Multi-use LLM Watermarking and the False Detection Problem
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Digital watermarking is a promising solution for mitigating some of the risks arising from the misuse of automatically generated text. These approaches either embed non-specific watermarks to allow for the detection of any text generated by a particular sampler, or embed specific keys that allow the identification of the LLM user. However, simultaneously using the same embedding for both detection and user identification leads to a false detection problem, whereby, as user capacity grows, unwatermarked text is increasingly likely to be falsely detected as watermarked. Through theoretical analysis, we identify the underlying causes of this phenomenon. Building on these insights, we propose Dual Watermarking which jointly encodes detection and identification watermarks into generated text, significantly reducing false positives while maintaining high detection accuracy. Our experimental results validate our theoretical findings and demonstrate the effectiveness of our approach.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 21 of its 34 references that are in the map. First posted on arXiv 19 Jun 2025.
Builds on
21 of 34 references.
Closest ancestors · 12
Same direction, newest first
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
- 2024Multi-Bit Distortion-Free Watermarking for Large Language Models26 Feb
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 9
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2016Categorical Reparameterization with Gumbel-Softmaxcited by 2,739
- 2014A* Samplingcited by 151
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
- 2020Automatic generation of reviews of scientific paperscited by 6
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices
- 2024Can Watermarked LLMs be Identified by Users via Crafted Prompts?
- 2025Modification and Generated-Text Detection: Achieving Dual Detection Capabilities for the Outputs of LLM by Watermark
- 2026AutoMark: Enabling Autoresearch to Discover Better LLM Watermarks
- 2024Black-Box Detection of Language Model Watermarks
- 2023New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking
- 2025Optimized Couplings for Watermarking Large Language Models
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules