Can You Trust That Video? AI Watermarking in 2026
As deepfakes get indistinguishable, the industry is labelling AI content at the source. How C2PA and SynthID work, why OpenAI and Google adopted them β and why you still can't trust your feed.
You scroll past a video of a politician saying something inflammatory, a photo of an event that never happened, a voice note from a "relative" asking for money. In 2026, the unsettling truth is that any of them could be entirely synthetic β generated by AI, indistinguishable to the eye and ear from the real thing. The technology to fabricate convincing media has outrun our ability to spot it. The response taking shape across the industry and regulators isn't better human detection β that's a losing race β but a system to label the synthetic at the source. Two acronyms, C2PA and SynthID, are at the center of it, and in 2026 they moved from pilot projects to something close to an industry standard.
Here's how the effort to make AI-generated content identifiable actually works, what changed this year, and why β despite real progress β you still can't fully trust what you see.
The problem: detection is a losing game
For a while, the hope was that we'd build detectors β tools that analyze an image or video and tell you if it's AI-made. That approach is fundamentally fragile. Every time a detector learns the tells of today's generators, tomorrow's generators get better and erase them. It's an arms race the detectors are structurally positioned to lose, because the generators improve continuously and the detectors are always reacting to yesterday's output.
So the strategy shifted. Instead of trying to detect synthetic content after the fact, the industry is trying to label it at creation β to attach a durable, verifiable mark the moment an AI generates something. Get that right, and you don't have to guess; the content tells you what it is. This is the logic behind the two-layer system that's emerged.
The two layers: C2PA and SynthID
The industry has converged on pairing two complementary technologies, because each covers the other's weakness.
C2PA: a cryptographic "nutrition label"
C2PA (the Coalition for Content Provenance and Authenticity) is a standard backed by Adobe, Microsoft, Google, and OpenAI, now advancing toward ISO international standardization. It works by embedding Content Credentials β a cryptographically signed metadata manifest β directly into a file. Think of it as a tamper-evident nutrition label that records where a piece of media came from: what tool made it, whether AI was involved, and what edits followed. Because it's cryptographically signed, you can verify it hasn't been forged.
C2PA's weakness is obvious, though: metadata can be stripped. Screenshot an image, re-upload it, or run it through a platform that discards metadata, and the label is gone.
SynthID: an invisible watermark in the pixels
That's where SynthID comes in. Rather than living in the metadata, SynthID embeds an imperceptible watermark into the actual content β pixel-level signals in an image, or patterns in audio and video, invisible to humans but detectable by software. Crucially, it's designed to survive compression and editing, the very operations that destroy metadata. Google reports that SynthID has already watermarked over 10 billion pieces of content.
Together they form a belt-and-suspenders approach: C2PA carries rich, verifiable provenance when the metadata is intact, and SynthID persists in the content itself when the metadata is stripped. Neither alone is enough; combined, they're far harder to defeat.
What changed in 2026
This year is when the approach stopped being a set of separate corporate initiatives and started looking like a genuine standard.
- OpenAI joined C2PA (around May 2026) and now signs its generated media with the full stack: per reporting on the move, every Sora 2 video, DALLΒ·E 3 image, and ChatGPT image generation carries a Content Credentials manifest plus an invisible SynthID-style watermark.
- Google does the same across its generative tools β Imagen, Veo, and Lyria β using SynthID.
- The convergence matters because content authenticity only works if the major generators all participate. When OpenAI and Google β two of the largest sources of AI media β both adopt the same two-layer system, it starts to become a default rather than a feature.
Regulation is forcing the issue
Industry goodwill is being backed by law, which is what turns a voluntary standard into a requirement:
- The EU AI Act, Article 50 requires providers and deployers to mark or disclose certain AI-generated and manipulated content, with obligations applying from August 2, 2026.
- In the US, California's SB 942 took effect on January 1, 2026, pushing transparency requirements for AI-generated content.
The regulatory direction is clear: labelling synthetic media is moving from optional to mandatory in major markets, which pressures every serious AI provider to build provenance in.
Why you still can't fully trust your feed
Here's the sobering part, and it's important not to oversell the fix. Even with C2PA and SynthID rolling out across the biggest generators, the system has large holes as of 2026:
- Most content arrives unlabelled. The majority of AI images shared on social media reach viewers with no credentials attached β stripped by platforms, screenshots, or generators that don't participate. The label only helps if it's there.
- Absence isn't proof. As OpenAI itself cautions, no detection method is foolproof, and verification tools won't make definitive claims when no signal is present. A video with no watermark could be a genuine human recording β or AI content that had its marks stripped. You can't conclude "real" from "no label."
- Not everyone plays along. Open-source and adversarial generators have no obligation to watermark anything. Bad actors deliberately creating disinformation will simply use tools that don't mark their output.
So the honest framing is this: provenance tech makes it possible to verify that something genuine came from a trusted source, and to identify a lot of synthetic content from major tools. It does not make it possible to reliably catch a determined bad actor. The watermark helps the honest; the dishonest route around it.
Why this matters β especially in India
The stakes are not abstract, and they're acute in a country like India. Deepfakes have already been weaponized for financial scams (fake voices and videos of relatives or celebrities), for non-consensual imagery, and for political manipulation in a nation with enormous elections and a vast, fast-moving social-media population. A scalable way to label authentic content β and to flag synthetic media from the big generators β is a meaningful piece of the defense, even if it's not the whole solution. For journalists, courts, and ordinary citizens trying to figure out what's real, verifiable provenance is a tool worth having.
What you can actually do about it
Since the technology only partly solves the problem, the other half of the defense is human. Provenance tools are most useful when paired with the habits of a skeptical reader, and there are concrete things anyone can do in 2026:
- Look for Content Credentials. A growing number of platforms and tools let you inspect an image or video for a C2PA "Content Credentials" manifest β a small label or icon that reveals origin and whether AI was involved. When it's present, use it. Adobe, Google, and others have built viewers for exactly this.
- Treat absence as "unknown," not "real." This is the single most important mental habit. No watermark doesn't mean genuine β it means unverified. Reserve judgment rather than assuming authenticity.
- Consider the source and the incentive. Provenance aside, the oldest defenses still work: Where did this come from? Does a reputable outlet corroborate it? Who benefits if I believe it? A shocking clip from an anonymous account demanding an emotional reaction deserves more skepticism, not less.
- Be especially wary of audio. Voice cloning is now convincing from seconds of sample audio, and it has fueled a wave of "family member in trouble" scams. A simple defense is a pre-agreed verification question with relatives, and a reflex to call back on a known number before acting on an urgent voice request.
- Slow down before sharing. Synthetic disinformation spreads because people forward it in the heat of a reaction. The pause before resharing is one of the most effective tools ordinary people have against fakes.
Media literacy, in other words, is now a core life skill, not a niche concern. The watermarks help the honest verify themselves; your skepticism is what protects you from the dishonest.
What to watch
- Platform adoption of display. Generators signing their output is half the battle; the other half is whether platforms (social networks, search, messaging) actually read and display those credentials to users. Watch for "AI-generated" labels showing up natively in feeds.
- The EU AI Act deadline (August 2, 2026). As Article 50's obligations bite, watch how providers comply and whether it drags the rest of the industry toward universal labelling.
- Watermark robustness. The technical arms race continues β can SynthID-style watermarks survive determined attempts to remove them? Independent testing of robustness is the signal to follow.
- The unlabelled majority. The real-world measure of success is the share of AI content that reaches people with credentials intact. If that share rises sharply, the system is working; if most content stays unlabelled, provenance remains a partial fix.
The effort to label AI-generated media is one of the more sensible responses to the deepfake era: stop trying to win an unwinnable detection arms race, and instead build trust into authentic content at the source. C2PA and SynthID, now embraced by the biggest names and backed by law, are real progress. But the gap between "the technology exists" and "you can trust your feed" is still wide β and closing it depends less on clever watermarks than on whether the whole ecosystem, from generators to platforms to regulators, actually uses them.