Score candidates
The model produces a probability distribution for the next token.
Anthropic’s text watermarking approach is designed to leave a statistical fingerprint without adding visible characters or changing what the text means.
Important: the lab below is an illustrative model of the idea, not Anthropic’s private implementation or a live detector.
The trick happens in low-stakes moments, when more than one next word would make sense.
The signal is not a visible stamp. It is a pattern in repeated, plausible choices.
The model produces a probability distribution for the next token.
Ordinary sampling uses a random source. Keyed sampling uses the key and recent context to settle the random choice.
Across enough flexible choices, the sequence can become statistically recognisable to someone with the key.
One word proves very little. The sequence is where the evidence lives.
For each observed token, a detector can check whether it was consistent with the keyed choice rule given the preceding context.
It then aggregates the matches. Longer passages usually provide more evidence; short, exact, or heavily edited passages provide less.
This demo passage has enough repeated choices to look consistent with the key.
Detection is a signal about model involvement, not a universal authorship oracle.
It does not establish full authorship. Claude may have written, edited, translated, summarised, or transformed text that began elsewhere.
A passage may be too short, heavily changed, produced by an older unsupported model, or generated by another system with a different method.
When one continuation is clearly correct, nudging the choice would risk accuracy. Flexible prose creates more low-stakes decisions.
The watermark is intended to indicate model involvement. It is not designed to reveal a person, organisation, prompt, or chat.
This explainer is adapted from the supplied diagrams and checked against Anthropic’s official explainer, which says future Claude models will generate text with a watermark and that “nothing is added to the text and there are no hidden characters”.
Conceptual education only. It is not a watermark detector, authorship judgement, or statement of Anthropic’s private implementation details.