Unbiased Watermark for Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The recent advancements in large language models (LLMs) have sparked a growing apprehension regarding the potential misuse. One approach to mitigating this risk is to incorporate watermarking techniques into LLMs, allowing for the tracking and attribution of model outputs. This study examines a crucial aspect of watermarking: how significantly watermarks impact the quality of model-generated outputs. Previous studies have suggested a trade-off between watermark strength and output quality. However, our research demonstrates that it is possible to integrate watermarks without affecting the output probability distribution with appropriate implementation. We refer to this type of watermark as an unbiased watermark. This has significant implications for the use of LLMs, as it becomes impossible for users to discern whether a service provider has incorporated watermarks or not. Furthermore, the presence of watermarks does not compromise the performance of the model in downstream tasks, ensuring that the overall utility of the language model is preserved. Our findings contribute to the ongoing discussion around responsible AI development, suggesting that unbiased watermarks can serve as an effective means of tracking and attributing model outputs without sacrificing output quality.
Key facts. Cited by 100 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. First posted on arXiv 22 Sep 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 4; 2024: 30; 2025: 34; 2026: 32.
100 papers.
Sort:
By area:
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 160
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 112
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Adaptive Text Watermark for Large Language Modelscited by 60
- 2024Watermarking Makes Language Models Radioactivecited by 52
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 48
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Modelscited by 47
- 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choicescited by 47
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023Optimizing watermarks for large language modelscited by 22
38 more
- 2024Black-Box Detection of Language Model Watermarkscited by 22
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 20
- 2024Learning to Watermark LLM-generated Text via Reinforcement Learningcited by 19
- 2024Double-I Watermark: Protecting Model Copyright for LLM Fine-tuningcited by 18
- 2024Debiasing Watermarks for Large Language Models via Maximal Couplingcited by 18
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Modelscited by 18
- 2024Permute-and-Flip: An optimally stable and watermarkable decoder for LLMscited by 17
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approachcited by 17
- 2023Necessary and Sufficient Watermark for Large Language Modelscited by 16
- 2024A Watermark for Order-Agnostic Language Modelscited by 14
- 2025Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarkingcited by 14
- 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codescited by 12
- 2024De-mark: Watermark Removal in Large Language Modelscited by 11
- 2025Scalable Fingerprinting of Large Language Modelscited by 11
- 2025Towards Watermarking of Open-Source LLMscited by 11
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Modelscited by 11
- 2024Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisionscited by 10
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2024Can Watermarked LLMs be Identified by Users via Crafted Prompts?cited by 10
- 2025Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learningcited by 10
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillationcited by 9
- 2025Optimized Couplings for Watermarking Large Language Modelscited by 9
- 2025In-Context Watermarks for Large Language Modelscited by 9
- 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Modelscited by 7
- 2025Character-Level Perturbations Disrupt LLM Watermarkscited by 7
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoptioncited by 7
- 2024WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustnesscited by 6
- 2024Efficiently Identifying Watermarked Segments in Mixed-Source Textscited by 6
- 2024SVIP: Towards Verifiable Inference of Open-source Large Language Modelscited by 6
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoderscited by 5
- 2025On the Empirical Power of Goodness-of-Fit Tests in Watermark Detectioncited by 5
- 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarkingcited by 5
- 2024On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attackscited by 4
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyondcited by 4
- 2024Discovering Spoofing Attempts on Language Model Watermarkscited by 4
- 2024Segmenting Watermarked Texts From Language Modelscited by 4
- 2025Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Modelscited by 4
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthIDcited by 4
50 most cited of 100 All 100 (JSON)
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026TANGO: Watermarking Masked Diffusion Language Models in Token Pairs28 Sep 2026
- 2026GenoTrace: Inheritable Watermarks for Genome Foundation Model Distillation27 Sep 2026
- 2026Watermarkable Multi-Draft Speculative Sampling via Poisson Processes18 Sep 2026
- 2026TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectories9 Sep 2026
- 2026WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading2 Sep 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking20 Aug 2026
- 2026Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks13 Aug 2026
- 2026Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification8 Aug 2026
- 2026Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes24 Jul 2026
- 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency14 Jul 2026
38 more
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories9 Jul 2026
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generation6 Jul 2026
- 2026Sample Complexities of Estimating Gumbel--Max Watermark Proportions with and without Reduction to Pivotal Statistics30 Jun 2026
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs28 May 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026SLAM: Structural Linguistic Activation Marking for Language Models6 May 2026
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints9 Apr 2026
- 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking13 Mar 2026
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation3 Mar 2026
- 2026MC2Mark: Distortion-Free Multi-Bit Watermarking for Long Messages15 Feb 2026
- 2026WorldCup Sampling for Multi-bit LLM Watermarking2 Feb 2026
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models1 Feb 2026
- 2026MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking29 Jan 2026
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs14 Jan 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models8 Jan 2026
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking3 Dec 2025
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking30 Nov 2025
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Models10 Nov 2025
- 2025PVMark: Enabling Public Verifiability for LLM Watermarking Schemes30 Oct 2025
- 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs27 Oct 2025
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption21 Oct 2025
- 2025Provable Watermarking for Data Poisoning Attacks10 Oct 2025
- 2025On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection4 Oct 2025
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking2 Oct 2025
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guarantees29 Sep 2025
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models27 Sep 2025
- 2025LLM Watermark Evasion via Bias Inversion27 Sep 2025
- 2025Character-Level Perturbations Disrupt LLM Watermarks11 Sep 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID27 Aug 2025
- 2025Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization12 Aug 2025
- 2025Signature vs. Substance: Evaluating the Balance of Adversarial Resistance and Linguistic Quality in Watermarking Large Language Models11 Aug 2025
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug 2025
50 newest of 100 All 100 (JSON)
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Adaptive Text Watermark for Large Language Modelscited by 60
- 2024Watermarking Makes Language Models Radioactivecited by 52
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 48
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Modelscited by 47
- 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choicescited by 47
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2023Optimizing watermarks for large language modelscited by 22
- 2024Black-Box Detection of Language Model Watermarkscited by 22
- 2024Learning to Watermark LLM-generated Text via Reinforcement Learningcited by 19
- 2024Double-I Watermark: Protecting Model Copyright for LLM Fine-tuningcited by 18
12 most cited of 73 All 73 (JSON)
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026GenoTrace: Inheritable Watermarks for Genome Foundation Model Distillation27 Sep 2026
- 2026WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading2 Sep 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking20 Aug 2026
- 2026Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks13 Aug 2026
- 2026Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes24 Jul 2026
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs28 May 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
12 newest of 73 All 73 (JSON)
- 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Modelscited by 7
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Modelscited by 1
- 2026Watermarkable Multi-Draft Speculative Sampling via Poisson Processescited by 0
- 2026Watermarkable Multi-Draft Speculative Sampling via Poisson Processes18 Sep 2026
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models1 Feb 2026
- 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models27 Oct 2024
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 160
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 112
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 20
- 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codescited by 12
- 2025Scalable Fingerprinting of Large Language Modelscited by 11
- 2024WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustnesscited by 6
- 2024SVIP: Towards Verifiable Inference of Open-source Large Language Modelscited by 6
- 2025On the Empirical Power of Goodness-of-Fit Tests in Watermark Detectioncited by 5
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
- 2025A Statistical Hypothesis Testing Framework for Data Misappropriation Detection in Large Language Modelscited by 2
- 2025Provable Watermarking for Data Poisoning Attackscited by 2
12 most cited of 16 All 16 (JSON)
- 2026Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification8 Aug 2026
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generation6 Jul 2026
- 2026Sample Complexities of Estimating Gumbel--Max Watermark Proportions with and without Reduction to Pivotal Statistics30 Jun 2026
- 2025Provable Watermarking for Data Poisoning Attacks10 Oct 2025
- 2025On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection4 Oct 2025
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guarantees29 Sep 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization12 Aug 2025
- 2025Scalable Fingerprinting of Large Language Models11 Feb 2025
- 2025A Statistical Hypothesis Testing Framework for Data Misappropriation Detection in Large Language Models5 Jan 2025
- 2024SVIP: Towards Verifiable Inference of Open-source Large Language Models29 Oct 2024
- 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codes4 Jun 2024
12 newest of 16 All 16 (JSON)