Debiasing Watermarks for Large Language Models via Maximal Coupling
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Watermarking language models is essential for distinguishing between human and machine-generated text and thus maintaining the integrity and trustworthiness of digital communication. We present a novel green/red list watermarking approach that partitions the token set into ``green'' and ``red'' lists, subtly increasing the generation probability for green tokens. To correct token distribution bias, our method employs maximal coupling, using a uniform coin flip to decide whether to apply bias correction, with the result embedded as a pseudorandom watermark signal. Theoretical analysis confirms this approach's unbiased nature and robust detection capabilities. Experimental results show that it outperforms prior techniques by preserving text quality while maintaining high detectability, and it demonstrates resilience to targeted modifications aimed at improving text quality. This research provides a promising watermarking solution for language models, balancing effective detection with minimal impact on text quality.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 25 of its 53 references that are in the map. First posted on arXiv 17 Nov 2024.
Builds on
25 of 53 references.
Closest ancestors · 14
Same direction, newest first
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules1 Apr
- 2024Towards Better Statistical Understanding of Watermarking LLMs19 Mar
- 2023Towards Optimal Statistical Watermarking13 Dec
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models7 Nov
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
2 more
Other references · 11
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
- 2022Fast Inference from Transformers via Speculative Decodingcited by 1,615
- 2023Accelerating Large Language Model Decoding with Speculative Samplingcited by 975
- 2019ELI5: Long Form Question Answeringcited by 567
- 2024The I/O Complexity of Attention, or How Optimal is Flash Attention?cited by 6
- 2014Higher criticism: p-values and criticismcited by 2
Built on by
Citing papers per year: 2025: 8; 2026: 10.
18 papers.
Sort:
By area:
- 2025A Comparison of DeepSeek and Other LLMscited by 10
- 2025Optimized Couplings for Watermarking Large Language Modelscited by 9
- 2025Recursive Learning Without Collapse: A Weighting-Based Stabilization Frameworkcited by 8
- 2026Detecting LLM-Generated Text with Performance Guaranteescited by 8
- 2025A note on conditional PAC-efficient reasoning in large language model routingcited by 3
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attackscited by 2
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Modelscited by 1
- 2026Perturbation is All You Need for Extrapolating Language Modelscited by 1
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Modelscited by 0
- 2025Robust Spectral Watermark for Synthetic Tabular Datacited by 0
6 more
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarkingcited by 0
- 2026ADD for Multi-Bit Image Watermarkingcited by 0
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agentscited by 0
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMscited by 0
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generationcited by 0
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Textcited by 0
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Text23 Jul 2026
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generation6 Jul 2026
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs28 May 2026
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents9 May 2026
- 2026Perturbation is All You Need for Extrapolating Language Models5 May 2026
- 2026ADD for Multi-Bit Image Watermarking13 Apr 2026
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attacks8 Apr 2026
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models1 Feb 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2026Detecting LLM-Generated Text with Performance Guarantees10 Jan 2026
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking3 Dec 2025
- 2025Robust Spectral Watermark for Synthetic Tabular Data26 Nov 2025
6 more
- 2025A note on conditional PAC-efficient reasoning in large language model routing25 Nov 2025
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Models10 Nov 2025
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
- 2025Optimized Couplings for Watermarking Large Language Models13 May 2025
- 2025Recursive Learning Without Collapse: A Weighting-Based Stabilization Framework25 Feb 2025
- 2025A Comparison of DeepSeek and Other LLMs6 Feb 2025
- 2025Optimized Couplings for Watermarking Large Language Modelscited by 9
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Modelscited by 0
- 2025Robust Spectral Watermark for Synthetic Tabular Datacited by 0
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarkingcited by 0
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMscited by 0
- 2026Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs28 May 2026
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking3 Dec 2025
- 2025Robust Spectral Watermark for Synthetic Tabular Data26 Nov 2025
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Models10 Nov 2025
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
- 2025Optimized Couplings for Watermarking Large Language Models13 May 2025
- 2025A Comparison of DeepSeek and Other LLMscited by 10
- 2026Detecting LLM-Generated Text with Performance Guaranteescited by 8
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attackscited by 2
- 2026Perturbation is All You Need for Extrapolating Language Modelscited by 1
- 2026ADD for Multi-Bit Image Watermarkingcited by 0
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generationcited by 0
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Textcited by 0
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Text23 Jul 2026
- 2026Geometric Reciprocity: Unlocking Self-Supervision for Stereoscopic Video Generation6 Jul 2026
- 2026Perturbation is All You Need for Extrapolating Language Models5 May 2026
- 2026ADD for Multi-Bit Image Watermarking13 Apr 2026
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attacks8 Apr 2026
- 2026Detecting LLM-Generated Text with Performance Guarantees10 Jan 2026
- 2025A Comparison of DeepSeek and Other LLMs6 Feb 2025