AI and Provenance

How AI Image Generators Mark Their Pictures

Most major AI image tools now label what they make, in up to three ways at once. Here is what each layer is, which generators use it as of October 2026, and how to check an image yourself.

6 min read • Updated October 19, 2026
An exploded diagram of three stacked layers: a picture with a small round AI badge, a gray noise pattern standing for an invisible watermark, and a white Content Credentials card, labeled visible label, invisible watermark and Content Credentials
Three layers, read by three different audiences: people, detectors and verification tools.
On this page

The Three Ways AI Images Are Marked

When people search for a "C2PA watermark" or ask whether an AI picture carries a hidden mark, they are usually talking about one of three different things. The big image generators now use one, two or all three of them on the same picture:

  • A visible label: a small logo or badge in a corner of the image that anyone can see.
  • An invisible watermark: a signal hidden in the pixels themselves, such as Google’s SynthID, that only a detector can read.
  • C2PA Content Credentials: a signed record attached to the file, saying which tool made the image and when.
The short answer
  • C2PA is not a watermark. It is signed metadata. It can be paired with an invisible watermark so a stripped record can be found again.
  • SynthID is the most widely used invisible watermark. Google uses it, and OpenAI added it to its images in May 2026.
  • Visible labels are the weakest layer. They are easy to crop, and Google made its own optional in August 2026.
  • No mark found proves nothing. Marks can be stripped, and some tools never add them.

Visible Labels: Easy to See, Easy to Crop

A visible label works like any corner watermark: it tells every viewer something without software, and it disappears with one crop.

A forested hill silhouetted against an orange and blue sunset sky, with a small round badge reading AI in the lower right corner
With a corner label
The same sunset image cropped slightly, so the corner badge is gone and the picture looks unchanged
After a small crop
About this example

The image is a real photograph with a generic "AI" badge added for illustration. It is not the mark of any particular generator.

Google’s Gemini app has placed a small sparkle in the corner of the images, videos and music it generates. In August 2026, Google added a Media watermark setting that lets users switch that visible mark off, while keeping the invisible SynthID watermark and the C2PA metadata. Meta said in 2024 that photorealistic images made with Meta AI carry visible markers as well as invisible watermarks and metadata. Most other major generators do not add a visible mark to still images at all.

That is the same lesson photographers learned long ago: a small corner mark is a signature, not a lock. If you want a visible mark that is hard to remove, it has to cross the picture, as how to make a watermark hard for AI to remove shows.

Invisible Watermarks: SynthID and Others

An invisible watermark is built into the pixels when the image is generated. Google DeepMind describes SynthID as imperceptible to humans and "designed to stand up to modifications like cropping, adding filters, changing frame rates, or lossy compression." Because it lives in the image itself rather than in the file, it can survive a screenshot that would wipe out any metadata.

  • Google watermarks content from its generative AI products with SynthID, including images made in the Gemini app.
  • OpenAI announced on May 19, 2026 that it is adding SynthID, through a partnership with Google, to images generated in ChatGPT, Codex and the OpenAI API, alongside the Content Credentials it already used.
  • Others: Google lists NVIDIA and Kakao among the partners whose SynthID-marked content its detector can check, with Apple to follow. Meta has used its own invisible watermarks on Meta AI images.

The catch is that only the right detector can read a watermark. SynthID marks are checked with Google’s tools, and another company’s watermark needs that company’s detector. The general idea behind invisible watermarks, and why nobody can see them, is covered in invisible watermarks and Content Credentials.

C2PA Content Credentials: Watermark or Label?

C2PA is the open standard behind Content Credentials. It is often called a watermark, but it is something else: a signed record embedded in the file’s metadata. For an AI image, that record typically says which company issued it, that the image was created with a generative AI tool, and when. It often uses the IPTC "digital source type" value trainedAlgorithmicMedia, the industry code for media created by an AI model.

An image with a small AI badge next to a card titled Content Credentials listing Issued by Example Image Lab, Created with a generative AI tool, digital source type trainedAlgorithmicMedia, a signing date and a valid signature
An illustrative Content Credentials record for an AI image.

The signature makes the record tamper-evident: change the image or the record and the check fails. But metadata can simply be removed, and a screenshot or many social platforms will drop it. That is why the standard allows a record to be paired with an invisible watermark or fingerprint, so a stripped image can be matched back to its stored credentials. OpenAI’s own explanation for adding SynthID makes the same point: metadata "can be stripped, lost through uploads and downloads, or broken by transformations."

Comparing Firefly’s Content Credentials with the others: Adobe automatically applies Content Credentials to assets where all of the pixels were generated with Firefly, such as text to image, and says those credentials may also be stored in its public Content Credentials cloud. That stored copy is what lets a credential be recovered after the embedded one is stripped.

Which AI Image Generators Use Which Marks

This is what each company has said publicly, as of October 2026. Policies change often, so check the provider’s own pages before relying on any row.

Generator Visible label Invisible watermark C2PA Content Credentials
ChatGPT and OpenAI API No, for images SynthID, since May 2026 Yes, since 2024
Google Gemini (Nano Banana) Corner sparkle, optional since August 2026 SynthID Yes, starting with Nano Banana Pro in November 2025
Adobe Firefly No Not stated for Firefly images Yes, for fully generated images
Azure OpenAI (Microsoft) No Not stated Yes, on all generated images
Meta AI Visible markers on photorealistic images (2024) Yes (2024) IPTC metadata (2024)

Open-source image models are the big exception. When someone runs a model on their own computer, whether its output is marked depends on how they set it up, and marking can usually be switched off.

The law is catching up

In the EU, Article 50(2) of the AI Act requires providers of generative AI systems to mark their output in a machine-readable way so it can be detected as AI-generated. According to the European Commission, the rule applies from August 2, 2026, with a grace period to December 2, 2026 for systems already on the market before August 2.

How to Check Whether an Image Was Made by AI

A three-step diagram: look at the image for a visible label, inspect its Content Credentials, then run a detector such as SynthID Detector, Gemini or OpenAI’s verify tool, with two outcomes: a mark is found, or nothing is found, which is not proof of anything
Three checks, from quickest to most thorough.
  1. 1
    Look at the image

    Check the corners for a generator’s logo or an AI badge. Its absence means little, since labels are easy to crop and can be switched off.

  2. 2
    Inspect the Content Credentials

    Upload the file to the Content Authenticity Initiative’s Verify tool at contentcredentials.org/verify. It shows any C2PA record, including who signed it and whether AI was involved. Use the original file if you can; a screenshot will not carry the record.

  3. 3
    Ask Google about SynthID

    Upload the image to the Gemini app and ask whether it was made or edited with Google AI, or use the SynthID Detector. Google says its detector can also recognize SynthID marks from partners including OpenAI and NVIDIA.

  4. 4
    Use the maker’s own tool

    OpenAI offers a public verification tool, in preview since May 2026, that checks images for its Content Credentials and SynthID watermark.

  5. 5
    Look for a platform label

    Some social platforms read these signals on upload and show an AI label next to the post.

What the Marks Cannot Tell You

A table of how often each mark survives four things: visible labels survive saving, screenshots and uploads but are usually lost when cropped; invisible watermarks are often kept through all four; Content Credentials are usually lost in a screenshot and depend on the platform for uploads and edits
Each layer covers a weakness of another. None survives everything.
  • No mark is not proof of a real photo. OpenAI’s own tool deliberately draws no conclusion when it finds nothing, because signals can be stripped.
  • A mark only speaks for its own maker. A SynthID check cannot recognize another company’s watermark, and a Content Credentials check finds nothing in a file whose metadata was removed.
  • A mark says how an image was made, not whether it is true. A genuine photo can mislead, and a labeled AI image can be harmless.
  • Edits blur the line. An AI-edited photo may be marked as AI-generated or as edited, depending on the tool and the change.

What This Means for Photographers and Artists

These systems are built to label AI output, not to protect your work. Your own photos carry none of these marks unless your camera or editing software adds Content Credentials, and some now can. Two practical takeaways:

  • Provenance works for you too. If your camera or editor can sign your files with Content Credentials, a signed original can help show a photo is yours and how it was edited. Your name and copyright in the file’s metadata help as well; see copyright in photo metadata.
  • The visible watermark is still the one people read. Credentials and invisible marks need software. A visible watermark credits you to everyone who sees the image, wherever it ends up.

If your concern is AI models training on your work rather than labeling their own output, see how to protect your art from AI training, and Glaze vs Nightshade for two tools built against it. Whether an AI image can be copyrighted at all is a separate question, covered in can you copyright AI art? Watermark.ws adds visible text and logo watermarks to photos, PDFs, GIFs and videos; it does not add invisible watermarks or Content Credentials.

Sample photos: Tree reflection by Yu-chuan Hsu, Sunset over a hill by Lauren Coleman on Unsplash.

Frequently Asked Questions

Is C2PA a watermark?

Not strictly. C2PA Content Credentials are signed metadata attached to a file, recording where it came from and how it was made. Because metadata can be stripped, the standard allows them to be paired with an invisible watermark or fingerprint that leads back to a stored copy.

Do ChatGPT images have a watermark?

Not a visible one on still images. Images generated with ChatGPT and the OpenAI API carry C2PA Content Credentials, and since May 2026 OpenAI also adds Google’s invisible SynthID watermark.

What is SynthID?

SynthID is Google DeepMind’s invisible watermark for AI-generated content. It is embedded in images, video, audio and text from Google’s AI products, and since 2026 in OpenAI images too. You can check for it in the Gemini app or with Google’s SynthID Detector.

How can I tell if an image is AI-generated?

Check for a visible label, inspect the file at contentcredentials.org/verify, and run it through a detector such as Gemini or OpenAI’s verification tool. If nothing turns up, the question stays open; marks can be removed and not every tool adds them.

Can AI image watermarks be removed?

Visible labels can be cropped, and Content Credentials disappear when metadata is stripped or the image is screenshotted. Invisible watermarks such as SynthID are designed to survive common edits, but no watermark is impossible to weaken.

Do Adobe Firefly images have Content Credentials?

Yes. Adobe automatically applies Content Credentials to assets that are entirely generated with Firefly, such as text-to-image results, and may store them in its public Content Credentials cloud so they can be recovered if the embedded copy is lost.

The Mark Every Viewer Can Read

Add a clear visible watermark with your name or logo to a whole batch of photos, right in your browser.

© Watermark.ws by Much Media Inc

Made in Canada