Microsoft Paint AI Watermarks Raise User-Tracking Concerns

Microsoft has added AI image-generation tools to Windows Paint and Photos, alongside invisible watermarking and C2PA-based provenance measures intended to identify synthetic media. The safeguards support broader transparency efforts, including requirements under the European Union’s AI rules. But a system designed to authenticate AI-generated content poses a separate privacy risk if identifiers embedded in an image can be connected to the person or account that created it.

A recent reverse-engineering analysis found that the invisible watermark can contain a GUID identifier linked to the prompt used to generate an image. Researchers said the data could theoretically allow the output to be traced back to a user’s Microsoft account. The concern centers on Microsoft’s limited disclosure of the identifier, how the associated records are retained and who can access them, rather than on the use of watermarking itself.