Watermarking generated content and models
Key facts. Watermarking generated content and models: 717 papers on arXiv since 2021 (data through 7 Oct 2026). 282 of its 717 mapped papers (39%) cite “A Watermark for Large Language Models” (2023, arXiv 2301.10226). 227 of its 717 mapped papers (32%) cite “Robust Distortion-free Watermarks for Language Models” (2023, arXiv 2307.15593). 21 new papers 24 Sep–7 Oct.
What’s new
24 Sep – 7 Oct 2026
21 new papers, 24 Sep – 7 Oct; 6 this week.
- This week · 6
- Diffusion-Generated Image Watermarking: A Two-Axis Taxonomy and Three Protocol-Bounded Case Studies
- Latent Watermarks under Generative Editing: A Benchmark and Analysis of Detection Survival
- Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents
- MARCO: The Radioactive Watermark for Protein Generative Models
- Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering
- SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints
- Earlier · 15
- The Poisoned Conversation: Privacy-Leaking Watermarks in Unified Multimodal Models
- Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate
- Language Model Fingerprinting Requires Rethinking Watermark Teachers
- RMCW: A Deletion-Robust Watermark Based on Reed--Muller Codes for Language Models
All 21
- Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking
- Persistent Watermarking of Text-to-Image Models
- Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codes
- AutoMark: Enabling Autoresearch to Discover Better LLM Watermarks
- Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods
- TTMark: Pairwise Distortion-Free Watermarking Beyond Single-Token Entropy
- TANGO: Watermarking Masked Diffusion Language Models in Token Pairs
- GenoTrace: Inheritable Watermarks for Genome Foundation Model Distillation
- Tokens Change, Structure Endures: Spectral Watermarking for Generated Speech
- CertMark: Distortion-Free Multi-Bit Watermarking with Certified Decoding
- FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models
Foundations
Most cited by papers here
- A Watermark for Large Language Models2023cited by 282 here
- Robust Distortion-free Watermarks for Language Models2023cited by 227 here
- Provable Robust Watermarking for AI-Generated Text2023cited by 205 here
- Undetectable Watermarks for Language Models2023cited by 148 here
- The Stable Signature: Rooting Watermarks in Latent Diffusion Models2023cited by 145 here
Lineage
The papers this direction builds on, oldest first.
Each paper on the line cites the one before.
- 2023A Watermark for Large Language Modelscited by 282 here
- 2023Can AI-Generated Text be Reliably Detected?cited by 90 here
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 137 here
- 2023Undetectable Watermarks for Language Modelscited by 148 here
- 2023Robust Distortion-free Watermarks for Language Modelscited by 227 here
- 2023A Semantic Invariant Robust Watermark for Large Language Modelscited by 90 here
- 2023On the Learnability of Watermarks for Language Modelscited by 56 here
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 72 here
- 2024An Entropy-based Text Watermarking Detection Methodcited by 57 here
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarkingcited by 75 here
14 more it builds on, not in this chain
- 2023A Recipe for Watermarking Diffusion Modelscited by 65 here
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 145 here
- 2023Who Wrote this Code? Watermarking for Code Generationcited by 108 here
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 85 here
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 73 here
- 2023On the Reliability of Watermarks for Large Language Modelscited by 119 here
- 2023Provable Robust Watermarking for AI-Generated Textcited by 205 here
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 65 here
- 2023Unbiased Watermark for Large Language Modelscited by 87 here
- 2023SemStamp: A Semantic Watermark with Paraphrastic Robustness for Text Generationcited by 99 here
- 2023Publicly-Detectable Watermarking for Language Modelscited by 61 here
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasingcited by 67 here
- 2024Watermark Stealing in Large Language Modelscited by 66 here
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Modelscited by 90 here
The 24 most cited of 677.
Browse
30 of 717, ranked 6–35
- 6Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense2023137
- 7On the Reliability of Watermarks for Large Language Models2023119
- 8Who Wrote this Code? Watermarking for Code Generation2023108
- 9SemStamp: A Semantic Watermark with Paraphrastic Robustness for Text Generation202399
- 10Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models202490
- 11Can AI-Generated Text be Reliably Detected?202390
- 12A Semantic Invariant Robust Watermark for Large Language Models202390
- 13Unbiased Watermark for Large Language Models202387
- 14Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust202385
- 15MarkLLM: An Open-Source Toolkit for LLM Watermarking202475
All 30
- 16Invisible Image Watermarks Are Provably Removable Using Generative AI202373
- 17A Survey of Text Watermarking in the Era of Large Language Models202372
- 18A Robust Semantics-based Watermark for Large Language Model against Paraphrasing202367
- 19Watermark Stealing in Large Language Models202466
- 20A Recipe for Watermarking Diffusion Models202365
- 21Three Bricks to Consolidate Watermarks for Large Language Models202365
- 22Publicly-Detectable Watermarking for Language Models202361
- 23An Entropy-based Text Watermarking Detection Method202457
- 24On the Learnability of Watermarks for Language Models202356
- 25Robust Multi-bit Natural Language Watermarking through Invariant Features202355
- 26Mark My Words: Analyzing and Evaluating Language Model Watermarks202355
- 27REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models202354
- 28Adaptive Text Watermark for Large Language Models202453
- 29Protecting Language Generation Models via Invisible Watermarking202352
- 30An Undetectable Watermark for Generative Image Models202450
- 31An Unforgeable Publicly Verifiable Watermark for Large Language Models202350
- 32Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models202350
- 33Protecting Intellectual Property of Language Generation APIs with Lexical Watermark202148
- 34Advancing Beyond Identification: Multi-bit Watermark for Large Language Models202347
- 35Watermarking Text Generated by Black-Box Language Models202346