Majority Bit-Aware Watermarking For Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The growing deployment of Large Language Models (LLMs) has raised concerns about their misuse in generating harmful or deceptive content. To address this issue, watermarking methods have been proposed to embed identifiable multi-bit messages into generated text for misuse tracing. However, existing methods often suffer from a fundamental trade-off between text quality and decoding accuracy. In particular, they have to restrict the size of the preferred token set (i.e., green list) during encoding to maintain a detectable watermark signal for decoding, which inevitably degrades generation quality. To improve this trade-off, we propose a novel message encoding paradigm called textitmajority bit-aware encoding, which relaxes the watermark signal strength from the green list size. This strategy allows for a strong watermark signal to be preserved in generated texts even when using a large green list. We introduce two instantiations of this paradigm: MajorMark and MajorMark+, where the latter is specifically optimized for long messages. Extensive experiments on state-of-the-art LLMs demonstrate that our methods achieve higher decoding accuracy and superior text quality compared to prior baselines. The code is at https://github.com/JiiahaoXU/MajorMark.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 36 of its 46 references that are in the map. First posted on arXiv 5 Aug 2025.
Builds on
36 of 46 references.
Closest ancestors · 27
Same direction, newest first
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models5 Jun
- 2025MorphMark: Flexible Adaptive Watermarking for Large Language Models14 May
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
- 2024CredID: Credible Multi-Bit Watermark for Large Language Models Identification4 Dec
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models20 Jun
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
- 2024Watermark Stealing in Large Language Models29 Feb
- 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
15 more
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
- 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023A Watermark for Large Language Models24 Jan
- 2021Tracing Text Provenance via Context-Aware Lexical Substitution15 Dec
Other references · 9
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2018Hierarchical Neural Story Generationcited by 1,193
- 2015Teaching Machines to Read and Comprehendcited by 1,049
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 105
- 2020Distortion Agnostic Deep Watermarkingcited by 90
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 16
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
- 2026CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decodingcited by 1
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Textcited by 0
- 2026CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decoding27 Sep 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2026XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts
- 2024Debiasing Watermarks for Large Language Models via Maximal Coupling
- 2025Optimized Couplings for Watermarking Large Language Models
- 2026ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking
- 2026MC2Mark: Distortion-Free Multi-Bit Watermarking for Long Messages