@readmodelmag
MODEL

AI News

Claude's invisible watermark hits more models Tuesday. You still can't check it.

SummaryAnthropic is extending its SynthID-style text mark to Mythos 5, Opus 4.7, Opus 4.6 and Sonnet 4.6. Detection stays private-preview. On the 4.6 models, a sampling tweak can dodge the mark.

· MODEL Editors · 2 min read

Some links may be affiliate links. Disclosure

Cartoon. Title: Invisible Claude watermark. Sub: You can't see it. The detector you don't have can. Left: essay.docx page with a red stamp WATERMARK (you can't see it). Right: generic robot kiosk screen saying CLAUDE DETECTOR ACCESS DENIED private preview only, with a temperature dial pointed off default and caption Opus/Sonnet 4.6 mark off. Footer: Nov 3 Mythos 5 Opus 4.7 Opus/Sonnet 4.6. Watermark MODEL readmodelmag.com. No real faces or logos.
Our cartoon. Invisible mark, locked detector, sampling dial. Illustration by MODEL. Original. Image source.

Starting November 3, 2026, Anthropic expands Claude's invisible text watermark to four more models: Claude Mythos 5, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6. That date and model list come from an Anthropic email to API customers, as reported by The Decoder on October 31. Newer models such as Claude Opus 5.5 already carry the mark. Bedrock may lag a few days.

What the mark is. Anthropic's published explainer says Claude uses a version of Google DeepMind's SynthID-Text: it changes the source of randomness when the model picks among near-equally good next words. Nothing is added to the text—no hidden characters, no extra tokens, no price change. Readers cannot see the difference. The mark carries no user, organization, or chat identifiers.

Who can check it. Detection is a private preview. Eligible organizations under EU rules (regulators, law enforcement, media, fact-checkers, researchers, certain enterprises) can request access. Regular users cannot run the detector on their own essay. Anthropic says a hit only means Claude may have processed the text (including proofreading or translation), and a miss proves nothing—especially on short passages or heavy paraphrases.

The loophole. Per The Decoder's reading of the customer email: on Opus 4.6 and Sonnet 4.6, the watermark applies only when temperature, top_p, and top_k stay at defaults. Changing any one can dodge it. Anthropic's email reportedly warns compliance users to keep defaults. The Decoder did not report that caveat for Mythos 5 or Opus 4.7.

Why now. Models launched on or after August 2, 2026 already marked output at launch (EU AI Act / Code of Practice). Older models are being retrofitted. Anthropic applies the mark worldwide because it says it cannot yet scope by region. Marks apply across Claude apps, Claude Code, the API, and cloud partners when the model supports them.

Caveats. We have not seen the customer email ourselves; the November 3 list and the 4.6 sampling caveat are attributed to The Decoder. Watermarking is not proof of authorship. Not tested by MODEL. Not sponsored; no affiliate links.

Sources: Anthropic watermark explainer; Claude Help Center marking page; The Decoder (October 31); The Verge (August 17).

MODEL Editors

Sources

  1. How Claude's text watermarking works (Aug 14, 2026; updated Sep 1)

    Anthropic

  2. How Claude marks AI-generated content

    Claude Help Center

  3. Anthropic's watermark rollout leaves a loophole on two older Claude models (Oct 31, 2026)

    The Decoder

  4. Anthropic explains how Claude's invisible text watermarks will work (Aug 17, 2026)

    The Verge

FREE · EVERY WEEK

The top AI tools this week, tested.

Every week MODEL's editors pick the AI tools worth your time, try them hands-on, and tell you what's good, what's not, and who it's for. Free, in your inbox.

Free. Unsubscribe anytime. Our picks are editorial and can't be bought.