Watermarking papers, 2023–2026

Key findings

• Watermarking went from 6 papers in 2023 to 56 in 2026, roughly 9.3x in three years.
• NeurIPS publishes the most Watermarking work: 34 papers from 2023 to 2026, 34% of the four-venue total.
• The fastest-growing overlap is with Social aspects · accountability transparency and interpretability: papers tagged with both rose from 0 in 2023 to 18 in 2026.
• Among the 5 topics under Security and Trust, it ranks #3 by 2026 paper count; the fastest grower in the group, Verification, is up 6.0x versus 9.3x here.

Representative papers

Spread across years and venues so every edition shows up

• NeurIPS 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
• ICML 2026Ideal Attribution and Faithful Watermarks for Language Models
• ICLR 2026An Ensemble Framework for Unbiased Language Model Watermarking
• CVPR 2026Convolutional Neural Networks Driven by Content Similarity
• NeurIPS 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models
• ICML 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings
• ICLR 2025A Watermark for Order-Agnostic Language Models
• CVPR 2025OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking
• NeurIPS 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
• ICML 2024DE-COP: Detecting Copyrighted Content in Language Models Training Data
• ICLR 2024On the Learnability of Watermarks for Language Models
• CVPR 2024EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection
• NeurIPS 2023An information-theoretic quantification of the content of communication between brain regions
• ICML 2023Margin-based Neural Network Watermarking
• CVPR 2023CAP-VSTNet: Content Affinity Preserved Versatile Style Transfer
• NeurIPS 2026Face Deepfake-aware Recovery via Semantic-driven Facial Representation-based Watermarking
• ICML 2026Towards Reliable Marking and Verification of AI-Generated Text via Geometry-aware Sentence-level Watermarking
• ICLR 2026Analyzing and Evaluating Unbiased Language Model Watermark
• CVPR 2026Decoupling Defense Strategies for Robust Image Watermarking
• NeurIPS 2025Provable Watermarking for Data Poisoning Attacks

All Watermarking papers

101 papers, page 1 of 3

1. CVPR 2026Convolutional Neural Networks Driven by Content Similarity
2. CVPR 2026Decoupling Defense Strategies for Robust Image Watermarking
3. CVPR 2026Mark4D Temporally-Consistent Watermarking for 4D Gaussian Splatting
4. CVPR 2026MaxMark High-Capacity Diffusion-Native Watermarking via Robust and Invertible Latent Embedding
5. CVPR 2026Meta-FC Meta-Learning with Feature Consistency for Robust and Generalizable Watermarking
6. CVPR 2026PECCVAI Overcoming the Brittleness of AI Image Watermarking Under Visual
7. CVPR 2026RecoverMark Robust Watermarking for Localization and Recovery of Manipulated Faces
8. CVPR 2026Rel-Zero Harnessing Patch-Pair Invariance for Robust Zero-Watermarking Against AI Editing
9. CVPR 2026TIACam Text-Anchored Invariant Feature Learning with Auto-Augmentation for Camera-Robust Zero-Watermarking
10. CVPR 2026Where What Why Toward Explainable 3D-GS Watermarking
11. CVPR 2026You Only Erase Once Erasing Anything without Bringing Unexpected Content
12. ICLR 2026An Ensemble Framework for Unbiased Language Model Watermarking
13. ICLR 2026Analyzing and Evaluating Unbiased Language Model Watermark
14. ICLR 2026Attack-Resistant Watermarking for AIGC Image Forensics via Diffusion-based Semantic Deflection
15. ICLR 2026CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splatting
16. ICLR 2026MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection
17. ICLR 2026NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models
18. ICLR 2026PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints
19. ICLR 2026Spherical Watermark: Encryption-Free, Lossless Watermarking for Diffusion Models
20. ICLR 2026THE SELF-RE-WATERMARKING TRAP: FROM EXPLOIT TO RESILIENCE
21. ICLR 2026WaterDrum: Watermark-based Data-centric Unlearning Metric
22. ICLR 2026Watermarking Diffusion Language Models
23. ICML 2026Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking
24. ICML 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking
25. ICML 2026Catch-22: On the Fundamental Tradeoff Between Detectability and Robustness in LLM Watermarking
26. ICML 2026Collaborative Threshold Watermarking
27. ICML 2026dgMARK: Decoding-Guided Watermarking for Diffusion Language Models
28. ICML 2026Echoes within the Reasoning: Stealthy and Effective Watermarking via Chain of Thought
29. ICML 2026How Good is Post-Hoc Watermarking With Language Model Rephrasing?
30. ICML 2026IACW: Intent-Aware Controllable Watermarking for Scalable Authorial Intent Attribution
31. ICML 2026Ideal Attribution and Faithful Watermarks for Language Models
32. ICML 2026LLM Self-Recognition: Steering and Retrieving Activation Signatures
33. ICML 2026Revisiting Coding-Based Approaches to Overcome the Curse of Dimensionality in Learning-Based Watermarking
34. ICML 2026Rotation-Invariant Spherical Watermarking via Third-Order SO(3) Representation Coupling
35. ICML 2026Selective Disclosure Watermarking for Large Language Models
36. ICML 2026Towards Reliable Marking and Verification of AI-Generated Text via Geometry-aware Sentence-level Watermarking
37. ICML 2026Watermarking Graph Neural Networks via Explanations for Ownership Protection
38. ICML 2026Watermarking LLM Agent Trajectories
39. NeurIPS 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking
40. NeurIPS 2026Asymmetric Phase Coding Audio Watermarking
41. NeurIPS 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
42. NeurIPS 2026Face Deepfake-aware Recovery via Semantic-driven Facial Representation-based Watermarking
43. NeurIPS 2026Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate
44. NeurIPS 2026Majority Bit-Aware Watermarking for Large Language Models
45. NeurIPS 2026MarkTune: Improving the Quality-Detectability Trade-off in Model-Embedded LLM Watermarking
46. NeurIPS 2026MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages
47. NeurIPS 2026Multi-bit LLM Watermarking with Certified Semantic Distortion
48. NeurIPS 2026PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI
49. NeurIPS 2026Reading the Finetuning Prior: Verbatim Content Recovery via Contrastive Decoding Diffing
50. NeurIPS 2026Robust and Hard-to-Remove GNN Watermarking via Topological Invariant Perception

FAQ

How many Watermarking papers were published at NeurIPS, ICLR, ICML and CVPR from 2023 to 2026?

101 in total: 6 in 2023, 17 in 2024, 22 in 2025, 56 in 2026.

How many Watermarking papers are at NeurIPS 2026?

NeurIPS 2026 has 18 Watermarking papers, versus 10 the year before.

How many Watermarking papers are at ICLR 2026?

ICLR 2026 has 11 Watermarking papers, versus 2 the year before.

How many Watermarking papers are at ICML 2026?

ICML 2026 has 16 Watermarking papers, versus 6 the year before.

How many Watermarking papers are at CVPR 2026?

CVPR 2026 has 11 Watermarking papers, versus 4 the year before.

Which conference publishes the most Watermarking papers?

NeurIPS, with 34 papers from 2023 to 2026.