OpenAI to add invisible watermark to ChatGPT text in the EU

OpenAI said it will begin adding an invisible watermark to text generated by ChatGPT and Codex in the European Union, to comply with the EU AI Act. The law’s transparency rules, which took effect on August 2, require AI companies to mark AI-generated content in a way other systems can identify. OpenAI said the watermark will roll out over the coming weeks to eligible ChatGPT and Codex users on all plans, but only in the EU. Developers using OpenAI’s API anywhere in the world can turn it on for select models starting today; it is off by default, and OpenAI said it is not making text watermarking a global default at launch.

The watermark is not a visible symbol. It works by subtly shaping the model’s word choices, leaving a pattern readers cannot see but a detector can pick up. Because it lives in the words themselves, it travels with the text when copied and pasted. OpenAI said the watermark does not identify the user, and that it saw no meaningful change in its models’ performance with the feature switched on.

OpenAI also published a technical report for its method, called textGrain, co-written with researchers from the University of Pennsylvania and Yale. The report walks through an example of using a secret key to sort next-word predictions to finish a sentence; add hundreds of these nudges together, and a detector can spot AI-generated content using only the text and the key.

Whether the watermark survives editing is a separate question, and OpenAI’s own tests suggest it does not hold up well. In one test, replacing 10% of words with synonyms dropped detection from about 92% to 66%. The company also said short passages, math answers, and translated text are harder to detect. “These limitations contribute to our decision to provide initial detector access only to approved researchers and expert organizations, who can help us evaluate reliability and responsible uses,” the company said. OpenAI also cautioned that a missing watermark “does not prove human authorship” — the text could be too short or too heavily edited, or it could come from another company’s AI. “[Watermarks] can indicate that an OpenAI system generated or processed part of a passage, but not how much human judgment, editing, or creativity went into it,” the company said.

The announcement comes two months after Anthropic said it would watermark text generated by Claude, a move it applied worldwide — a decision that drew backlash from some Claude users, who argued they had supplied “the instructions, context, decisions” while Claude was just “the tool.” OpenAI had built a text watermark before but held off on releasing it, partly over concerns that users would switch to rivals that did not watermark, The Wall Street Journal reported in 2024. Anthropic, Google, Meta, Microsoft, and OpenAI are among the companies that have committed to following the EU’s code of practice on AI-generated content.

Why it matters

The EU’s transparency rules are pushing AI labs to build detection infrastructure they had previously avoided, even as OpenAI’s own tests show that infrastructure can be defeated with light editing.