Soft Prompting for Unlearning in Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
The widespread popularity of Large Language Models (LLMs), partly due to their unique ability to perform in-context learning, has also brought to light the importance of ethical and safety considerations when deploying these pre-trained models. In this work, we focus on investigating machine unlearning for LLMs motivated by data protection regulations. In contrast to the growing literature on fine-tuning methods to achieve unlearning, we focus on a comparatively lightweight alternative called soft prompting to realize the unlearning of a subset of training data. With losses designed to enforce forgetting as well as utility preservation, our framework Soft Prompting for Unlearning (SPUL) learns prompt tokens that can be appended to an arbitrary query to induce unlearning of specific examples at inference time without updating LLM parameters. We conduct a rigorous evaluation of the proposed method and our results indicate that SPUL can significantly improve the trade-off between utility and forgetting in the context of text classification and question answering with LLMs. We further validate our method using multiple LLMs to highlight the scalability of our framework and provide detailed insights into the choice of hyperparameters and the influence of the size of unlearning data. Our implementation is available at urlhttps://github.com/karuna-bhaila/llmunlearning.
Key facts. Cited by 42 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 26 of its 38 references that are in the map. First posted on arXiv 17 Jun 2024.
Builds on
26 of 38 references.
Closest ancestors · 8
Same direction, newest first
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 18
- 2017Attention Is All You Needcited by 59,932
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Machine Unlearningcited by 1,020
- 2017Crowdsourcing Multiple Choice Science Questionscited by 742
6 more
- 2021GPT Understands, Toocited by 715
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
Built on by
Citing papers per year: 2024: 3; 2025: 17; 2026: 22.
42 papers.
Sort:
By area:
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 80
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2024A Closer Look at Machine Unlearning for Large Language Modelscited by 54
- 2024Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Conceptscited by 39
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025Model Unlearning via Sparse Autoencoder Subspace Guided Projectionscited by 17
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025Does Machine Unlearning Truly Remove Knowledge?cited by 7
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026Explainable LLM Unlearning Through Reasoningcited by 7
- 2026Attention Smoothing Is All You Need For Unlearningcited by 6
30 more
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Modelscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearningcited by 4
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2025Label Smoothing Improves Gradient Ascent in LLM Unlearningcited by 3
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMscited by 3
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Modelscited by 2
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2026Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearningcited by 2
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
- 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearningcited by 1
- 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMscited by 1
- 2025Erase to Retain: Low Rank Adaptation Guided Selective Unlearning in Medical Segmentation Networkscited by 0
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMscited by 0
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026Retain-Neutral Surrogates for Min-Max Unlearningcited by 0
- 2026ZeroUnlearn: Few-Shot Knowledge Unlearning in Large Language Modelscited by 0
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rulescited by 0
- 2026Towards Lightweight Reliability: Using Soft Prompts for Hallucination Mitigation in Large Language Modelscited by 0
- 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearningcited by 0
- 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vectorcited by 0
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergencecited by 0
- 2026POPS: Recovering Unlearned Multi-Modality Knowledge in MLLMs with Prompt-Optimized Parameter Shakingcited by 0
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threatscited by 0
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearningcited by 0
- 2026UnlearningSoup: Is Repeated Tuning Necessary for Large Language Model Unlearning?cited by 0
- 2026UnlearningSoup: Is Repeated Tuning Necessary for Large Language Model Unlearning?29 Sep 2026
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning21 Jul 2026
- 2026POPS: Recovering Unlearned Multi-Modality Knowledge in MLLMs with Prompt-Optimized Parameter Shaking7 Jul 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vector16 Jun 2026
- 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearning13 Jun 2026
- 2026Towards Lightweight Reliability: Using Soft Prompts for Hallucination Mitigation in Large Language Models30 May 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026ZeroUnlearn: Few-Shot Knowledge Unlearning in Large Language Models16 May 2026
- 2026Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearning16 May 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
30 more
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMs23 Apr 2026
- 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMs3 Apr 2026
- 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearning11 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs7 Jan 2026
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning4 Dec 2025
- 2025Erase to Retain: Low Rank Adaptation Guided Selective Unlearning in Medical Segmentation Networks20 Nov 2025
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models14 Nov 2025
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Label Smoothing Improves Gradient Ascent in LLM Unlearning25 Oct 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning1 Oct 2025
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization24 Sep 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun 2025
- 2025Model Unlearning via Sparse Autoencoder Subspace Guided Projections30 May 2025
- 2025Does Machine Unlearning Truly Remove Knowledge?29 May 2025
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Models21 May 2025
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May 2025
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May 2025
- 2024Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Concepts16 Oct 2024
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct 2024
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct 2024
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 80
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2024A Closer Look at Machine Unlearning for Large Language Modelscited by 54
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025Model Unlearning via Sparse Autoencoder Subspace Guided Projectionscited by 17
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025Does Machine Unlearning Truly Remove Knowledge?cited by 7
- 2026Attention Smoothing Is All You Need For Unlearningcited by 6
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Modelscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
12 most cited of 33 All 33 (JSON)
- 2026UnlearningSoup: Is Repeated Tuning Necessary for Large Language Model Unlearning?29 Sep 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vector16 Jun 2026
- 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearning13 Jun 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026ZeroUnlearn: Few-Shot Knowledge Unlearning in Large Language Models16 May 2026
- 2026Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearning16 May 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMs23 Apr 2026
- 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMs3 Apr 2026
- 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearning11 Mar 2026
12 newest of 33 All 33 (JSON)
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Modelscited by 2
- 2026POPS: Recovering Unlearned Multi-Modality Knowledge in MLLMs with Prompt-Optimized Parameter Shakingcited by 0
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearningcited by 0
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning21 Jul 2026
- 2026POPS: Recovering Unlearned Multi-Modality Knowledge in MLLMs with Prompt-Optimized Parameter Shaking7 Jul 2026
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models14 Nov 2025