Policy · TechCrunch ·

OpenAI adds invisible watermarks to ChatGPT text output in the EU

OpenAI adds invisible watermarks to ChatGPT and Codex in the EU to comply with the AI Act. The textGrain method shapes word choices subtly — but editing can defeat it.

Based on reporting by TechCrunch — analysis by dalili

OpenAI announced it will begin adding invisible watermarks to text generated by ChatGPT and Codex in the European Union, a move to comply with the EU AI Act's transparency rules that took effect on August 2.

The watermark is not a visible symbol but works by subtly shaping the model's word choices, leaving a statistical pattern that readers cannot see but a detector can identify. Because it lives in the words themselves, it travels with the text when copied and pasted. OpenAI says the watermark does not identify the user, and that it observed no meaningful change in model performance with it enabled.

The company published a technical report for its method, called textGrain, co-written with researchers from the University of Pennsylvania and Yale. The approach uses a secret key to sort next-word predictions, making hundreds of tiny nudges that together create a detectable signature. The watermark will roll out to EU users over the coming weeks; API developers worldwide can enable it today for select models.

OpenAI acknowledged the watermark's limitations. Tests show that replacing just 10% of words with synonyms drops detection from about 92% to 66%. Short passages, math answers, and translated text are harder to detect. The company said a missing watermark "does not prove human authorship." Anthropic began watermarking Claude text globally two months ago, drawing backlash from users who argued their own instructions and context deserved credit.

Key takeaways

  • Invisible watermark uses textGrain method to shape word choices
  • Rolling out to EU ChatGPT/Codex users in coming weeks
  • 10% word replacement drops detection from 92% to 66%
  • Anthropic already watermarking Claude text globally

Why it matters

The EU AI Act's transparency requirements are now producing real technical changes, not just policy documents. But OpenAI's own numbers tell the uncomfortable truth: a 10% edit drops detection by a quarter. Watermarks are a compliance tool, not a detection solution. The gap between what regulators require and what technology can deliver will define the next phase of AI governance.

Related

  1. Ars Technica ·

    Meta Removes 'Train' From Commercial Terms After AI Scraping Backlash

  2. TechCrunch ·

    Anthropic Proposes AI Safety Bill With Catastrophic Risk Thresholds