was used to embed it, without needing access to the model itself.
A point during text generation where multiple word choices work equally well without affecting meaning, making it a candidate for watermark signal embedding.
A keyed hash of the immediately preceding token used to pseudorandomly seed the green/red partition at each position, reproducible by anyone holding the secret key.
Fully rewriting watermarked text so that the original token choices, and therefore the embedded watermark signal, are no longer present.
A watermark variant that biases green-list token logits upward by delta rather than forbidding red-list tokens outright.
Google DeepMind's text watermarking technique, the direct technical basis for Claude's production watermark.
Embedding a signal into generated text that is invisible to humans but algorithmically detectable from a short span of tokens.
This knowledge graph infographic synthesizes Anthropic's announcement of Claude's production text watermark (anthropic.com/news/claude-text-watermark, 2026-08-14) with the academic green-list/soft-bias watermarking lineage already modeled in a companion knowledge graph on the URIBurner DaaS Weblog. The RDF-Turtle knowledge graph was generated using the kg-generator skill, reusing entity IRIs from the companion document rather than re-minting them, and rendered into this HTML infographic using the rdf-infographic-skill powered by claude-sonnet-5.
Technology Stack: