AI Invisible Watermark & Zero-Width Text Sanitizer
Scan, detect, and neutralize invisible zero-width tracking watermarks, AI fingerprints (ChatGPT/LLMs), Trojan Source bidi exploits, and hidden steganography.
High Risk: Active Tracking Watermark / Steganography Detected
Contains zero-width binary patterns or high-risk bidi overrides commonly used by AI watermarking tools, corporate DLP leak detectors, or Trojan Source exploits.
Detected Invisible Codepoints Breakdown (3 Unique Types)
Zero horizontal width; widely used for invisible watermarks & text fingerprinting.
Prevents Arabic/Indic ligatures; commonly used in binary leak tracing.
Forces emoji combinations and ligatures; used as byte delimiter in steganography.
Visual Anomaly Highlighter (Invisible Glyphs Rendered as Badges)
Red badges indicate characters invisible to human eyesWatermark & Invisible Zero-Width Sanitizer Ready to Run
Detect, count, and strip invisible zero-width characters and AI watermarks using regex.
The Cryptographic Science of AI Watermarks & Zero-Width Steganography
Text Steganography is the practice of concealing secret information inside plain text without altering its visual layout or readability. In modern artificial intelligence systems (such as Large Language Model token generators) and corporate leak tracing tools, this is accomplished by translating secret binary sequences (0s and 1s) directly into invisible zero-width Unicode characters:
0 → U+200B (Zero-Width Space)1 → U+200C (Zero-Width Non-Joiner)U+200D (Zero-Width Joiner)U+FEFF (Zero-Width No-Break Space / BOM)Because these characters occupy exactly 0 pixels on screen and paper, a document containing hundreds of tracking tokens looks 100% identical to the naked eye. However, when copied across email, Slack, Microsoft Teams, PDF, or text files, the invisible binary byte stream remains intact.
Cybersecurity, DLP & Whistleblower Forensic Applications
- •Data Loss Prevention (DLP): Enterprises tag sensitive internal strategy memos with recipient employee IDs to pinpoint unauthorized press leaks.
- •Whistleblower & Journalist Protection: Investigative reporters use our sanitization studio to strip hidden tracking markers from leaked government or corporate files before public disclosure.
- •Trojan Source Defense: Detects and neutralizes malicious bidirectional overrides (
U+202E,U+202D) that visually mask executable exploits in source code repositories. - •100% Client-Side Privacy: All watermark analysis, binary extraction, and purification occur locally in your browser memory. No text ever leaves your machine.
Frequently Asked Questions (FAQs)
How do AI models use zero-width characters to watermark generated text?+
Certain AI platforms and enterprise wrappers inject pseudo-random combinations of zero-width spaces (U+200B) and zero-width joiners (U+200D) between ordinary words. When an AI-generated essay or response is copy-pasted, this invisible signature acts as a cryptographic fingerprint proving AI origin.
Can social media platforms (Twitter/X, Facebook, LinkedIn) strip invisible watermarks?+
Some platforms sanitize non-essential invisible characters during post submission. However, pasting text into email, PDF, Slack, Microsoft Teams, Word, Google Docs, and code editors preserves zero-width payloads with 100% fidelity.
How does the "Purify & Strip" button sanitize my text?+
Our sanitizer uses an exhaustive Unicode Regular Expression scanning for all 17+ zero-width spaces, joiners, isolates, and Trojan Source bidirectional format overrides (U+200B through U+200D, U+FEFF, U+2060, U+202A through U+202E), cleanly dropping them while leaving your visible sentences completely untouched.
What are Trojan Source attacks and why are they dangerous?+
Trojan Source attacks exploit Unicode bidirectional override characters (such as U+202E Right-to-Left Override) in source code files. To a human code reviewer, the code appears innocent, but compilers and interpreters parse the characters in their true logical order, executing hidden malicious commands. Our scanner immediately flags these as Critical Risk.
Is any of my sensitive text sent to external servers or logged?+
No. iloveunicode operates 100% locally in your client web browser using the Web Standards TextEncoder and JavaScript string manipulation engines. Nothing is ever transmitted over the network.