Photo SignalsAI Watermark Remover

AI watermark remover — what comes off, and what only looks like it does

Four different things get called "the AI watermark". Three come off completely. The fourth cannot be verified by anyone outside the company that made it, and this page says so instead of selling you a promise.

  • Generator badges
  • C2PA Content Credentials
  • Prompt and model fields
  • Imperceptible marks

Open an image and paint over the mark

  • Nothing is uploaded
  • No account
  • Free, no limit
The four kinds

Which is which, and what happens to each

  • 1 · The visible badge

    Removed, and you can see it is gone

    The Gemini and Nano Banana sparkle in the corner. Labels from Doubao, Jimeng, Qwen and Kling. A phone's "AI edited" badge. It is paint on the picture, so you paint over it and it fills in.

  • 2 · Content Credentials (C2PA)

    Removed, and the removal is proven

    A signed record of what made the image and what was done to it, attached by Adobe, OpenAI, Cloudinary, camera makers and cloud image pipelines. It lives in the container, so the rebuild drops it and the re-inspection pass proves it is gone.

  • 3 · Generator metadata

    Removed, and there is more of it than people expect

    Stable Diffusion writes the whole prompt, the seed and the model name into the file. Local workflows write their entire graph — routinely including filesystem paths, which carry your account name. None of this is EXIF, so a tool that only knows EXIF calls those files clean.

  • 4 · The imperceptible mark

    Not verifiable — so not claimed

    Carried in the pixel and frequency statistics rather than in any field, and its detector is held by whoever created it. Our deeper levels are known to damage marks of this family, and no honest party outside can tell you whether a specific image still trips a specific private detector.

The part everyone gets wrong. Removing the Content Credentials record does not by itself remove the binding. The standard now pairs the manifest with an imperceptible mark and a perceptual fingerprint the issuer can look up, so the record can be recovered without it. Worth knowing before you rely on stripping it.

Source: the C2PA specification.

What we will tell you

Every result falls in one of three classes, and the difference between them is the whole point of this site.

  • Removed

    Proven

    Absent from the output, and proven by re-reading our own result with the same parser that found it.

  • Reduced

    Measured

    Measurably weakened and reported as a number. The number is the claim — not the word "clean".

  • Not verifiable

    Named, never claimed

    Nobody outside the owner of a private detector can tell you the answer, so we do not guess.