Video Watermarking Explained: Techniques, Software & Protection Methods
Updated September 2026. This post first ran in June 2023 as a list of reasons to add a watermark to a video. Those reasons still hold, and they are no longer the whole picture. On 2 August 2026, Article 50 of the EU AI Act made machine-readable marking of AI-generated video a legal obligation, and the Code of Practice published that June set an expectation of two marking layers rather than one. Picking the wrong watermarking method is now a compliance failure, not only a piracy risk.
01What is video watermarking?
Video watermarking embeds an identifier into a video so the file carries information about its origin, owner, or recipient wherever it travels. It takes one of three forms: a visible overlay burned into the pixels, an invisible pattern recoverable by a detector, or a signed metadata record attached to the file.
They are not interchangeable. They survive distribution differently, answer different questions, and since August 2026 only two of them count toward EU compliance.
02What are the three types of video watermarking?
Visible overlay. A logo, text, or timecode composited into the frames. The only type a viewer sees with no tooling, which is its real advantage. It can also be cropped, blurred, or covered, and generative inpainting has made removal far easier than when the technique became standard. Treat it as deterrence, not enforcement.
Forensic watermarking. An imperceptible signal built to survive transcoding and read back by a detector. Each delivered copy carries a payload tied to a session or recipient, so a leak traces back to whoever received it.
C2PA Content Credentials. Not strictly a watermark: a cryptographically signed manifest recording what created the file and what edited it. Tampering is detectable. The manifest is also trivially removable, and platform pipelines remove it as routine.
| Visible overlay | Forensic watermark | C2PA manifest | |
|---|---|---|---|
| Visible to a viewer | Yes | No | Only in a credentials-aware viewer |
| Survives re-encoding | Yes | Designed to | No, stripped by most pipelines |
| Survives crop or blur | No | Usually, scheme dependent | Not applicable |
| Identifies the recipient | Only if burned in per copy | Yes, by design | No |
| Cryptographically verifiable | No | No, payload is unsigned | Yes, a hard binding |
| Counts toward Article 50 marking | No | Yes, as one of two layers | Yes, as one of two layers |
03Does the EU AI Act require video watermarking?
Yes, for AI-generated video, since 2 August 2026.
Article 50(2) requires providers of generative AI systems to mark outputs in a machine-readable format, detectable as artificially generated. Article 50(4) requires deployers to disclose deepfakes. Breaches fall under Article 99(4): up to €15 million or 3% of worldwide annual turnover, whichever is higher, with SMEs capped at whichever is lower.
One layer is not enough. The Code of Practice expects at least two layers of machine-readable marking, generally signed metadata and an imperceptible watermark, because no single technique meets all four statutory criteria of effective, interoperable, robust, and reliable. Signed metadata is verifiable but fragile. Watermarking is durable but unsigned. A visible "AI generated" caption satisfies neither.
| Date | What applies |
|---|---|
| 2 August 2026 | Article 50 applies; authorities can act |
| 2 December 2026 | Deadline for systems already on the market before 2 August to implement 50(2) marking |
| 2 February 2027 | Providers expected to publish detection tooling and interoperability information |
If you shipped a generative video feature before August, the 2 December window is the live one.
04Why do watermarks disappear after upload?
Because platforms transcode, and transcoding discards file metadata.
Generation ──► manifest signed + watermark embedded
▼
Platform ingest ──► reads manifest, drives its own AI label
▼
Transcode ◄── manifest DISCARDED here; watermark usually survives
▼
File the audience sees ──► re-upload: manifest gone, watermark often recoverable
As of 2026: Instagram, Facebook and Threads read credentials to trigger AI labels, then strip them from the served file. YouTube transcodes everything and surfaces provenance through its own platform-rendered disclosures instead. TikTok labels from C2PA markers and announced in November 2025 that it is testing an invisible watermark, explicitly because labels can be removed on re-upload. LinkedIn is unusual in preserving and displaying the credential chain. X strips EXIF, and reporting on its provenance display is inconsistent.
C2PA's answer is durable Content Credentials: pairing the manifest with an invisible watermark and a content fingerprint, either of which can look the manifest back up from an online database. Both are soft bindings, so they tell you where the record is. Only the signature tells you it is intact.
05Which video watermarking method should I use?
| Your goal | Use |
|---|---|
| Casual re-uploaders should know it is yours | Visible overlay, applied at render |
| Trace which recipient leaked a screener | Forensic watermark with a per-recipient payload, plus a detector |
| Satisfy Article 50 for AI-generated video | Signed C2PA manifest and an imperceptible watermark, both at generation |
| Viewers on social must see the mark | Visible overlay; the machine-readable layer will likely be stripped first |
| Protect a premium stream at scale | A/B variant streaming, where the CDN edge serves each viewer a unique variant sequence |
| Protect low-volume screeners | Per-session encoding |
Needing several at once is normal. It means separate steps at separate stages, not one product.
Browse video processing APIs →
06Where does ApyHub fit?
Directly on scope: ApyHub's Video Watermarking API is a visible-overlay tool. It composites text or image watermarks into a video and returns an async job you poll, with controls for position (nine anchor points), opacity (default 0.5), font size and colour, image scale, and output resize. Submitting a job costs 400 atoms; the synchronous variant returning a signed link costs 550.
It does not do forensic payloads and it does not sign C2PA manifests, so it is not the thing to point at an Article 50 obligation. For branding, screener burn-in, and per-recipient visible marking at volume, it fits.
Try the Video Watermarking API →
Regulation now requires a marking layer most utility API catalogues do not offer. If you maintain a forensic watermarking or C2PA signing service, publishing it as an API reaches teams assembling this from parts today.
07Conclusion
Watermarking in 2026 splits into a visible layer a human can see, a forensic layer that traces a copy to a person, and a provenance layer a regulator can check. They survive distribution differently, and compliance now expects two of them together.
Name the question first. Deterrence, attribution, and proof of origin are three problems, and a tool that solves one well is not a partial solution to the other two.
08FAQ
Does a visible watermark satisfy the EU AI Act? Not on its own. It can serve the human-facing disclosure in Article 50(4), and it is not machine-readable marking under 50(2).
When did the EU AI Act watermarking rules start applying? 2 August 2026. Systems already on the market before that date have until 2 December 2026 to implement 50(2) marking.
Is a C2PA manifest enough on its own for Article 50? Generally no. The Code of Practice expects at least two layers, normally signed metadata plus an imperceptible watermark.
What is the penalty for failing to mark AI-generated video? Up to €15 million or 3% of worldwide annual turnover, whichever is higher, under Article 99(4). SMEs are capped at whichever is lower.
Do C2PA Content Credentials survive a YouTube or Instagram upload? Generally no. Both read credentials at ingest, then discard the metadata during transcoding.
What is the difference between an invisible watermark and a fingerprint? A watermark is actively inserted and changes the content imperceptibly. A fingerprint is passively computed and changes nothing. Both look up provenance data.
What is forensic watermarking used for? Tracing a leaked copy back to its recipient, typically for screeners, pre-release content, and premium live streams.
Do I have to publish a detector for my watermark? From 2 February 2027, providers are expected to make detection tooling and interoperability information publicly accessible.
How do I add a watermark to a video programmatically? Send the video URL or file to a watermarking API with your text or image and placement settings. The Node.js walkthrough covers submission and polling, and the API comparison covers the vendor landscape.
Sources: Article 50 · Article 99 · Code of Practice · Code of Practice signatories, 31 July 2026 · Article 50 enforcement and fines · Durable Content Credentials · Content Credentials on social platforms · TikTok on AI content labelling · DASH-IF A/B watermarking