Docs/Security

Tracing Copyright with a Hidden Watermark

The hidden watermark is a feature of Nephele's Publish & Package tool. It quietly embeds a short copyright mark (such as your pen-name initials or a fixed signature) into your image. It's completely invisible to the naked eye, but when you suspect an image has been stolen, you can use Nephele to read it back out as a tracing clue.

提示

A hidden watermark is a supplementary tracing method, not legal evidence. Its purpose is to help you quickly confirm "did this image leak from my copy?" If you need legally robust proof of ownership, use Digital Certification.


When a Hidden Watermark Is the Right Tool

ScenarioSuitable?
You find an image on some platform and suspect it was stolen from youYes
A client is reposting your work everywhere and you want to confirm whether they leaked itYes
Your image was cropped or compressed before being spread, and you want to find the sourceYes (light processing can still be extracted)
You need to prove ownership in courtNo — use Digital Certification instead
The image was heavily compressed, recolored, and re-uploaded many timesNo — the watermark may already be destroyed

Prerequisite

Tracing only works if you embedded a hidden watermark before publishing. If you've never used the hidden-watermark feature in Publish & Package, then there's naturally no extractable information in the image.

How to Embed When Publishing

  1. Open Nephele → Toolbox → Publish & Package
  2. Drag in the image you want to publish
  3. In the watermark settings, switch the protection mode from "Off" to "Copyright Tracing"
  4. In the adjacent watermark ID box, enter a short string that uniquely identifies you, for example:
    • Your pen-name initials (such as ARIS)
    • A short signature mark
  5. Click Start Packaging, and the output will be a finished image with a hidden watermark (the filename carries a _wm suffix)

技巧

The watermark ID box only accepts a short mark of 8 characters or fewer, so pen-name initials or a fixed signature fit best — don't try to cram in a full social-media handle or a long ID number.


How to Extract a Hidden Watermark

  1. Open Nephele → Toolbox → Publish & Package
  2. In the watermark settings area, find the "Extract Watermark" button (it appears once you switch to "Copyright Tracing" mode)
  3. Select the image you suspect was stolen
  4. Wait a few seconds. If a Nephele-format hidden watermark is embedded in the image, a success dialog will pop up and display the extracted watermark ID; otherwise it shows "No hidden watermark detected"

How to Read the Extraction Result

ResultMeaningNext Step
Your watermark ID was successfully extractedThis image did indeed leak from the version you publishedScreenshot and save the extraction result as a bargaining chip
No hidden watermark detectedPossible reasons: ① it was never embedded; ② the image underwent heavy processing that destroyed the watermark; ③ the file format isn't supported or the image is severely corrupted; ④ this image simply isn't yoursThe connection can't be confirmed

Limitations of Hidden Watermarks (Important)

A hidden watermark is not magic — its effectiveness depends on how the image was processed:

Usually survives:

  • Automatic compression by social platforms (Weibo, Twitter, Xiaohongshu, etc.)
  • Resizing (scaling up or down)
  • Light cropping (trimming a small part off the edges)

May fail:

  • Heavy compression (quality below 60%)
  • Major recoloring, filters, or desaturation
  • Rotation (90° and 180° are usually fine, but rotation by an arbitrary angle will break it)
  • Large-area cropping (less than half of the original remaining)
  • Being screenshotted and re-saved (cumulative damage from repeated compression)

注意

A hidden watermark can be removed by technical means. Its value lies in "raising the cost of processing for image thieves" — if they don't know you used a hidden watermark, they won't go out of their way to strip it. If someone knows about it and deliberately removes it, survival cannot be guaranteed.


Hidden Watermark vs. Digital Certification

DimensionHidden Watermark TracingDigital Certification
PurposeTrack where a work flowsLock in the creation time and file state
Legal weightLow (only a technical clue)High (RFC 3161 third-party timestamp)
Requirement for the originalMust be embedded before publishingCan be done at any time
Tamper resistanceMedium (can be removed)High (hash chain is tamper-proof)
Barrier to useLow (one-click extraction)Medium (requires understanding the certification-package structure)
Best forEveryday theft checks, internal leak trackingLegal disputes, commission delivery, contest submissions

Recommended combined strategy:

  • Before publishing: use Publish & Package to generate a finished image with a hidden watermark, then send that out
  • After finishing a work: immediately run a Digital Certification to lock in the original PSD + finished image
  • When you spot suspected theft: first use the hidden watermark to quickly confirm the connection, then use Digital Certification as legal-level proof of time

FAQ

Q: Can other people extract my hidden watermark too?

In theory, if someone reverse-engineered Nephele's password, they could build an extraction tool. But the password isn't public, so the barrier is very high for an ordinary image thief. The hidden watermark isn't designed to fend off professional crackers — it's designed to fend off casual "save-and-repost" behavior.

Q: Can I extract the watermark from an image someone else embedded with their Nephele?

No. Every Nephele instance uses the same password system, but you cannot reverse-extract someone else's copyright information from their image — the extraction result will only show the text the other person embedded, and won't expose any of your information.

Q: Will the hidden watermark affect image quality?

No. The hidden watermark is embedded in the frequency domain (the DWT-DCT-SVD transform domain) and is completely invisible to the naked eye. After embedding, it immediately runs an extraction check (round-trip) to ensure the information was actually written in.

Q: Can I embed Chinese characters?

Yes, but the watermark ID box in the software accepts at most 8 characters, so Chinese is likewise limited to 8 characters. We recommend a short signature abbreviation.

Q: Do I need the original image for comparison when extracting?

No. Extraction is self-contained — as long as you have the watermarked image, Nephele can read out the text buried inside it.


To learn about the full technical implementation of the hidden watermark (including the underlying library source code, algorithm principles, and threat model), see the Technical Audit document.

Last updated Jun 21, 2026·Applies to v0.5.2-beta