mlsanityData to 14 Oct 2026

Unlearning What Matters: Token-Level Attribution for Precise Language Model Unlearning

arXiv 2605.00364 ↗First posted 1 May 2026cs.CLcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning has emerged as a critical capability for addressing privacy, safety, and regulatory concerns in large language models (LLMs). Existing methods operate at the sequence level, applying uniform updates across all tokens despite only a subset encoding the knowledge targeted for removal. This introduces gradient noise, degrades utility, and leads to suboptimal forgetting. We propose TokenUnlearn, a token-level attribution framework that identifies and selectively targets critical tokens. Our approach combines knowledge-aware signals via masking, and entropy-aware signals to yield importance scores for precise token selection. We develop two complementary strategies: hard selection, applying unlearning only to high-importance tokens, and soft weighting, modulating gradient contributions based on importance scores. Both extend existing methods to token-level variants. Theoretical analysis shows token-level selection improves gradient signal-to-noise ratio. Experiments on TOFU and WMDP benchmarks across three model architectures demonstrate consistent improvements over sequence-level baselines in both forgetting effectiveness and utility preservation.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 46 references that are in the map. First posted on arXiv 1 May 2026.

Builds on

39 of 46 references.

Closest ancestors · 23

Same direction, newest first

  1. 2025LLM Unlearning with LLM Beliefs22 Oct
  2. 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep
  3. 2025Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions30 Sep
  4. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
  5. 2025Not All Tokens Are Meant to Be Forgotten3 Jun
  6. 2025Not Every Token Needs Forgetting: Selective Unlearning to Limit Change in Utility in Large Language Model Unlearning1 Jun
  7. 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?26 May
  8. 2025UniErase: Towards Balanced and Precise Unlearning in Language Models21 May
  9. 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
  10. 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
  11. 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
  12. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
11 more
  1. 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
  2. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  3. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  4. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
  5. 2023Large Language Model Unlearning14 Oct
  6. 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
  7. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  8. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  9. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  10. 2022A Survey of Machine Unlearning6 Sep
  11. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep

Other references · 16

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2025Qwen3 Technical Reportcited by 8,820
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  6. 2024Qwen2.5 Technical Reportcited by 4,942
  7. 2020Extracting Training Data from Large Language Modelscited by 2,189
  8. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  9. 2019Machine Unlearningcited by 1,061
  10. 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 565
  11. 2025Beyond the 80/20 Rule: High-Entropy Minority Tokens Drive Effective Reinforcement Learning for LLM Reasoningcited by 559
  12. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
4 more
  1. 2023Detecting Pretraining Data from Large Language Modelscited by 387
  2. 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 372
  3. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
  4. 2025Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Trainingcited by 15

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
  2. 2026Forget What Matters, Keep the Rest: Selective Unlearning of Informative Tokens
  3. 2024A Closer Look at Machine Unlearning for Large Language Models
  4. 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models
  5. 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
  6. 2025GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Models
  7. 2026SHRED: Retain-Set-Free Unlearning via Self-Distillation with Logit Demotion
  8. 2026What to Forget in Unlearning? Forget Set Curation for Language Models