Natural Fingerprints of Large Language Models
Not on the map. Why?
Abstract (arXiv)
Recent studies have shown that the outputs from large language models (LLMs) can often reveal the identity of their source model. While this is a natural consequence of LLMs modeling the distribution of their training data, such identifiable traces may also reflect unintended characteristics with potential implications for fairness and misuse. In this work, we go one step further and show that even when LLMs are trained on exactly the same dataset, their outputs remain distinguishable, suggesting that training dynamics alone can leave recognizable patterns. We refer to these unintended, distinctive characteristics as natural fingerprints. By systematically controlling training conditions, we show that the natural fingerprints can emerge from subtle differences in the training process, such as parameter sizes, optimization settings, and even random seeds. These results suggest that training dynamics can systematically shape model behavior, independent of data or architecture, and should be explicitly considered in future research on transparency, reliability, and interpretability.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 32 of its 44 references that are in the map. First posted on arXiv 21 Apr 2025.
Builds on
32 of 44 references.
References · 32
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2019Megatron-LM: Training Multi-Billion Parameter Language Models Using Model Parallelismcited by 1,868
- 2020GLU Variants Improve Transformercited by 1,804
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2023GQA: Training Generalized Multi-Query Transformer Models from Multi-Head Checkpointscited by 1,346
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,254
- 2024The FineWeb Datasets: Decanting the Web for the Finest Text Data at Scalecited by 1,160
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
20 more
- 2023A Watermark for Large Language Modelscited by 725
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2019Defending Against Neural Fake Newscited by 559
- 2019Release Strategies and the Social Impacts of Language Modelscited by 513
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
- 2023How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detectioncited by 481
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2024Humans or LLMs as the Judge? A Study on Judgement Biasescited by 323
- 2023Robust Distortion-free Watermarks for Language Modelscited by 320
- 2023SemDeDup: Data-efficient learning at web-scale through semantic deduplicationcited by 303
- 2017Embedding Watermarks into Deep Neural Networkscited by 248
- 2023Undetectable Watermarks for Language Modelscited by 226
- 2020TweepFake: about Detecting Deepfake Tweetscited by 117
- 2023ChatGPT or Human? Detect and Explain. Explaining Decisions of Machine Learning Model for Detecting Short ChatGPT-generated Textcited by 85
- 2023Watermarking Text Generated by Black-Box Language Modelscited by 76
- 2022Watermarking Pre-trained Language Models with Backdooringcited by 50
- 2024A Decade's Battle on Dataset Bias: Are We There Yet?cited by 47
- 2024Model Equality Testing: Which Model Is This API Serving?cited by 47
- 2025Idiosyncrasies in Large Language Modelscited by 33
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025SoK: Large Language Model Copyright Auditing via Fingerprintingcited by 15
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained Fromcited by 10
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Contentcited by 1
- 2026BELLS-O: Evaluating the Operational Trade-offs of LLM Supervision Systemscited by 1
- 2026Portable Semantics, Private Dialects: Reuse and Negative Transfer in Latent Communication Between Language-Model Cellscited by 1
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Spacecited by 0
- 2026Portable Semantics, Private Dialects: Reuse and Negative Transfer in Latent Communication Between Language-Model Cells10 Sep 2026
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Space7 Aug 2026
- 2026BELLS-O: Evaluating the Operational Trade-offs of LLM Supervision Systems12 Jun 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained From30 Sep 2025
- 2025SoK: Large Language Model Copyright Auditing via Fingerprinting27 Aug 2025