AI Security

OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU

October 05, 2026 3 min read 4 views
cybersecurity malware news
By
  • October 5, 2026
  • 06:46 PM
  • 0

ChatGPT

OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union.

The watermark will not be visible when you read or copy the text. Instead, OpenAI says its new textGrain technology slightly changes the model's word choices to create a statistical pattern that can later be detected.

"Over the coming weeks, we will add an invisible watermark to eligible ChatGPT and Codex text output in the European Union," OpenAI explained.

OpenAI is not making this a global default yet.

Starting today, API developers worldwide can opt in to watermarking for supported models, but it remains disabled by default.

The company is also opening applications for its watermark detector, although access will initially be limited to approved researchers and expert organizations.

OpenAI admits its AI watermark can disappear when you edit the text

Text watermarking is far from perfect, and OpenAI's own tests show that fairly normal editing can significantly reduce its ability to detect AI-generated text.

"In an evaluation of 400-token passages, replacing 10% of words with synonyms reduced detection from about 92% to 66%. Replacing 25% of words reduced it to 17%," OpenAI noted.

At a 1% false-positive target, OpenAI detected the watermark in about 80% of 200-token psychology responses, compared with roughly 95% when the text reached 400 tokens.

OpenAIThis chart shows results for watermarked responses to mathematics and psychology questions from the ELI5 dataset⁠ at a target false positive rate of 1%

Detection was even worse for subjects such as mathematics, where the model has less freedom to choose different words.

"The absence of a detected watermark does not prove human authorship," OpenAI warned. "Text generated with OpenAI tools may be too short, edited, or translated for detection to work reliably."

OpenAI also says a detected watermark does not reveal who generated the text, their account, prompt, or conversation, and it cannot tell how much of the final work was written or edited by a human.

Interestingly, OpenAI says watermarking does not meaningfully affect the quality of GPT-6 Astra, with benchmark results remaining broadly similar when textGrain is enabled.

.article-callout { background-color: #f0f6ff; width: 95%; max-width: 800px; margin: 15px auto; border-radius: 8px; border: 1px solid #d6ddee; display: flex; align-items: stretch; overflow: hidden; } .article-media { flex: 1; max-width: 220px; display: flex; } .article-media a { display: flex; width: 100%; height: 100%; } .article-media img { width: 100%; height: 100%; border-radius: 8px 0 0 8px; display: block; } .article-callout .article-media img { margin-top: 0 !important; height: 100% !important; } .article-body { flex: 2; padding: 10px; display: flex; flex-direction: column; justify-content: center; } .article-body h2 { font-size: 17px !important; font-weight: 700; color: #333; line-height: 1.4; font-family: Georgia, "Times New Roman", Times, serif; margin: 0 0 14px 0; } .article-body p { font-weight: bold; font-size: 14px; margin: 0 0 clamp(6px, 2vw, 14px) 0; } .article-link { background-color: #fff; border: 1px solid #3b59aa; color: black; text-align: center; text-decoration: none; border-radius: 8px; display: inline-block; font-size: 16px; font-weight: bold; padding: 10px 20px; width: fit-content; } @media (max-width: 600px) { .article-callout { flex-direction: column; align-items: center; } .article-media { max-width: 100%; } .article-media img { border-radius: 8px 8px 0 0; } .article-body { padding: 15px; width: 100%; } .article-link { width: 100%; margin: 0 auto; box-sizing: border-box; } } article image

Build your security blueprint for AI-powered attacks

Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.

Save your seat

Related Articles:

OpenAI will show visual ads in ChatGPT while you generate images

OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex

OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.