Claude Β· Resources

Claude's Invisible Watermarks: How Claude Marks Your Text and Images

Since August 2026, Claude signs what it generates with invisible marks, one in text, one in images. Here is how it works, explained simply, plus the skill to clean content you own.

QQuentin Megevand
August 29, 2026 Β· 6 min read

Since August 2, 2026, Claude no longer just generates text and images: it signs them. Every piece of content produced by a new model carries an invisible mark, one you never see while reading, but one a machine can find. It is a hidden signature, not a visible stamp, and it changes nothing about what you read.

There are two different marks, and they do not work the same way: one for text, one for images and files. Most people confuse the two, and above all confuse the real mark with a myth that circulates everywhere. This guide explains both as if you knew nothing about it, then hands you the tool to clean content you own.

Claude AI Lab

The Claude AI Lab is my Skool community where I share my Claude systems and the more advanced modules. Access is $67/month.

Join the Lab β†’
🧭The 30-second summary
1
Text. The mark lives in the CHOICE of words, not in hidden characters. It survives copy-paste, but a true rewrite erases it.
2
Images and files. The mark is a signed label glued to the file (the C2PA standard). A simple re-save or a screenshot peels it off.
3
The myth. The invisible characters you find when pasting AI text into an inspector are NOT the watermark. That is a false lead.
4
Your right. On content you own, you can inspect and clean these marks. An open-source skill does it, we get there at the end.
1

The mark in the text

✍️ a signature in the choice of words

Picture Claude writing a sentence. At each word, it often has several options that are equally good: "quick", "fast", "rapid". To choose, it secretly follows a pattern, a kind of rigged coin flip whose rule only the company knows. Word after word, these tiny choices draw an invisible rhythm.

Later, to check whether a text came from Claude, you just re-read those word choices and see if they follow the secret pattern. The mark is not an ink or a hidden letter: it is a habit in the way words are chosen.

πŸ”‘What it changes for you
5
It travels with the words. Since the mark IS the choice of words, it stays when you copy-paste the text elsewhere. Nothing is attached to the file, everything is in the text itself.
6
A true rewrite erases it. Rephrasing in your own words, translating into another language, reworking it deeply: you break the rhythm, so the mark weakens or disappears.
7
A short text carries little of it. The pattern needs a lot of words to be reliable. Across three sentences, it stays almost invisible.
What to remember about text

Claude has not published the exact algorithm, but this is the known family of these watermarks: the choice of words is nudged according to a secret pattern. The mark survives a copy-paste and a light edit, not a full rewrite.

2

The mark in the images

πŸ–ΌοΈ a signed label glued to the file

For images and files, Claude switches methods entirely. There, it does not touch the content: it sticks a signed label onto the file, reading "this file was produced by Claude, on this date." That label follows an industry-shared standard called C2PA.

The label is sealed: if someone changes it, it shows. So it is reliable proof as long as it is there. The catch is that a glued label peels off.

🏷️How the label comes off
8
A re-save. Re-exporting the image in another format, running it through an editor: the label most often disappears.
9
A screenshot. Screenshotting the image creates a brand-new file, with no label.
10
An upload that recompresses. Many platforms recompress images on upload, which wipes the label along the way.
The key text-versus-image difference

The text mark is IN the content (the choice of words), so it travels with it. The image label is GLUED to the file, so it comes off the moment the file is rebuilt. That is why an image watermark is far easier to lose than a text watermark.

3

The invisible-character myth

🚫 the false lead everyone repeats

Here is the most common mistake. People paste AI text into a tool that displays hidden characters, land on strange invisible spaces (thin spaces, zero-width spaces), and call victory: "I found the watermark!". No.

Those ghost characters do exist, but they are formatting debris, not the signature. The real text watermark lives in the choice of words, and the choice of words shows up in no character inspector. Anthropic says it plainly: the mark is woven into the text itself, not added as metadata or hidden characters.

Why the confusion is a trap

Deleting those invisible characters gives you the feeling of having removed the watermark, while you touched nothing of the real mark. Two different things live in the same place, and you need to know which one you are aiming at before you clean.

4

The skill that removes the marks

🧹 inspect and clean content you own

Now that you know where the marks live, here is the tool that inspects and removes them, on content you own. It is an open-source skill for Claude Code, remove-ai-marks, in Guillaume Meyer's watermarks-remover repository.

You install it from Claude Code in two commands:

/plugin marketplace add guillaumemeyer/watermarks-remover
/plugin install watermarks-remover@watermarks-remover

The repository and its full documentation live at github.com/guillaumemeyer/watermarks-remover.

πŸ”
It inspects first
Before cleaning, it tells you what it found: suspicious characters, a C2PA label, file marks. You decide after that, you do not clean blind.
✍️
It works on text
It removes the real junk characters (layer A) and offers a rewrite to reduce the statistical mark in the choice of words (layer B), the only way to touch it.
πŸ–ΌοΈ
It works on files
It strips the C2PA label and AI metadata on common images and documents (PNG, JPEG, PDF, DOCX and others).
βš–οΈ
It stays honest
It never promises to make a text "guaranteed human-written." It does a technical clean, it does not forge a fake certificate.
The rule of use

The tool is meant for your own content: privacy, hygiene, research. Cleaning what you own is legitimate. Using it to pass a piece of work off as something it is not is not, and no tool makes that true.

Understanding these marks is mostly about knowing what travels with your content when you publish. The text mark follows the words, the image label follows the file, and the invisible characters are just a false lead. The rest is hygiene: you inspect, and you decide.

Where to start

Install the skill, run it on a text or image you generated yourself, and read its inspection report first. You will see concretely what is marked, before you clean anything at all.

Want to go further?

And day-to-day, I post one reel a day on Instagram: @quentin_iamarketing