Google SynthID watermark detector

Vendor Google DeepMind Official site deepmind.google/models/synthid How this card is sourced

AIDI-D-0028

Updated ·

Google SynthID's Detector portal deletes an uploaded file as soon as results are returned and keeps a digital signature of it for 24 hours, per the portal's privacy notice (synthid.com, read 9 November 2026). SynthID is a watermark detector, not a classifier: it checks whether an image, video or audio file carries the imperceptible watermark that Google and partner models embed at generation, and the portal states "This is not a general AI detector. We can only detect media from the above companies, who have adopted SynthID technology" (same page, read 9 November 2026). It returns no probability score for arbitrary text or for media made by a model that did not apply the watermark. The card joins the detector index as a provenance check rather than a pattern classifier, and how this card is sourced explains why its evidence fields stay empty.

What SynthID detects

The SynthID register entry: field, value, source and read date
FieldValueSource
Content types detectedImage, video, audio, textsynthid.com
Generators coveredGoogle models: Imagen, Veo, Lyria, Gemini and NotebookLM audio (watermarked at generation), NVIDIA (Cosmos video, per the May 2025 announcement), OpenAI (partner listed on synthid.com), Kakao (partner listed on synthid.com), Apple (announced as coming soon on deepmind.google)synthid.com
Input limitsSynthID Detector portal: sign in with a Google or Apple account, one image, video or audio file per check; images in JPG, JPEG, PNG, BMP, WEBP, AVIF, HEIC, HEIF, TIFF, TIF or GIF, video in MP4, MOV or WEBM, audio in WAV, MP3, OGG, FLAC, AAC or M4A; daily usage quotas apply and the additional terms forbid automated, scraped or bulk submission. Gemini app verification: one file of 100 MB or less, video under 90 seconds, audio under 1 hour, with a quota of approximately 10 image checks, 10 video checks (up to 5 minutes total) and 10 audio checks (up to 3 hours total) in any rolling 24 hours. Text: no public checker; the open-source SynthID Text Bayesian detector scores text only from models that applied a shared watermark configuration.synthid.com
Free tierFree. The SynthID Detector portal and Gemini app verification cost nothing with a Google sign-in; Gemini allows approximately 10 image, 10 video and 10 audio checks per rolling 24 hours and the portal enforces daily quotas. SynthID Text is open source in Hugging Face Transformers v4.46.0+ and on GitHubsupport.google.com/gemini/answer/16722517
IntegrationsGemini app, Google Search and Chrome (ask whether an image, video or audio clip was created or altered by Google AI), SynthID Detector portal (synthid.com), Hugging Face Transformers v4.46.0+ (SynthID Text logits processor and Bayesian detector), GitHub reference implementation (google-deepmind/synthid-text), Content Credentials (C2PA) shown alongside SynthID results in Gemini, GetReal Security (detection partner announced May 2025)deepmind.google/models/synthid
Data retentionSynthID Detector privacy notice (synthid.com): Media Processing and Immediate Deletion: Media files you upload for verification are processed in real-time. Once the detection results are returned to you, the original media files are immediately deleted. Anti-Abuse Data Retention: To enforce daily usage quotas and defend the service against automated attacks, we securely store a digital signature of your media. This signature is mapped to your user identifier and permanently deleted after 24 hours. The notice sits under the Google Privacy Policy.synthid.com
Launch year2023deepmind.google/blog/identifying-ai-gener...
OwnershipGoogle DeepMind (Google LLC). SynthID launched as a beta for Imagen on Vertex AI on August 29, 2023; the SynthID Detector portal at synthid.com is hosted by Google under the Google Terms of Service and was announced on May 20, 2025. SynthID is a watermark detector, not a classifier: it checks whether a file carries a SynthID watermark embedded at generation by Google or partner models and returns no probability score for arbitrary text or media. Patent applications on SynthID-Text are filed on behalf of DeepMind Technologies Limited (Nature paper, competing interests).synthid.com

Google DeepMind describes SynthID as "our watermarking tool, designed specifically for AI-generated content", which "embeds digital watermarks directly into AI-generated images, audio, text or video" that are "imperceptible to humans" but detectable by SynthID's technology (deepmind.google/models/synthid, read 9 November 2026). The watermark is applied at creation: in images and video it sits in the pixels, in audio in the frequency components, and in text it is produced by adjusting token probabilities during generation. Detection therefore answers one question, whether a SynthID watermark is present, and the portal's FAQ draws the line itself: SynthID "verifies media by detecting an intentional signal embedded directly during content creation", while general AI detectors "analyze passive artifacts and patterns left behind by generative models to estimate the likelihood of AI generation" (synthid.com, read 9 November 2026).

Coverage is a list of adopters, not of generators defeated. The portal names "models across Google, Nvidia, OpenAI, and Kakao" and shows four partner marks; the DeepMind page adds "and soon, Apple" (both read 9 November 2026). Google's own watermarked outputs come from Imagen, Veo, Lyria, Gemini and NotebookLM audio, and the May 20, 2025 announcement said that "Over 10 billion pieces of content have already been watermarked with SynthID" (blog.google, read 9 November 2026). The first SynthID release was a beta for Imagen on Vertex AI on August 29, 2023 (deepmind.google blog, read 9 November 2026), which sets the launch year.

Text is the modality with no public check. The DeepMind page says SynthID now watermarks "text generated by the Gemini app and web experience", but the portal "currently supports three content types", images, video and audio, and the Gemini app's verification tool covers "images, videos, and audio" (Gemini Apps Help, read 9 November 2026). Developers can apply and detect a text watermark on their own models through the open-source SynthID Text release in Hugging Face Transformers v4.46.0 and on GitHub, where detection works only for text "generated by your model" under a stored watermark configuration (ai.google.dev, read 9 November 2026). The sibling cards for a reader comparing approaches are AI or Not, a pattern-based media classifier, and GPT-2 Output Detector, the oldest text classifier on the register.

Limits and plans

The portal takes one file per check after sign-in with a Google or Apple account: images in JPG, JPEG, PNG, BMP, WEBP, AVIF, HEIC, HEIF, TIFF, TIF or GIF; video in MP4, MOV or WEBM; audio in WAV, MP3, OGG, FLAC, AAC or M4A (synthid.com, read 9 November 2026). Its additional terms forbid using the frontend "as an automated API to run bulk media verification queries" and creating multiple accounts to "circumvent the service's rate-limiting restrictions", so the API field on this card is marked unavailable and the daily quota is stated without a number. The Gemini app states its quota: "approximately 10 image checks, 10 video checks (up to 5 minutes total), and 10 audio checks (up to 3 hours total) within any 24-hour rolling window", on files of 100 MB or less, with video under 90 seconds and audio under 1 hour (Gemini Apps Help, read 9 November 2026).

There is no paid plan. Both surfaces are free with a Google sign-in, and SynthID Text is open source, so the plans field is empty and the table below records the two public surfaces, read 9 November 2026.

Retention is stated in hours. The portal's privacy notice reads: "Media files you upload for verification are processed in real-time. Once the detection results are returned to you, the original media files are immediately deleted", and, to enforce quotas, "we securely store a digital signature of your media. This signature is mapped to your user identifier and permanently deleted after 24 hours" (synthid.com, read 9 November 2026). The card's retention rank field takes the 24-hour signature as 1 day, the longest period the notice states, with the immediate deletion of the file itself quoted beside it. The portal "is hosted by Google and is governed by the Google Terms of Service", which fixes ownership for the card.

What the vendor claims

SynthID Watermarking: Verifies media by detecting an intentional signal embedded directly during content creation. It provides high reliability and resilience, though it is limited to identifying content generated by SynthID-integrated models. (synthid.com FAQ, read 2026-11-09.) No accuracy rate is published for the Detector. The vendor-authored Nature paper (Dathathri et al., 2024) reports detectability as the true-positive rate at a fixed 1% false-positive rate on the authors' own watermarked and unwatermarked outputs, and states that non-distortionary SynthID-Text provides better detectability than Gumbel sampling for the same length text.
synthid.com, read

Google publishes no accuracy percentage for the SynthID Detector. The portal's FAQ says watermark verification "provides high reliability and resilience, though it is limited to identifying content generated by SynthID-integrated models", and on errors: "In very rare cases SynthID can also falsely trigger on non-watermarked content" (synthid.com, read 9 November 2026). No rate accompanies either sentence. The Gemini help page states the reading rule for a negative: "If a SynthID watermark isn't detected, it means the image or video wasn't created or edited by Google AI, but it could have been created by other AI systems" (Gemini Apps Help, read 9 November 2026).

The vendor's technical account is a Nature paper by Google DeepMind authors, Dathathri et al., "Scalable watermarking for identifying large language model outputs", Nature 634, 818 to 823, published 23 October 2024 (doi.org/10.1038/s41586-024-08025-4, read 9 November 2026). The card treats it as a vendor paper, not a study record: its competing interests statement reads "Work funded and performed by Google DeepMind", with patent applications filed "on behalf of DeepMind Technologies Limited". The paper reports detectability as "the true-positive rate (TPR) for a fixed false-positive rate (FPR) of x%", so its 1% false-positive setting is a threshold chosen on the authors' own unwatermarked texts, not a measured error rate on outside data. It also states that "generative watermarks are weakened by edits to the text, such as through LLM paraphrasing", that watermarking "require[s] coordination between actors running the LLM text generation services", and that quality was checked across "nearly 20 million Gemini responses" with thumbs-up rates differing by 0.01%.

The developer documentation carries the robustness caveat in plain terms: SynthID Text watermarks survive "cropping pieces of text, modifying a few words, or mild paraphrasing", but "Detector confidence scores can be greatly reduced when an AI-generated text is thoroughly rewritten, or translated to another language" (ai.google.dev, read 9 November 2026). A watermark can only be found where one was put, which is the sentence the whole card rests on.

What independent studies found

No record in the studies index tested SynthID, read 9 November 2026 in the data file. The indexed studies submit text or images of unknown provenance to a tool and count verdicts; SynthID would return "not detected" for every sample made by a model that did not apply its watermark, which is the designed behaviour rather than a false negative, so the comparison the studies make does not transfer. The study count is zero and the false positive, false negative and robustness fields are empty.

The Nature paper above is the only quantitative source on the card, and it is the vendor's. Its figures describe SynthID-Text on Gemma and Gemini outputs under conditions the authors chose, and the card quotes its limitations rather than its detection curves for that reason. A reader looking for a measured error rate on media should turn to the false positive ranking, where the pattern-based media tools have study figures and SynthID does not.

Where SynthID appears in the index

SynthID appears in one ranking, AI detectors ranked by data retention, on the stated 1 day from the 24-hour signature clause (synthid.com, read 9 November 2026). It is absent from the study-based rankings, which need an indexed record, from the free tier ranking, which sorts on words per month, from the language ranking, which needs a count, and from the claim gap ranking, because the vendor publishes no accuracy percentage.

The card also appears on AI detectors by content type, where image, video and audio are its columns and text is noted as watermark-only, and on the open-source view for the SynthID Text repository, Apache License 2.0, last commit 26 October 2026; the question page on how AI detectors work places it as the one watermark check in the index. Every detector card on the register shows the same fourteen fields, so a reader can set a provenance check's empty score columns beside the percentages the classifiers publish and decide which question they are asking.

Questions about Google SynthID

Is SynthID an AI detector?

No. SynthID detects a watermark that Google and partner models embed when they generate content; the portal states "This is not a general AI detector", and a file made by a model without SynthID returns not detected, read 9 November 2026.

Can SynthID check whether a text was written by AI?

Not through any public surface at the read date: the Detector portal supports images, video and audio only, and Gemini's verification covers the same three; the open-source SynthID Text detector works only on text from models that applied a shared watermark configuration, read 9 November 2026.

Is the SynthID Detector free?

Yes. The portal and Gemini verification are free with a Google sign-in; Gemini allows about 10 image, 10 video and 10 audio checks per rolling 24 hours, and the portal enforces daily quotas and bans automated submission, read 9 November 2026.

Does Google keep the files uploaded to the SynthID Detector?

No. The privacy notice says original files are deleted immediately after results are returned, and a digital signature used for quota enforcement is deleted after 24 hours, read 9 November 2026.

Which companies' AI content can SynthID identify?

Google, Nvidia, OpenAI and Kakao, per the portal read 9 November 2026, with Apple named as coming soon on the DeepMind page; the Gemini app itself recognises only content made with Google AI tools.

Sources and revisions

Revision log

  1. Card created

Corrections log

Related reading