Simple Unmark guide
Does ChatGPT Watermark Text?
- Published
- Last updated
- Sources checked
- 3 primary references
Short answer
Not for text, as far as OpenAI's own documentation shows. Its published provenance work covers supported images and audio, combining C2PA Content Credentials with SynthID watermarking and a verification tool. Invisible characters found in copied ChatGPT text come from the copy path, not from a documented watermark.
You should not assume every ChatGPT response carries a secret watermark. Several separate ideas get collapsed into that claim, and OpenAI's documentation supports a narrower one.
What OpenAI documents
OpenAI's provenance work is described for files: C2PA Content Credentials as signed context, plus SynthID watermarking as a signal that survives when metadata does not, plus tooling to verify whether an image — and, later, supported audio — came from its systems. Verification is also exposed to developers.
Text is absent from that stack. Reporting has long noted that OpenAI researched text watermarking without shipping it to production models, and OpenAI retired its own AI text classifier in 2023 over accuracy. So for ordinary ChatGPT prose there is no documented mark, and no first-party checker.
Then why do I find invisible characters?
Because copied text travels through software that inserts them. Rendered pages use zero-width characters for line-breaking control, rich-text editors and docs apps insert formatting characters, PDF exports scatter unusual spaces, and chat clients add joiners around emoji and mentions.
The reasoning error is treating an ambiguous artifact as a signature. These characters have ordinary explanations, appear in text no model touched, and are absent from plenty of model output. Meanwhile the providers that do watermark text state they add no characters at all — so hidden characters are, if anything, evidence against the watermark theory rather than for it.
Worth cleaning anyway
The case for removing them has nothing to do with provenance. They break string equality, so search misses matches, diffs show phantom changes, validation rejects correct input, identifiers and URLs fail, and pasted code will not compile.
That is a formatting-hygiene job with an exactly measurable result: a count of what was removed. Our invisible character remover does it locally and free, and reports each code point by name.
Watermarks are not detectors
A watermark is a keyed signal added at generation. A detector guesses from surface statistics, with false positives that fall hardest on plain and non-native English writing. Removing hidden characters changes neither, and cleaning text does not convert a detector's guess into proof of human authorship.
If you are subject to disclosure rules, comply with them. This tool exists for formatting hygiene, privacy, editorial independence and control over machine-readable signals — not for defeating an institution's policy.
Sources
- Advancing content provenance
OpenAI · first-party
- Content provenance guide
OpenAI Platform docs · first-party
- UTR #36: Unicode Security Considerations
Unicode Consortium · first-party
Published by Simple Unmark. Our methodology page explains how claims on this site are sourced, what we test, and what we refuse to claim.
Apply this to your own text.
Three guest cleans are free, with no account required. Deterministic character inspection is free and unlimited.
Keep reading
- How AI Text Watermarks WorkHow hidden-character marks and statistical token watermarks differ, how detection works, and why removal claims should always be bounded.
- What Is SynthID Text?SynthID Text explained: how Google's text watermark is applied during generation, how detection works, what weakens it, and how it differs from image watermarking.
- Hidden Unicode vs Statistical Text WatermarksThe two mechanisms confused most often: invisible Unicode characters versus keyed token-choice watermarks. What each one is, what removes it, and what neither proves.
- AI Watermarks vs AI Detectors vs Provenance MetadataThree different things routinely confused: keyed watermarks added at generation, statistical AI detectors that guess, and C2PA metadata attached to files.
