Developer Open-Sources Tool to Analyze and Challenge Google DeepMind's SynthID AI Watermarks
A software developer using the username Aloshdenny has released open-source code on GitHub that demonstrates removing watermarks from images generated by Google's AI tools. The method involves processing 200 Gemini-generated images to expose and partially remove SynthID patterns. Google states the tool does not systematically remove the watermarks.
hdsr.mitpress.mit.edu# Software Developer Open-Sources Method to Strip Google DeepMind SynthID Watermarks from AI Images A software developer using the username Aloshdenny has open-sourced work on GitHub that reverse-engineers Google DeepMind’s SynthID system. Aloshdenny claims to have shown how AI watermarks can be stripped from generated images or manually inserted into other works.
The Verge reported on the development in an article written by Jess Weatherbed and published on April 14, 2026, at 1:53 PM UTC.
Aloshdenny documented the process on Medium. The method required 200 Gemini-generated images, signal processing, and free time.
SynthID System Overview SynthID is a near-invisible watermarking system that tags content generated by Google’s AI tools.
It embeds itself in the pixels of images at the point of creation. SynthID was designed to be difficult to remove without degrading the image quality. SynthID is used across Google’s AI products, including models like Nano Banana and Veo 3.
It is applied to YouTube’s AI-generated creator clones.
Details of Aloshdenny's Process Aloshdenny's process to crack SynthID involves generating 200 entirely black or pure white images using Gemini.
It includes enhancing contrast and saturation, then denoising the saturation to expose watermark patterns. The process involves averaging the patterns to find the magnitude and phase of the watermark signal at every frequency bin per channel. Aloshdenny's process also involves hunting for signs of these frequencies in images and partially removing them at the angle of insertion.
' Aloshdenny was unable to remove SynthID entirely in tests and relied on confusing SynthID decoders.
Google's Response Google spokesperson Myriam Khan told The Verge: 'It is incorrect to say this tool can systematically remove SynthID watermarks.
' The Verge reported these statements in its coverage. Aloshdenny claims the work demonstrates vulnerabilities in watermark detection without full removal. The open-sourced code is available on GitHub for further examination.
Story Timeline
4 events- 2026-04-14 13:53 UTC
The Verge publishes article by Jess Weatherbed on Aloshdenny's SynthID reverse-engineering.
1 sourceThe Verge - 2026-04-14 (prior to publication)
Aloshdenny documents SynthID reverse-engineering process on Medium.
1 sourceAloshdenny - 2026-04-14 (prior to publication)
Aloshdenny open-sources SynthID reverse-engineering work on GitHub.
1 sourceAloshdenny - Prior to 2026-04-14
Aloshdenny generates 200 Gemini images and performs signal processing to analyze SynthID.
1 sourceAloshdenny
Potential Impact
- 01
Open-source code may enable wider experimentation with watermark evasion in AI content.
- 02
Google's AI products like Veo 3 and YouTube clones face questions on watermark effectiveness.
- 03
Increased scrutiny on AI watermark reliability could prompt Google to update SynthID.
- 04
Potential for misuse in inserting fake watermarks into non-AI images, affecting content verification.
Transparency Panel
Related Stories
Roblox Announces Age-Locked Account Tiers for Users Under 16 Launching in June
Roblox is introducing Kids accounts for ages 5-8 and Select accounts for ages 9-15, with automatic progression to standard accounts at age 16. The tiers, launching in June, limit access to age-appropriate games and restrict communication features. The platform, with 144 million d…
restofworld.orgRedNote Opens U.S. Offices and Launches RedShop Marketplace in 2026 Expansion
RedNote, a Chinese social media platform founded in 2013, is expanding into the U.S. with new offices in Palo Alto and New York and hiring for founding teams. The company launched RedShop, a crossborder marketplace featuring Chinese cultural products. RedNote has more than 300 mi…
Achmad Mulyana / Wikimedia (CC BY 3.0)Rockstar Games Hit by Second Data Breach at Third-Party Provider
Rockstar Games confirmed a data breach at a third-party provider, marking the second hack for the company. The group ShinyHunters claimed responsibility and demanded a ransom by April. Rockstar stated the incident will have no impact on operations.