Claude Text Watermark Comes to Opus 4.7, Opus 4.6 and Sonnet 4.6 on November 3: What Changes

Table of Contents

• What is changing on November 3?

• Which Claude models carry the text watermark?

• How does the Claude text watermark work?

• Who can check for the watermark?

• What survives editing, and what doesn't

• What this means if you write with Claude

• Where StealthGPT fits, and where it doesn't

• FAQ

On November 3, 2026, four Claude models that have been writing unmarked text all year will start carrying Anthropic's text watermark. They are Claude Mythos 5, Claude Opus 4.7, Claude Opus 4.6 and Claude Sonnet 4.6. If you've been sticking with one of them, whether out of habit or because it was cheaper, the text it gives you from Tuesday on will look exactly the same and won't be the same underneath.

The news came by email. Anthropic wrote to organizations using those models on the Claude Platform, its API, under the subject line "Text watermarking is coming to more Claude models." A screenshot of the email was published on October 28 by the Italian consultant Pasquale Pillitteri, and it spread widely after Pete Sena posted it on X on October 30. Below is what the email says, what Anthropic's own pages say about the watermark, and what it means for anyone who writes with Claude. Everything here was checked on October 31, 2026.

What is changing on November 3?

According to the email, as quoted by CellCog and Pillitteri, Anthropic "will begin applying its text watermark to outputs from these four models" on November 3, 2026. The email adds that "rollout on Amazon Bedrock may take a few additional days," and that it is "the same watermark our newer models, including Claude Opus 5.5, already carry."

So nothing new is being invented here. The watermark has existed since August. Anthropic explained it in a post on August 14, How Claude's text watermark works, and every Claude model launched since August 2 has carried it from day one. What changes on Tuesday is coverage. The older models people kept using for months now join the list.

There is one detail in the email worth knowing about even though most people won't be affected by it. CellCog reports that the email names an exception for customers who rely on the watermark for their own compliance and run Claude with non-default sampling settings, and that the part explaining it is cut off in the public screenshot. If that describes your setup, read the full notice from Anthropic rather than a screenshot of it.

Which Claude models carry the text watermark?

Anthropic keeps the official list on its help center page, How Claude marks AI-generated content. The page lists 16 models. Reading it together with the email, the picture as of October 31, 2026 looks like this:

Two things are easy to misread. The help center table already shows a check for all 16 models on Anthropic's surfaces, including the four that only start on November 3, so the check describes where things are headed rather than what is live today. And the last three models still have no date at all. One of them may not matter for long: the French outlet MACCUS points to Anthropic's September 30 release notes, which say Sonnet 4.5 leaves the Claude API on November 30, 2026.

The watermark is also not retroactive. Anthropic's help page lists "generated by a model before marking was supported for that model" as one of the reasons Claude text can come back unmarked, so a Sonnet 4.6 draft you wrote in October stays as it was.

How does the Claude text watermark work?

The easiest way to picture it is the example Anthropic uses itself. A model writes one word at a time, and often several words would do equally well. After "The weather today was cold and," both "overcast" and "grey" are fine. Normally a random number decides between them. With watermarking, a secret key plus the few words that came before decide instead.

To a reader, nothing looks different. Anthropic says nothing is added to the text, there are no hidden characters, it costs no extra tokens and it doesn't change the price. In its internal testing it saw no effect on the content, creativity or readability of Claude's writing. But someone holding the key can look at a long passage and ask whether the word choices keep lining up with what the key predicts. If they do, they can put a probability on Claude having been involved.

The method is Anthropic's version of SynthID-Text, which Google DeepMind published in Nature in 2024. Anthropic says the watermark carries no information about you, your organization or your chats, so it can say something about the text but nothing about who asked for it.

The reason for all of this is European law. Article 50 of the EU AI Act requires providers to mark AI-generated content from August 2, 2026, and Anthropic was one of around 190 signatories to the EU Code of Practice on Transparency of AI-Generated Content in July. Systems already on the market before August get a transition period, which both CellCog and Pillitteri put at December 2, 2026. Anthropic applies the watermark worldwide, not only in the EU, because it says it doesn't "yet have a durable way to scope it by region."

Who can check for the watermark?

This is the part people complain about most. MACCUS described a popular r/ClaudeAI thread on October 30 whose main grievance was that the people whose text carries the mark can't check it themselves. It's worth being precise here. There is no public checker for Claude's text watermark. Detection runs through an API in private preview, and according to Anthropic it is available to "eligible organizations as required under EU law (such as regulators, law enforcement, media, fact-checkers, independent researchers, educational organizations, and EU civil society groups)," plus enterprises that have to verify watermarking for their own compliance. Anthropic says it plans to widen access over time and takes requests through a form.

Notice that educational organizations are on that list. If you're a student, the question of who can test your essay is already partly answered.

Files are a separate system. When Claude creates a PNG, JPEG or other supported file, it attaches a signed C2PA Content Credential to the metadata, and anyone can read that with Anthropic's free Claude Content Checker. That tool doesn't read the watermark in text.

Two limits apply to any result. A detected mark is, in Anthropic's words, "a signal that content was processed by Claude, but is not fully conclusive." It can't tell the difference between "Claude wrote this" and "Claude heavily edited this," and a translation by Claude carries the mark even if a person wrote the original. And a missing mark proves nothing either, because short passages, heavy edits and older models all come back clean.

What survives editing, and what doesn't

Because the watermark lives in the words Claude chose, it is strongest where Claude made lots of free choices and weakest where it made few. Here is what Anthropic's explainer and help page say about the common cases:

• Copy and paste: the mark travels with the text.

• Light editing by a person: Anthropic says it "probably won't remove the watermark completely."

• A complete rewrite where every word is replaced: removes it. Anthropic adds that at that point it's arguable whether the text is still AI-generated.

• Proofreading: when you ask Claude to fix only grammar and punctuation, the mark can only sit in those few corrections, which may be too few to register.

• Short passages: detection "doesn't work well on small samples."

• Factual sentences and code: marking is sparser, because there are fewer equally good choices.

• Translation by Claude: carries the mark, since every word is Claude's.

Our earlier post on how Claude watermarking works covers the background from August. The short version for November is that the same rules now apply to four more models.

What this means if you write with Claude

For most people, nothing visible changes. CellCog reports that the email tells customers they don't need to change anything, and a support reply or an internal summary written by Sonnet 4.6 next week will read the same as one written this week. It matters more where someone else might check: school, publishing, job applications, client work.

• If you used an older model partly because it wasn't watermarked, that reason ends on November 3 on Anthropic's own surfaces, and a few days later on Bedrock.

• If you deliver copy to clients, the text you hand over will carry Claude's mark whether or not your client has any relationship with Anthropic. Pillitteri's advice is to say so in the contract or the delivery notes, which seems sensible.

• If you use Claude to tidy up your own writing, Anthropic's explainer is on your side. A light proofread leaves very little for the watermark to attach to. A draft Claude writes from scratch leaves a lot.

• If you build a product on the API, Anthropic's help page says you should assess your own Article 50 obligations. The watermark on Claude's output doesn't settle them for you.

It's also worth keeping the watermark separate from AI detectors in your head. Anthropic makes the point itself: tools like Pangram don't have its key, so they look for stylistic tells in the writing. A watermark check and a detector score are answering different questions, and our post on whether Claude can be detected goes into the detector side.

Where StealthGPT fits, and where it doesn't

We should be straight about this, because a lot of "watermark remover" marketing isn't. StealthGPT rewrites text at the sentence level, changing structure and rhythm as well as vocabulary while keeping the meaning. Anthropic's own pages list heavy editing and paraphrasing among the reasons a Claude mark may not be detectable, and they say a full rewrite removes it. That is the kind of change our Claude watermark remover is built to make.

What we can't do is prove the result against Anthropic's detector, because nobody outside the approved organizations can run text through it, us included. Our free AI detector tells you how your text reads to a style-based detector. It does not read Claude's watermark. Anyone who claims to show you a "watermark score" for Claude text today should be asked where they got the key.

The safest habit is the old one. Use Claude for the parts it's good at, put your own thinking and your own sentences into the work, and be honest with whoever you're writing for about how it was made. The watermark makes that last part matter a bit more than it did last week.

FAQ

Does Claude watermark text?

Yes. Every Claude model launched since August 2, 2026 watermarks its text, and from November 3, 2026 Claude Mythos 5, Opus 4.7, Opus 4.6 and Sonnet 4.6 join them on Anthropic's own surfaces, with Amazon Bedrock a few days behind. Opus 4.5, Sonnet 4.5 and Haiku 4.5 have no start date yet.

Can I see the Claude watermark?

No. It is a statistical pattern in which words Claude picks. There are no hidden characters to find, so tools that strip invisible characters don't affect it.

Who can detect the Claude text watermark?

Only organizations admitted to Anthropic's private-preview detection API, such as regulators, law enforcement, media, fact-checkers, independent researchers, educational organizations, EU civil society groups and enterprises with matching compliance duties. There is no public checker for text as of October 31, 2026.

Can I turn the watermark off?

Anthropic's pages describe no setting for it. The watermark is applied at the model level, so it appears on every surface where a supported model runs.

Does editing remove the Claude watermark?

Light edits probably won't remove it completely, according to Anthropic. A complete rewrite where every word is replaced will. Heavily edited, paraphrased or very short text may carry too little signal to detect.

Does the watermark identify me?

No. Anthropic says neither the watermark nor its key contains any information about the user, their organization or their chats.