WavMark: Watermarking for Audio Generation
Not on the map. Why?
Abstract (arXiv)
Recent breakthroughs in zero-shot voice synthesis have enabled imitating a speaker's voice using just a few seconds of recording while maintaining a high level of realism. Alongside its potential benefits, this powerful technology introduces notable risks, including voice fraud and speaker impersonation. Unlike the conventional approach of solely relying on passive methods for detecting synthetic data, watermarking presents a proactive and robust defence mechanism against these looming risks. This paper introduces an innovative audio watermarking framework that encodes up to 32 bits of watermark within a mere 1-second audio snippet. The watermark is imperceptible to human senses and exhibits strong resilience against various attacks. It can serve as an effective identifier for synthesized voices and holds potential for broader applications in audio copyright protection. Moreover, this framework boasts high flexibility, allowing for the combination of multiple watermark segments to achieve heightened robustness and expanded capacity. Utilizing 10 to 20-second audio as the host, our approach demonstrates an average Bit Error Rate (BER) of 0.48% across ten common attacks, a remarkable reduction of over 2800% in BER compared to the state-of-the-art watermarking tool. See https://aka.ms/wavmark for demos of our work.
Key facts. Cited by 50 papers in the map (data through 14 Oct 2026). Builds on 22 of its 50 references that are in the map. First posted on arXiv 24 Aug 2023.
Builds on
22 of 50 references.
References · 22
- 2016Density estimation using Real NVPcited by 2,042
- 2018Glow: Generative Flow with Invertible 1x1 Convolutionscited by 1,545
- 2019Common Voice: A Massively-Multilingual Speech Corpuscited by 1,384
- 2018ESRGAN: Enhanced Super-Resolution Generative Adversarial Networkscited by 1,254
- 2014NICE: Non-linear Independent Components Estimationcited by 1,058
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 752
- 2021Conditional Variational Autoencoder with Adversarial Learning for End-to-End Text-to-Speechcited by 561
- 2023Simple and Controllable Music Generationcited by 488
- 2018WaveGlow: A Flow-based Generative Network for Speech Synthesiscited by 309
- 2020Glow-TTS: A Generative Flow for Text-to-Speech via Monotonic Alignment Searchcited by 273
- 2016FMA: A Dataset For Music Analysiscited by 207
- 2023Speak, Read and Prompt: High-Fidelity Text-to-Speech with Minimal Supervisioncited by 169
10 more
- 2023Speak Foreign Languages with Your Own Voice: Cross-Lingual Neural Codec Language Modelingcited by 167
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2023RoSteALS: Robust Steganography using Autoencoder Latent Spacecited by 57
- 2023Mega-TTS: Zero-Shot Text-to-Speech at Scale with Intrinsic Inductive Biascited by 51
- 2023Make-A-Voice: Unified Voice Synthesis With Discrete Representationcited by 27
- 2022DeAR: A Deep-learning-based Audio Re-recording Resilient Watermarkingcited by 22
- 2023Large-capacity and Flexible Video Steganography via Invertible Neural Networkcited by 21
- 2019Reversible GANs for Memory-efficient Image-to-Image Translationcited by 19
- 2022Enhancing Image Rescaling using Dual Latent Variables in Invertible Neural Networkcited by 4
- 2023Towards Robust Image-in-Audio Deep Steganographycited by 2
Built on by
Citing papers per year: 2023: 1; 2024: 15; 2025: 18; 2026: 16.
50 papers.
Sort:
By area:
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 38
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 23
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 23
- 2024Images that Sound: Composing Images and Sounds on a Single Canvascited by 17
- 2024SoK: Dataset Copyright Auditing in Machine Learning Systemscited by 15
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AIcited by 14
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?cited by 13
- 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?cited by 10
- 2025Watermarking Without Standards Is Not AI Governancecited by 9
38 more
- 2023Collaborative Watermarking for Adversarial Speech Synthesiscited by 7
- 2024Detecting music deepfakes is easy but actually hardcited by 7
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attentioncited by 5
- 2024Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesiscited by 4
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarkingcited by 4
- 2025VoiceMark: Zero-Shot Voice Cloning-Resistant Watermarking Approach Leveraging Speaker-Specific Latentscited by 3
- 2025WaveVerify: A Novel Audio Watermarking Framework for Media Authentication and Combatting Deepfakescited by 3
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removalcited by 3
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasurescited by 2
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audiocited by 2
- 2024Prevailing Research Areas for Music AI in the Era of Foundation Modelscited by 1
- 2024ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Modelscited by 1
- 2025Steganography Beyond Space-Time with Chain of Multimodal AIcited by 1
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptationcited by 1
- 2025EchoMark: Perceptual Acoustic Environment Transfer with Watermark-Embedded Room Impulse Responsecited by 1
- 2026VocBulwark: Towards Practical Generative Speech Watermarking via Additional-Parameter Injectioncited by 1
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Modelscited by 1
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compressioncited by 1
- 2026MelShield: Robust Mel-Domain Audio Watermarking for Provenance Attribution of AI Generated Synthesized Speechcited by 1
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detectioncited by 1
- 2024LOCKEY: A Novel Approach to Model Authentication and Deepfake Trackingcited by 0
- 2024Speech Watermarking with Discrete Intermediate Representationscited by 0
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verificationcited by 0
- 2025Protecting Your Voice: Temporal-aware Robust Watermarkingcited by 0
- 2025Efficient Speech Watermarking for Speech Synthesis via Progressive Knowledge Distillationcited by 0
- 2025Multi-bit Audio Watermarkingcited by 0
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Editscited by 0
- 2025Where is the Watermark? Interpretable Watermark Detection at the Block Levelcited by 0
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transformcited by 0
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitmentscited by 0
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Modelscited by 0
- 2026Audio Pirates: Black-box Audio Watermark Removal via Diffusion Priorscited by 0
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortionscited by 0
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivitycited by 0
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generationcited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTScited by 0
- 2026Tokens Change, Structure Endures: Spectral Watermarking for Generated Speechcited by 0
- 2026Tokens Change, Structure Endures: Spectral Watermarking for Generated Speech27 Sep 2026
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTS23 Aug 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detection22 Jun 2026
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Audio Pirates: Black-box Audio Watermark Removal via Diffusion Priors28 May 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
- 2026MelShield: Robust Mel-Domain Audio Watermarking for Provenance Attribution of AI Generated Synthesized Speech2 May 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Models7 Mar 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
38 more
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models27 Feb 2026
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitments10 Feb 2026
- 2026VocBulwark: Towards Practical Generative Speech Watermarking via Additional-Parameter Injection30 Jan 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transform21 Dec 2025
- 2025Where is the Watermark? Interpretable Watermark Detection at the Block Level17 Dec 2025
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal26 Nov 2025
- 2025EchoMark: Perceptual Acoustic Environment Transfer with Watermark-Embedded Room Impulse Response9 Nov 2025
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Edits20 Oct 2025
- 2025Multi-bit Audio Watermarking2 Oct 2025
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures25 Sep 2025
- 2025Efficient Speech Watermarking for Speech Synthesis via Progressive Knowledge Distillation24 Sep 2025
- 2025WaveVerify: A Novel Audio Watermarking Framework for Media Authentication and Combatting Deepfakes23 Jul 2025
- 2025Watermarking Without Standards Is Not AI Governance27 May 2025
- 2025VoiceMark: Zero-Shot Voice Cloning-Resistant Watermarking Approach Leveraging Speaker-Specific Latents27 May 2025
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?26 May 2025
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptation21 Apr 2025
- 2025Protecting Your Voice: Temporal-aware Robust Watermarking21 Apr 2025
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification13 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025Steganography Beyond Space-Time with Chain of Multimodal AI25 Feb 2025
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attention6 Feb 2025
- 2024ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models22 Dec 2024
- 2024Speech Watermarking with Discrete Intermediate Representations18 Dec 2024
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI18 Nov 2024
- 2024SoK: Dataset Copyright Auditing in Machine Learning Systems22 Oct 2024
- 2024Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesis20 Sep 2024
- 2024Prevailing Research Areas for Music AI in the Era of Foundation Models14 Sep 2024
- 2024LOCKEY: A Novel Approach to Model Authentication and Deepfake Tracking12 Sep 2024
- 2024Watermarking Techniques for Large Language Models: A Survey26 Aug 2024
- 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?13 Jun 2024
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarking11 Jun 2024
- 2024Images that Sound: Composing Images and Sounds on a Single Canvas20 May 2024
- 2024Detecting music deepfakes is easy but actually hard7 May 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2024Proactive Detection of Voice Cloning with Localized Watermarking30 Jan 2024
- 2023Collaborative Watermarking for Adversarial Speech Synthesis26 Sep 2023
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 23
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AIcited by 14
- 2025Watermarking Without Standards Is Not AI Governancecited by 9
- 2025WaveVerify: A Novel Audio Watermarking Framework for Media Authentication and Combatting Deepfakescited by 3
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audiocited by 2
- 2026VocBulwark: Towards Practical Generative Speech Watermarking via Additional-Parameter Injectioncited by 1
- 2026MelShield: Robust Mel-Domain Audio Watermarking for Provenance Attribution of AI Generated Synthesized Speechcited by 1
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detectioncited by 1
- 2024LOCKEY: A Novel Approach to Model Authentication and Deepfake Trackingcited by 0
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verificationcited by 0
12 most cited of 17 All 17 (JSON)
- 2026Tokens Change, Structure Endures: Spectral Watermarking for Generated Speech27 Sep 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detection22 Jun 2026
- 2026Audio Pirates: Black-box Audio Watermark Removal via Diffusion Priors28 May 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
- 2026MelShield: Robust Mel-Domain Audio Watermarking for Provenance Attribution of AI Generated Synthesized Speech2 May 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Models7 Mar 2026
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitments10 Feb 2026
- 2026VocBulwark: Towards Practical Generative Speech Watermarking via Additional-Parameter Injection30 Jan 2026
- 2025WaveVerify: A Novel Audio Watermarking Framework for Media Authentication and Combatting Deepfakes23 Jul 2025
- 2025Watermarking Without Standards Is Not AI Governance27 May 2025
12 newest of 17 All 17 (JSON)
- 2024Images that Sound: Composing Images and Sounds on a Single Canvascited by 17
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptationcited by 1
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Modelscited by 1
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transformcited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTScited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTS23 Aug 2026
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models27 Feb 2026
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transform21 Dec 2025
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptation21 Apr 2025
- 2024Images that Sound: Composing Images and Sounds on a Single Canvas20 May 2024
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 38
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 23
- 2024SoK: Dataset Copyright Auditing in Machine Learning Systemscited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?cited by 13
- 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?cited by 10
- 2023Collaborative Watermarking for Adversarial Speech Synthesiscited by 7
- 2024Detecting music deepfakes is easy but actually hardcited by 7
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attentioncited by 5
- 2024Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesiscited by 4
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarkingcited by 4
12 most cited of 27 All 27 (JSON)
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2025Where is the Watermark? Interpretable Watermark Detection at the Block Level17 Dec 2025
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal26 Nov 2025
- 2025EchoMark: Perceptual Acoustic Environment Transfer with Watermark-Embedded Room Impulse Response9 Nov 2025
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Edits20 Oct 2025
- 2025Multi-bit Audio Watermarking2 Oct 2025
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures25 Sep 2025
- 2025VoiceMark: Zero-Shot Voice Cloning-Resistant Watermarking Approach Leveraging Speaker-Specific Latents27 May 2025
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?26 May 2025
12 newest of 27 All 27 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?
- 2026CRAW: Codec Robust Audio Watermarking
- 2026Learning to Evade: Adaptive Attacks on Audio Watermarking ↗
- 2024GROOT: Generating Robust Watermark for Diffusion-Model-Based Audio Synthesis
- 2025Traceable TTS: Toward Watermark-Free TTS with Strong Traceability
- 2023Invisible Watermarking for Audio Generation Diffusion Models
- 2025VocalCrypt: Novel Active Defense Against Deepfake Voice Based on Masking Effect ↗
- 2025Yours or Mine? Overwriting Attacks Against Neural Audio Watermarking