Skip to content

Simple Unmark guide

Does ChatGPT Watermark Text?

Published
Last updated
Sources checked
3 primary references

Short answer

Yes, for eligible ChatGPT and Codex text in the European Union. OpenAI calls the method textGrain. It is an invisible statistical signal in word choices, rolling out over the coming weeks, and it is not a global default. API watermarking is opt-in and off by default. Changing words is what weakens it. Invisible characters are a different problem.

On 5 October 2026 OpenAI published how it will mark text under the EU AI Act. The answer is no longer "text is not watermarked." It is also not "every ChatGPT reply in the world now carries a mark."

Choose the privacy boundary before every rewrite.

Private is the lowest-cost path and stores no text in our application database. Confidential verifies Google Confidential Space in your browser and encrypts to a key the workload created for that one request, so our web backend receives no text — though DeepInfra still performs the rewrite. Confidential AI, with the model inside a confidential GPU, is coming soon.

Compare the three modes and their limits

What OpenAI announced

Starting 5 October 2026, API customers worldwide can opt in to text watermarking for select models. It stays off by default in the API. Over the coming weeks, an invisible watermark is added to eligible ChatGPT and Codex text in the European Union, on every plan. OpenAI is not making text watermarking a global default at launch.

Images and audio stay on the older stack: C2PA Content Credentials plus SynthID, with public verification. That stack is not the text watermark.

textGrain is word choice, not characters

OpenAI names the method textGrain. It adds an invisible statistical signal to the model's word choices. A detector looks for that signal and needs a secret key. Nothing is inserted as a hidden character.

The ChatGPT watermark remover page is where we describe the clean: a rewrite changes the words the signal lives in. OpenAI's own numbers are the reason that works better than a character scan.

Editing can weaken the watermark. In an evaluation of 400-token passages, replacing 10% of words with synonyms reduced detection from about 92% to 66%. Replacing 25% of words reduced it to 17%.
OpenAI, Our approach to EU text provenance rules (5 October 2026)

Invisible characters are still a different thing

Copied text still picks up zero-width characters from pages, editors and chat clients. Those are not textGrain. Finding one does not mean ChatGPT watermarked the passage, and deleting them does not remove the word-choice signal.

They are still worth removing when they break search, diffs, validation or pasted code. The invisible character remover does that locally and reports each code point by name.

What a detection does not prove

OpenAI is direct about the limits. A watermark can indicate that an OpenAI system generated or processed part of a passage. It does not say who used the system, who owns the text, or whether the content is accurate. If no watermark is detected, that does not prove a person wrote it. The text may be short, edited, translated, from an unsupported model, or from before the rollout.

There is no public checker. Detector access opens first to approved researchers and expert organizations. Until that changes, nobody outside that group can measure whether a specific passage still carries textGrain.

Sources

Published by Simple Unmark. Our methodology page explains how claims on this site are sourced, what we test, and what we refuse to claim.