mlsanityData to 14 Oct 2026

PromptPrint: Behavioral Biometrics Through Natural Language Prompting in LLMs

arXiv 2606.06755 ↗First posted 4 Jun 2026cs.CL cs.ETcited by 0

Not on the map. Why?

Abstract (arXiv)

Authorship attribution research has traditionally focused on long-form, expressive texts; however, interactions with large language models (LLMs) are typically brief and task-driven prompts. This raises a fundamental question: do such prompts contain a stable, author-identifiable, and distinctive signal? We introduce PromptPrint, a systematic study of prompt-based identity, the hypothesis that a user's habitual vocabulary, syntax, and discourse patterns form a learnable behavioral biometric. Using 20,680 real prompts from 1,034 users, we establish three key findings. First, lexical representations significantly outperform semantic encoders, supporting the "lexical stability hypothesis": identity is primarily encoded in surface-level word choice rather than abstract intent. Second, stylometric features exhibit a "uniqueness-consistency paradox": users are highly distinctive across the population, yet behaviorally inconsistent across contexts. Third, adversarial analysis reveals a clear vulnerability spectrum: identity signals are robust to minor lexical perturbations but degrade substantially under semantic paraphrasing. Overall, our results demonstrate strong identification performance at scale, establishing prompt-based identity as a viable behavioral biometric. This work introduces a new perspective on user modeling in LLM interactions, with important implications for security and privacy. Data and code will be released upon the acceptance of our work.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 12 of its 34 references that are in the map. First posted on arXiv 4 Jun 2026.

Builds on

12 of 34 references.

References · 12

  1. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  2. 2020Extracting Training Data from Large Language Modelscited by 2,189
  3. 2022Text Embeddings by Weakly-Supervised Contrastive Pre-trainingcited by 1,253
  4. 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,102
  5. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  6. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
  7. 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
  8. 2022Same Author or Just Same Topic? Towards Content-Independent Style Representationscited by 86
  9. 2024Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challengescited by 47
  10. 2022On the State of the Art in Authorship Attribution and Authorship Verificationcited by 27
  11. 2015Active Authentication on Mobile Devices via Stylometry, Application Usage, Web Browsing, and GPS Locationcited by 2
  12. 2024Isolating authorship from content with semantic embeddings and contrastive learningcited by 1

Built on by

Not cited yet.