SynthID
AI watermark in AI tools
People recommend SynthID as a standard invisible mark for AI content that survives basic edits. Critics say it can be removed and only catches tools that use it.
People recommend SynthID as a standard invisible mark for AI content that survives basic edits. Critics say it can be removed and only catches tools that use it.
92 people gave an opinion
- recommend it
- 28
- criticize it
- 64
- approval share
- 30%
Recommended in 10 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: not recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: recommended (month in progress)
Why it doesn’t carry the badge
- 28 people recommend itNeeds 10 or more, met.
- 0.4 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 10 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Survives screenshots and basic edits
“SynthID survives basic transforms including screenshots/photos, although it can of course be defeated.”
Comment from 22 Apr 2026 in “ChatGPT Images 2.0” “it can survive the kind of basic editing a regular person knows how to do on their phone”
Comment from 17 Dec 2025 in “GPT Image 1.5” “SynthID is fairly resistant to this sort of thing, although not perfect.”
Comment from 19 May 2026 in “OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool” Useful even if imperfect
“Any signal which helps distinguishing the two is helpful, even if it isn't perfect.”
Comment from 27 May 2026 in “YouTube to automatically label AI-generated videos” “Just because something isn't perfect doesn't mean it's not useful.”
Comment from 19 May 2026 in “OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool” “It helps significantly in the current moment.”
Comment from 19 May 2026 in “OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool” Standard for marking AI content
“SynthID is a better standard for designating something was created with GenAI”
Comment from 4 Oct 2026 in “How to hack time, with C2PA” “pretty cool standardizing technology”
Comment from 7 Oct 2026 in “SynthID Detector” Does not degrade text quality
“in expectation the next-token distribution is still the same as the unwatermarked case”
Comment from 1 Nov 2026 in “AI text watermarking and quality loss” “I see a net positive especially since it doesn't degrade text quality”
Comment from 21 Sep 2026 in “Spymarks, not Watermarks”
What people warn about
Each mark is one comment
Easily removed with diffusion or noise
“Synth id can be removed, run it through an image 2 image model with a reasonably high denoising value or add artificial noise and use another model to denoise and voila.”
Comment from 19 Jan 2026 in “Dead Internet Theory” “It's a detector that will detect 100% of the stuff that doesn't mind being detected, and only the dumbest fraction of stuff that doesn't want to be detected.”
Comment from 10 Apr 2026 in “Discovering, detecting, and surgically removing Google's AI watermark” “If it's this easy to remove SynthID from an AI-generated image then it wasn't a good solution in the first place.”
Comment from 9 Apr 2026 in “Discovering, detecting, and surgically removing Google's AI watermark” - Comment from 26 Feb 2026 in “SynthID”
- Comment from 19 May 2026 in “OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool”
Does not stop determined bad actors
“there is no way for me to verify if groups or nation states can pay for a special contract where they do not have to have their outputs watermarked”
Comment from 26 Feb 2026 in “SynthID” “This solution helps when people lazily share things with friends or on social media I suppose, rather than stopping motivated bad actors.”
Comment from 27 Feb 2026 in “SynthID” Google data collection and advertising concerns
“the EULA incorporates Google’s regular consumer terms; which means what you upload can also be used for advertising and targeting”
Comment from 7 Oct 2026 in “SynthID Detector” “So whoever creates AI content needs to voluntarily adopt this so that Google can sell "technology" for identifying said content?”
Comment from 20 Nov 2025 in “Nano Banana Pro” “Given that it's an ad company, they want something to connect what you're doing to the rest of their data”
Comment from 7 Oct 2026 in “SynthID Detector” - Comment from 8 Oct 2026 in “SynthID Detector”
Closed source, security through obscurity
“It's security through obscurity.”
Comment from 26 Feb 2026 in “SynthID” “This blog post clearly shows that Deepwalker can break SynthID, which is a closed-source watermarking system.”
Comment from 20 May 2026 in “OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool”
What people said
40 of the 107 comments that mention it, newest first. Each links to the original comment.
“in expectation the next-token distribution is still the same as the unwatermarked case”
“when they offer it as a feature to track people you can at least reject their preferred marketing term”
“it will be reverse engineered and AI generated content will be wiped clean of this "imperceptible" footprint”
“pretty cool standardizing technology”
“Given that it's an ad company, they want something to connect what you're doing to the rest of their data”
“Finally, the previous implementations were very silly!”
“the EULA incorporates Google’s regular consumer terms; which means what you upload can also be used for advertising and targeting”
“this technology can encode database identifiers and enough entropy to uniquely identify you as an author”
“SynthID is a better standard for designating something was created with GenAI”
“I see a net positive especially since it doesn't degrade text quality”
“they are incredibly unlikely with SynthID”
“before applying synthid the percentages were 48% and 52%”
“It could be really useful for preventing synthetic data from accidentally contaminating your real datasets down the line.”
“Which won't cause false positives but only catches content from tools that actively adds this mark.”
“Any signal which helps distinguishing the two is helpful, even if it isn't perfect.”
“This blog post clearly shows that Deepwalker can break SynthID, which is a closed-source watermarking system.”
“99% of the users of these tools are never going to bother trying to figure out how to remove synthId”
“Only the investigative or journalistically inclined will make use of this, and those people already fact check.”
“I really hate these vibes-driven reactions to (checks notes) content attribution.”
“SynthID is fairly resistant to this sort of thing, although not perfect.”
“Just because something isn't perfect doesn't mean it's not useful.”
“It helps significantly in the current moment.”
“isn't the problem that malicious actors will create systems that do not use synthID”
“denoising using a diffusion model was a relatively trivial means to beat most steganographic watermarks”
“Despite people saying it will be removed, I have seen no reproducible repo demonstrating it.”
“SynthID survives basic transforms including screenshots/photos, although it can of course be defeated.”
“But that harms users too, by introducing further barriers for indie users.”
“It's a detector that will detect 100% of the stuff that doesn't mind being detected, and only the dumbest fraction of stuff that doesn't want to be detected.”
“If it's this easy to remove SynthID from an AI-generated image then it wasn't a good solution in the first place.”
“This solution helps when people lazily share things with friends or on social media I suppose, rather than stopping motivated bad actors.”
“there is no way for me to verify if groups or nation states can pay for a special contract where they do not have to have their outputs watermarked”
“SynthID is removed from images by passing the image through a diffusion model for a single step at low denoise”
“really just validates whether a piece of AI content was generated by Google, not AI generated in general”
“It's security through obscurity.”
“I'm glad SynthID (apparently) makes it impossible”
“Synth id can be removed, run it through an image 2 image model with a reasonably high denoising value or add artificial noise and use another model to denoise and voila.”
“It is, because of SynthID.”
“it can survive the kind of basic editing a regular person knows how to do on their phone”
“While a good first step, it doesn't solve the problem of AI generated content NOT having any kind of watermark.”
“So whoever creates AI content needs to voluntarily adopt this so that Google can sell "technology" for identifying said content?”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.