mlsanityData to 14 Oct 2026

Majority Bit-Aware Watermarking For Large Language Models

arXiv 2508.03829 ↗First posted 5 Aug 2025cs.CL cs.CRcited by 4

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

The growing deployment of Large Language Models (LLMs) has raised concerns about their misuse in generating harmful or deceptive content. To address this issue, watermarking methods have been proposed to embed identifiable multi-bit messages into generated text for misuse tracing. However, existing methods often suffer from a fundamental trade-off between text quality and decoding accuracy. In particular, they have to restrict the size of the preferred token set (i.e., green list) during encoding to maintain a detectable watermark signal for decoding, which inevitably degrades generation quality. To improve this trade-off, we propose a novel message encoding paradigm called textitmajority bit-aware encoding, which relaxes the watermark signal strength from the green list size. This strategy allows for a strong watermark signal to be preserved in generated texts even when using a large green list. We introduce two instantiations of this paradigm: MajorMark and MajorMark+, where the latter is specifically optimized for long messages. Extensive experiments on state-of-the-art LLMs demonstrate that our methods achieve higher decoding accuracy and superior text quality compared to prior baselines. The code is at https://github.com/JiiahaoXU/MajorMark.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 36 of its 46 references that are in the map. First posted on arXiv 5 Aug 2025.

Builds on

36 of 46 references.

Closest ancestors · 27

Same direction, newest first

  1. 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun
  2. 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models5 Jun
  3. 2025MorphMark: Flexible Adaptive Watermarking for Large Language Models14 May
  4. 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
  5. 2024CredID: Credible Multi-Bit Watermark for Large Language Models Identification4 Dec
  6. 2024PostMark: A Robust Blackbox Watermark for Large Language Models20 Jun
  7. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  8. 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
  9. 2024Watermark Stealing in Large Language Models29 Feb
  10. 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
  11. 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
  12. 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
15 more
  1. 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
  2. 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
  3. 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
  4. 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
  5. 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
  6. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  7. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  8. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  9. 2023Undetectable Watermarks for Language Models25 May
  10. 2023Who Wrote this Code? Watermarking for Code Generation24 May
  11. 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May
  12. 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
  13. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
  14. 2023A Watermark for Large Language Models24 Jan
  15. 2021Tracing Text Provenance via Context-Aware Lexical Substitution15 Dec

Other references · 9

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
  5. 2018Hierarchical Neural Story Generationcited by 1,193
  6. 2015Teaching Machines to Read and Comprehendcited by 1,049
  7. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  8. 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 105
  9. 2020Distortion Agnostic Deep Watermarkingcited by 90

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 3.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts
  2. 2024Debiasing Watermarks for Large Language Models via Maximal Coupling
  3. 2025Optimized Couplings for Watermarking Large Language Models
  4. 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport
  5. 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
  6. 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules
  7. 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking
  8. 2026MC2Mark: Distortion-Free Multi-Bit Watermarking for Long Messages