We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice
Not on the map. Why?
Abstract (arXiv)
Despite rapid progress in deep learning-based image watermarking, the capacity of current robust methods remains limited to the scale of only a few hundred bits. Such plateauing progress raises the question: How far are we from the fundamental limits of image watermarking? To this end, we present an analysis that establishes upper bounds on the message-carrying capacity of images under PSNR and linear robustness constraints. Our results indicate theoretical capacities are orders of magnitude larger than what current models achieve. Our experiments show this gap between theoretical and empirical performance persists, even in minimal, easily analysable setups. This suggests a fundamental problem. As proof that larger capacities are indeed possible, we train ChunkySeal, a scaled-up version of VideoSeal, which increases capacity 4 times to 1024 bits, all while preserving image quality and robustness. These findings demonstrate modern methods have not yet saturated watermarking capacity, and that significant opportunities for architectural innovation and training strategies remain.
Key facts. Cited by 5 papers in the map (data through 13 Oct 2026). First posted on arXiv 7 Oct 2025.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025Pixel Seal: Adversarial-only training for invisible image and video watermarkingcited by 15
- 2026Unifying Watermarking via Dimension-Aware Mappingcited by 1
- 2026The Forensic Cost of Watermark Removal: From Dedicated Attacks to Image Editingcited by 1
- 2025S2LM: Towards Semantic Steganography via Large Language Modelscited by 0
- 2026Optimizing and Securing the Modern Watermarking Channel for Imagescited by 0
- 2026Optimizing and Securing the Modern Watermarking Channel for Images28 Sep 2026
- 2026The Forensic Cost of Watermark Removal: From Dedicated Attacks to Image Editing28 Apr 2026
- 2026Unifying Watermarking via Dimension-Aware Mapping3 Feb 2026
- 2025Pixel Seal: Adversarial-only training for invisible image and video watermarking18 Dec 2025
- 2025S2LM: Towards Semantic Steganography via Large Language Models7 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2026What Limits Robustness in Deep Image Watermarking: An Analysis of Mechanisms and Their Scaling Across Capacities ↗
- 2024Revisiting the Information Capacity of Neural Network Watermarks: Upper Bound Estimation and Beyond
- 2026High-Capacity Robust Watermarking Technology for High-Resolution Images
- 2024An Undetectable Watermark for Generative Image Models
- 2026SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles
- 2026WARP: A Unified Benchmark for Invisible Image Watermarking -- Robustness and Protection Against Attacks
- 2025Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation