AI text watermark remover for Claude, GPT and Gemini
Paste anything written by Claude, ChatGPT, Gemini or Copilot. This finds and strips the invisible watermark characters that ride along with it: zero-width spaces, variation selectors, tag characters, bidirectional controls and non-standard punctuation. It shows you exactly what it found and where. It does not remove statistical watermarks, and the section below explains why nothing else does either.
What to remove
Tidy up
Read this before you trust any watermark remover
In August 2026 Anthropic confirmed that Claude marks its output. The mark in text is not made of hidden characters, so no character cleaner can remove it. That includes this one. Here is the honest split:
- This tool does remove invisible Unicode. Zero-width spaces, tag characters, variation selectors, bidi controls, lookalike letters and AI typography. Real, verifiable, and worth removing because it breaks spreadsheets, code and search.
- This tool does not remove Claude's watermark. That signal lives in the word choice itself, not in the characters. Anything claiming otherwise is selling you something.
What Claude's watermark actually is
Anthropic's support documentation says Claude embeds "an imperceptible watermark directly into the text itself", one that does not change the meaning, quality or readability of the response. It applies to Claude models launched on or after 2 August 2026, across the API, Claude, Claude Code, Cowork and Claude Tag, including deployments on AWS, Google Cloud and Microsoft Foundry. Anthropic presents it as a transparency commitment under Article 50(2) of the EU AI Act.
Anthropic has not published its specific scheme. Published approaches to text watermarking work by biasing token selection during sampling: at each step the model's pick among near-equivalent next words is nudged according to a secret key, leaving a statistical fingerprint spread across the whole passage. Alex Cui, CTO of GPTZero, described the technique to City AM as subtly changing "the probability of which words a model selects".
That is the crucial detail. A watermark built from zero-width characters would be defeated by a one-line find and replace, which is exactly why serious schemes do not use them. The signal is in the writing, not in the bytes around it.
Two different marks, two very different properties
| Property | Text watermark | C2PA file metadata |
|---|---|---|
| Applies to | Text Claude generates or edits | Image files Claude generates (SVG, PNG, JPG) |
| Mechanism | Statistical, carried in word choice | Cryptographically signed manifest attached to the file |
| Survives copy and paste | Yes | Often not |
| Removed by stripping characters | No | Not applicable |
| Removed by re-saving or screenshotting | No | Yes, easily |
| Degraded by heavy rewriting | Yes, reportedly | Not applicable |
| Proof of AI authorship | No, a probability | No, a provenance claim |
Four things people get wrong about it
It is a signal, not a verdict. Anthropic itself frames a detected mark as "a signal rather than conclusive evidence". Short passages may not carry enough text to score reliably, which means false readings run in both directions.
It does not know who wrote the words. If you draft something yourself and then ask Claude to proofread, translate or tidy it, the returned copy can carry the mark. The EU AI Act exempts content where the AI performed "an assistive function for standard editing" without substantially altering it, but the watermark cannot tell the difference. That is a real problem for anyone who uses AI as an editor rather than a writer.
Paraphrasing degrades it, character stripping does not. Because the signal is spread across word choices, rewriting the words attacks it directly. Cui told City AM that free paraphrasers had quickly bypassed Google DeepMind's SynthID. We report that because it is published and relevant, not as a recommendation, and this tool deliberately does not include a paraphraser.
The image marks are the fragile ones. C2PA manifests are the opposite case. They are tamper-evident but easy to shed: re-saving, converting format, screenshotting or simply uploading to a platform that reprocesses images will usually drop the metadata entirely. Absence of a C2PA manifest proves nothing.
What this tool actually removes
Separate problem, genuinely solvable. Most cleaners delete four or five zero-width characters and stop. This one checks every character in your text against the full set of Unicode code points that are invisible, ambiguous, or commonly used to fingerprint text.
Zero-width characters
ZWSP, ZWNJ, ZWJ, word joiners, soft hyphens, byte order marks, and the Hangul and Khmer filler characters that render as nothing at all.
Tag characters
The U+E0000 block encodes plain ASCII invisibly. An entire sentence can hide inside
one emoji. This tool finds it and decodes it back for you.
Variation selectors
U+FE00 to U+FE0F and the supplement block can carry arbitrary bytes.
This is the current favourite technique for hiding data in text.
Bidirectional controls
Right-to-left overrides and isolates can reorder what you see versus what a machine reads. That is the "trojan source" trick.
Lookalike letters
A Cyrillic о is a different character from a Latin o but looks
identical. Swapping a few is a durable, invisible fingerprint.
Typographic tells
Em dashes, curly quotes, ellipsis characters and non-breaking spaces. Visible, legitimate, and still the reason text reads as machine-written.
Why hidden characters matter anyway
Invisible Unicode breaks things quietly. It corrupts CSV imports, fails string comparisons, breaks URL slugs, throws off word counts, produces mystery bugs when pasted into code, and gets flagged by some CMS and ATS parsers. Stripping it is basic text hygiene, entirely separate from the watermark question.
It also travels. Copy a paragraph out of a chat window into an email, a document, a pull request or a job application, and the hidden characters go with it. They survive most copy and paste operations because they are real characters, not formatting. If someone did want to fingerprint a specific copy of a document, this is the crude way to do it, and this tool will show you.
Questions
Does Claude actually watermark its text?
Yes, and Anthropic says so openly. Its support documentation states that Claude embeds an imperceptible watermark directly into the text it generates, and attaches signed C2PA provenance metadata to image files. This covers Claude models launched on or after 2 August 2026 across the API, Claude, Claude Code, Cowork and Claude Tag, including AWS, Google Cloud and Microsoft Foundry. Anthropic frames it as a transparency commitment under Article 50(2) of the EU AI Act, and says it will provide tools for checking for its marks.
So does this tool remove Claude's watermark?
No, and be sceptical of any tool that claims it does. The text watermark is statistical. It lives in which words the model chose, so deleting invisible characters does not touch it. What this tool removes is a different and real problem: the invisible Unicode that turns up in AI output and quietly breaks spreadsheets, code, URL slugs, search and word counts. That is text hygiene, not evasion.
Can the watermark be removed at all?
Not by any character-level tool. Reporting on comparable systems indicates the signal degrades under heavy paraphrasing, translation or full rewriting, because those change the word choices the mark is carried in. Short passages may also lack enough text to score reliably. This site does not provide a paraphraser and does not recommend one. If your goal is to pass work off as your own, no tool here will help with that, and the honest route is to write it.
I wrote it myself and only used Claude to edit. Am I marked?
Possibly, and this is the most under-discussed part. Because the mark is applied to text the model produces, asking Claude to proofread, translate or restructure your own writing can return copy that carries it. The EU AI Act carves out AI used as an assistive function for standard editing that does not substantially alter the content, but that is a legal distinction, not something the watermark itself can detect. A detected mark is not evidence that a human did not write the underlying work.
Will removing hidden characters get my writing past an AI detector?
No. Commercial AI detectors work on statistical properties of word choice and sentence structure, not on invisible characters. Removing hidden Unicode changes nothing about how a detector scores the prose itself. Anyone selling a character stripper as a detector bypass is overselling it.
Is my text uploaded anywhere?
No. The entire tool is JavaScript running in your browser. There is no server component, no analytics call carrying your content, no logging and no storage. You can disconnect from the internet after the page loads and it will keep working, which is the easiest way to prove it to yourself.
What is a zero-width space?
U+200B is a character with no visible width. It occupies a position in the string, counts
toward the character count, and shows nothing on screen. It has legitimate uses, such as marking
line-break opportunities in long strings. But because it is invisible and survives copying, it is also
the simplest way to mark a piece of text so it can be recognised later.
What does "hidden message decoded" mean?
Unicode tag characters and variation selectors can encode ordinary bytes. A run of them sitting after a normal word is not random noise. It is data. When the tool finds such a run, it decodes it and shows you the message. This is steganography, and it is a real technique used to smuggle instructions into text that a person reads as clean.
Why remove em dashes if they are legitimate punctuation?
Because they are the most recognisable stylistic signature of current language models, and many people want them gone for that reason alone. It is a style choice, not a correctness one, so it is a toggle. Turn it off if you write em dashes yourself and want them kept.
Does removing characters change my meaning?
Invisible characters carry no meaning, so removing them is lossless. The typography options do change your text: a curly apostrophe becomes a straight one, an em dash becomes a hyphen. Those are off or adjustable by default. Use "Show what was removed" to see every single change before you copy.
Sources
- Anthropic, How Claude marks AI-generated content, support documentation.
- City AM, Claude to watermark AI slop, including edited human writing, quoting GPTZero CTO Alex Cui.
- ExplainX, Anthropic Claude invisible watermarks and C2PA, August 2026.
- Coalition for Content Provenance and Authenticity, C2PA specification.
Last reviewed 11 August 2026. Anthropic has said fuller technical documentation is coming. Where this page describes the underlying mechanism it is drawing on published watermarking approaches and reported commentary, not on a disclosed Anthropic specification, and it is labelled as such above.