AIToday
Large Language ModelsAI Safety & AlignmentLessWrong AIPublished: Aug 22, 2026, 10:00 JST2 min read

OpenAI's Scott Aaronson Solves AI Text Watermarking—Free and Invisible

OpenAI's Scott Aaronson Solves AI Text Watermarking—Free and Invisible

Key takeaway

  • Scott Aaronson at OpenAI has solved AI text watermarking with Hendrik Kirchner.

  • The approach embeds a hidden statistical fingerprint into AI outputs using a secret key.

  • It is imperceptible to humans, costs almost nothing, and comes with a public verification API.

3 Key Points

  1. What happened

    Scott Aaronson, while at OpenAI, developed a watermarking method for AI text together with Hendrik Kirchner. The technique embeds a secret statistical signature into an AI's output by using a private pseudo-randomness source derived from a secret key, then scores how well the text matches that source versus others.

  2. Why it matters

    The watermark has no practical impact on output quality—humans cannot tell the difference at all—and costs nearly zero to implement. It provides a way to verify whether text came from a particular AI model, addressing authenticity concerns without degrading user experience.

  3. What to watch

    OpenAI has provided an API that lets anyone check for the watermark. The method is detailed in a full paper available for technical review.

Ask the AI about this article →

Context & Analysis

AI text watermarking has been a long-standing challenge: how to authenticate AI-generated content without degrading quality or adding computational burden. Aaronson's solution addresses this by leveraging the inherent randomness already present in AI text generation. Since large language models choose tokens probabilistically rather than deterministically, a secret source of randomness can steer those choices in a way that leaves a detectable statistical fingerprint—yet one that is invisible to human readers. The elegance of the approach lies in its efficiency: because the watermark is embedded in choices the model already makes, there is no need for additional processing or model modification. By providing a public API for verification, Aaronson's team has made the tool accessible to anyone who needs to verify whether text originated from a watermarked model.

FAQ

How does the watermark work?
The AI uses a private pseudo-randomness source derived from a secret key to influence which tokens it selects. A score is then computed to measure how well the text matches that particular source versus other sources, revealing the watermark's presence.
Can people detect the watermark in the text?
No. The method has no practical impact on outputs, and humans cannot tell the difference at all.
How much does it cost to use?
The marginal cost of applying the watermark is very close to zero.

Get the latest Large Language Models news every morning

For example, today's edition would include:

  • DataAgent launches with $10M to auto-fix Kubernetes faultsSiliconANGLE AI · 1h ago
  • SK Hynix custom HBM boosts inference up to 5.15xDIGITIMES Asia · 1h ago
  • Nvidia Earnings: Boring by Design, Avoiding a Consolidated WorldStratechery (Ben Thompson) · 1h ago

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleChina's AI boom centers on Inner Mongolia water scarcity