Analyzing and Evaluating Unbiased Language Model Watermark
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Verifying the authenticity of AI-generated text has become increasingly important with the rapid advancement of large language models, and unbiased watermarking has emerged as a promising approach due to its ability to preserve output distribution without degrading quality. However, recent work reveals that unbiased watermarks can accumulate distributional bias over multiple generations and that existing robustness evaluations are inconsistent across studies. To address these issues, we introduce UWbench, the first open-source benchmark dedicated to the principled evaluation of unbiased watermarking methods. Our framework combines theoretical and empirical contributions: we propose a statistical metric to quantify multi-batch distribution drift, prove an impossibility result showing that no unbiased watermark can perfectly preserve the distribution under infinite queries, and develop a formal analysis of robustness against token-level modification attacks. Complementing this theory, we establish a three-axis evaluation protocol: unbiasedness, detectability, and robustness, and show that token modification attacks provide more stable robustness assessments than paraphrasing-based methods. Together, UWbench offers the community a standardized and reproducible platform for advancing the design and evaluation of unbiased watermarking algorithms.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 29 references that are in the map. First posted on arXiv 28 Sep 2025.
Builds on
22 of 29 references.
Closest ancestors · 14
Same direction, newest first
- 2025Improved Unbiased Watermark for Large Language Models16 Feb
- 2024De-mark: Watermark Removal in Large Language Models17 Oct
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models21 Feb
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
2 more
- 2023Undetectable Watermarks for Language Models25 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 8
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2023Mistral 7Bcited by 3,164
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,292
- 2020Multilingual Denoising Pre-training for Neural Machine Translationcited by 1,035
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026A Unified Framework for LLM Watermarkscited by 5
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensemblescited by 2
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Learning to Follow In-Context Watermark Instructions via Self-Distillationcited by 0
- 2026Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Keycited by 0
- 2026Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key13 Oct 2026
- 2026Learning to Follow In-Context Watermark Instructions via Self-Distillation29 Aug 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles12 Feb 2026
- 2026A Unified Framework for LLM Watermarks6 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025An Ensemble Framework for Unbiased Language Model Watermarking
- 2024Provably Robust Watermarks for Open-Source Language Models
- 2024Black-Box Detection of Language Model Watermarks
- 2024Debiasing Watermarks for Large Language Models via Maximal Coupling
- 2026Unforgeable Watermarks for Language Models via Robust Signatures
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models
- 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
- 2024Watermarking Language Models for Many Adaptive Users