ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
As watermarking of LLM-generated text enters deployment, users increasingly need to check text whose source is unknown. Existing detectors read the watermark through a specific tokenizer or embedding pipeline, and even if all providers adopted the same watermarking method, differences in these representations would leave their watermarks incompatible, and the text alone does not reveal which representation produced it. We propose ByteMark, a unified watermarking scheme that defines its signal on the UTF-8 bytes of published text. Models with different tokenizers embed this signal under one public specification and key, and a single detector verifies the text from the text and key alone. When the tokenizer or embedding model of a baseline detector is replaced, its detection degrades sharply, whereas ByteMark, which uses neither, retains its detection rate; ByteMark also remains detectable when participating models continue or rewrite the text.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 44 of its 64 references that are in the map. First posted on arXiv 10 Oct 2026.
Builds on
44 of 64 references.
Closest ancestors · 21
Same direction, newest first
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug
- 2026Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking6 Jul
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings30 Jun
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing28 May
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun
- 2025Improved Unbiased Watermark for Large Language Models16 Feb
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
- 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models21 Feb
- 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasing15 Nov
9 more
- 2023Embarrassingly Simple Text Watermarks13 Oct
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023A Watermark for Large Language Models24 Jan
Other references · 23
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2018SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processingcited by 1,989
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,261
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2024TinyLlama: An Open-Source Small Language Modelcited by 618
11 more
- 2024NV-Embed: Improved Techniques for Training LLMs as Generalist Embedding Modelscited by 472
- 2021Large Dual Encoders Are Generalizable Retrieverscited by 456
- 2024Mixture-of-Agents Enhances Large Language Model Capabilitiescited by 438
- 2022One Embedder, Any Task: Instruction-Finetuned Text Embeddingscited by 333
- 2023Improving Text Embeddings with Large Language Modelscited by 303
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2024Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating Worldcited by 52
- 2024People cannot distinguish GPT-4 from a human in a Turing testcited by 48
- 2026How Do AI Agents Spend Your Money? Analyzing and Predicting Token Consumption in Agentic Coding Taskscited by 33
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 19
- 2026Token Economics for LLM Agents: A Dual-View Study from Computing and Economicscited by 6
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text
- 2025DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules
- 2025PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs
- 2026OpenStamp: A Watermark for Open-Source Language Models
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks
- 2026Signature filtering: a lightweight enhancement for statistical watermark detection in large language models