Built by Pluto.Studio · find and test independent Android apps on IndieHangar
AI Watermarks

AI detectors vs watermarks: the difference

An AI detector guesses. A watermark detector checks. Detectors like the ones schools use are statistical classifiers that read style and estimate how likely a human wrote it — they have no access to any watermark and produce false positives on ordinary writing. A watermark detector looks for a specific signal the model deliberately embedded. For Claude text a real watermark detector now exists, but Anthropic keeps it in private preview for organisations obliged to check under EU law[1], so anything you can put your text into today is still the guessing kind.

How do AI detectors and watermark detectors differ?

AI detector versus watermark detector An AI detector reads style statistics of any text, needs no key, and answers with a guess and an error rate. A watermark detector rescores the text with the provider's key, cannot run without it, answers whether the mark is present, and says nothing about who wrote the text. AI detector Reads style statistics of any text Needs no key, so it runs on anything Answers with a guess and an error rate Wrong often enough to hurt people Watermark detector Rescores the text with the provider's key Without the key it cannot run at all Answers whether the mark is present Says nothing about who wrote the text Both can be wrong about authorship: a proofread essay carries the mark.
One guesses from style; the other checks for a deliberate signal and needs the key to do it. Neither establishes who wrote the text.
AI detector (classifier)Watermark detector
What it readsStyle, perplexity, sentence patterns A signal placed there at generation time
Needs cooperation from the AI vendorNoYes
Works on any modelClaims toOnly the scheme it was built for
False positivesCommon, especially on non-native English Tunable to a stated rate[4]
Available for Claude text todayYes, and unreliable Private preview[1]
Available for Gemini text todayYes, and unreliable Open library[3][4]

Why does the distinction matter to you?

If you are accused of using AI, the question "what detected it?" has a very different weight depending on the answer. A classifier's output is an estimate about style, and non-native English speakers are disproportionately flagged by that kind of model. A watermark hit is a real signal — but even then, Anthropic says a mark means the text may have been processed by Claude, which includes proofreading and translation, and is not conclusive as to authorship[1].

Anthropic draws the same line itself, naming AI detection software such as Pangram: those services work differently because they do not hold its key, so they read the stylistic tells that tend to show up in AI phrasing instead. It gives its own examples — the "this isn't [X], it's [Y]" construction, and heavy use of the word "quietly"[10]. Picking up on habits of phrasing is a fundamentally different operation from checking for a signal placed there deliberately.

Google's published SynthID work is instructive on how a real watermark detector behaves: it scores a passage for how likely it is to carry the watermark, and leaves the acceptance threshold to you, to be set against the false-positive rate you are willing to accept[4]. The error rate is a dial someone has to choose, and a detector that is honest about itself says where it was set. A tool that hands you a confident percentage and no threshold behind it is not doing that.

See also what to do if you have been flagged.

Sources

  1. How Claude marks AI-generated content primaryAnthropic, 2026-08, updated 2026-09-16
  2. SynthID primaryGoogle DeepMind, 2026
  3. google-deepmind/synthid-text primaryGoogle DeepMind, 2024-10
  4. How Claude's text watermark works primaryAnthropic, 2026-08-14, updated 2026-09-01

Last verified against primary sources: