AI Watermark Comparison: Claude vs GPT vs Gemini (2026)
A high-level, honest overview, not a benchmark with invented numbers.
Text: distributional watermarks
Several providers have researched or shipped statistical token-level watermarks for text, based on the same core idea: bias word choice using a secret key so the output carries a measurable signal readable only by the key holder. The important, honest point for all of them is the same, you cannot detect or verify these without the provider's private key. Public "AI detectors" rely on different, less reliable heuristics and are not reading the watermark itself.
Images: content provenance (C2PA)
For images, the industry direction is C2PA Content Credentials: cryptographically signed metadata that records how an image was made. This is provenance, not a hidden pixel watermark. It travels in the file's metadata, which means it can be inspected, and also stripped by re-saving or removing metadata. Our image tool removes C2PA along with EXIF, XMP, and IPTC metadata; it does not alter pixels.
What this means in practice
If your goal is to clean a file you own: you can remove hidden characters from text and metadata from images, reliably and locally. If your goal is to make AI text "undetectable," be skeptical of any product promising that, paraphrasing reduces signal but guarantees nothing, and disclosure obligations may still apply. The honest tools are the ones that tell you where the limits are.
Why "removal difficulty" is the wrong question
Comparison articles love to rank watermarks by how hard they are to remove. That framing is misleading, because it lumps together two mechanisms with totally different properties. Image provenance (C2PA) is metadata: reliably present, reliably inspectable, and reliably removable by re-saving the file. A statistical text watermark is the opposite: you cannot even confirm it is there without the provider's key, so "removal difficulty" is unmeasurable from the outside. The useful question is not "how hard is it to remove," but "what can I actually verify, and what am I only guessing at."
What holds true across providers
Whatever the provider, three things stay constant. First, a key-based statistical watermark is not third-party readable, so treat any confident cross-model "detection score" as marketing, not measurement. Second, provenance metadata on images is a genuine, inspectable signal, and a removable one. Third, paraphrasing is the only general lever on statistical text watermarks, and it trades your original wording for a reduction in signal that is never a guarantee. A comparison that respects those three facts is worth reading; one that publishes precise made-up detection rates for each vendor is not.
The practical takeaway
If you own the content and want it clean, the reliable moves are the same regardless of which model produced it: strip hidden characters from text, strip metadata from images, and paraphrase if you specifically need to reduce statistical signal. If your aim is to pass content off as human where disclosure is expected, no comparison table changes the ethics of that. We built these tools to do the honest, mechanical parts well, and to be clear about the parts nobody can do.