Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editing

• URL: http://arxiv.org/abs/2605.19511v1
• Date: Tue, 19 May 2026 08:08:40 GMT
• Title: Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editing
• Abstract summary: SafeMark is a framework for watermark-preserving text-guided image manipulation.<n>It integrates watermark integrity into the editing process.<n>It is compatible with differentiable diffusion-based editors.
• Score: 16.57604502387633
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: This paper investigates a fundamental yet underexplored question: can watermarked images remain editable without compromising watermark integrity? We propose SafeMark, a framework for watermark-preserving text-guided image manipulation that explicitly integrates watermark integrity into the editing process. Specifically, SafeMark adds a thresholded watermark-decoding loss directly to the diffusion editor's training objective, fine-tuning the editor so that semantically valid edits also preserve the embedded watermark at the final output. This design admits a clean information-theoretic justification: maintaining high bit-accuracy on the edited image lower-bounds the mutual information that the editor channel preserves between watermark and edited output, the quantity that fundamentally controls watermark recoverability. SafeMark is compatible with differentiable diffusion-based editors, and requires no architectural modification. Extensive evaluations across multiple datasets, text-guided editing methods, and post-edit distortion settings demonstrate that SafeMark achieves high watermark bit accuracy across diverse editing settings while maintaining high-quality semantic edits, without sacrificing robustness to common post-edit distortions. These results demonstrate that semantic editability and watermark integrity are fundamentally compatible, enabling trustworthy image provenance in generative editing pipelines.

Related papers

• AngelFingerprint: A Traceable, Explainable, and White-Box Stealthy Watermark for Text-Guided Image Editing [19.14048800395326]
  We propose AngelFingerprint, a novel watermarking framework ensuring edit traceability, explainability, and white-box stealthiness.<n>It embeds the editing prompt's CLIP text embedding directly into the model's weights. An extractor then recovers this embedding from the image pixels alone.<n>On the MagicBrush dataset, our extractor achieves $86%$ top-1 accuracy in a 200-way prompt retrieval, versus $20%$ for prompt inversion.
  arXiv  Detail & Related papers  (2026-09-04T04:29:23Z)
• Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking [0.3644540605358075]
  diffusion-based image editing injects noise and reconstructs images through a powerful generative prior.<n>We show that non-adversarial diffusion editing can unintentionally degrade or remove robust watermarks.<n>Results indicate that even routine semantic edits can significantly reduce watermark recoverability.
  arXiv  Detail & Related papers  (2026-03-13T12:46:27Z)
• ProEdit: Inversion-based Editing From Prompts Done Right [63.554692704101]
  Inversion-based visual editing provides an effective and training-free way to edit an image or a video based on user instructions.<n>Existing methods typically inject source image information during the sampling process to maintain editing consistency.<n>We propose ProEdit to address this issue both in the attention and the latent aspects.
  arXiv  Detail & Related papers  (2025-12-26T18:59:14Z)
• Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks [4.138397555991069]
  Powerful diffusion-based image generation and editing models can inadvertently remove or distort embedded watermarks.<n>We present a theoretical and empirical analysis demonstrating that diffusion-based image editing can effectively break state-of-the-art robust watermarks.<n>We propose a diffusion-driven attack that uses generative image regeneration to erase watermarks from a given image.
  arXiv  Detail & Related papers  (2025-11-05T16:20:29Z)
• EditMark: Watermarking Large Language Models based on Model Editing [76.04893766374221]
  We propose EditMark, the first watermarking method that leverages model editing to embed a training-free, stealthy, and performance-lossless watermark.<n>Experiments indicate that EditMark can embed 32-bit watermarks into LLMs within 20 seconds with a watermark extraction success rate of 100%.
  arXiv  Detail & Related papers  (2025-10-18T06:25:17Z)
• SAEdit: Token-level control for continuous image editing via Sparse AutoEncoder [52.754326452329956]
  We introduce a method for disentangled and continuous editing through token-level manipulation of text embeddings.<n>The edits are applied by manipulating the embeddings along carefully chosen directions, which control the strength of the target attribute.<n>Our method operates directly on text embeddings without modifying the diffusion process, making it model agnostic and broadly applicable to various image backbones.
  arXiv  Detail & Related papers  (2025-10-06T17:51:04Z)
• TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity [76.98973481600002]
  This paper proposes a Tamper-Aware Generative image WaterMarking method named TAG-WM.<n>The proposed method comprises four key modules: a dual-mark joint sampling (DMJS) algorithm for embedding copyright and localization watermarks into the latent space while preserving generative quality.<n>The experimental results demonstrate that TAG-WM achieves state-of-the-art performance in both tampering robustness and localization capability even under distortion.
  arXiv  Detail & Related papers  (2025-06-30T03:14:07Z)
• Lost in Edits? A $λ$-Compass for AIGC Provenance [119.95562081325552]
  We propose a novel latent-space attribution method that robustly identifies and differentiates authentic outputs from manipulated ones.<n>LambdaTracer is effective across diverse iterative editing processes, whether automated through text-guided editing tools such as InstructPix2Pix or performed manually with editing software such as Adobe Photoshop.
  arXiv  Detail & Related papers  (2025-02-05T06:24:25Z)
• Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances [13.746887960091112]
  Large-scale text-to-image models can distort embedded watermarks during editing, posing challenges to copyright protection.<n>We introduce W-Bench, the first comprehensive benchmark designed to evaluate the robustness of watermarking methods.<n>We propose VINE, a watermarking method that significantly enhances robustness against various image editing techniques.
  arXiv  Detail & Related papers  (2024-10-24T14:28:32Z)
• Robust and Minimally Invasive Watermarking for EaaS [50.08021440235581]
  Embeds as a Service (Eding) is emerging as a crucial role in AI applications.<n>Eding is vulnerable to model extraction attacks, highlighting the need for copyright protection.<n>We propose a novel embedding-specific watermarking (ESpeW) mechanism to offer robust copyright protection for Eding.
  arXiv  Detail & Related papers  (2024-10-23T04:34:49Z)
• Robust-Wide: Robust Watermarking against Instruction-driven Image Editing [21.69779516621288]
  Malicious users can easily exploit instruction-driven image editing to create fake images. We propose Robust-Wide, the first robust watermarking methodology against instruction-driven image editing. Experiments demonstrate that Robust-Wide can effectively extract the watermark from the edited image with a low bit error rate of nearly 2.6%.
  arXiv  Detail & Related papers  (2024-02-20T03:33:54Z)
• DiffEditor: Boosting Accuracy and Flexibility on Diffusion-based Image Editing [66.43179841884098]
  Large-scale Text-to-Image (T2I) diffusion models have revolutionized image generation over the last few years. We propose DiffEditor to rectify two weaknesses in existing diffusion-based image editing. Our method can efficiently achieve state-of-the-art performance on various fine-grained image editing tasks.
  arXiv  Detail & Related papers  (2024-02-04T18:50:29Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.