MS Paint And Photos Inivisibly Watermark Even Locally Generated Output With GUID

TL;DR

Before you orderOffer from Amazon

Get comfort and recovery gear delivered free with Prime

• Fast, free delivery on millions of items
• Prime Video, Amazon Music and more included
• Member-only deals all year

Start your free Prime trial →Free trial for eligible customers · Cancel anytime

As an affiliate, we earn on qualifying purchases.Hide

Testing indicates Microsoft’s MS Paint and Photos apps in Windows 11 embed an invisible watermark containing a unique identifier (GUID) into saved images, including files created and saved entirely on a local machine without cloud services. The watermark follows the C2PA Content Credentials standard, raising privacy questions about silent tracking identifiers attached to ordinary image edits.

The Windows 11 versions of MS Paint and the Photos app silently embed an invisible watermark containing a unique identifier (GUID) into images when they are saved, according to user testing — including images that were generated and stored entirely on a local device with no cloud or AI features involved. The finding, circulating widely after independent users inspected saved files, shows Microsoft attaching machine-specific tracking data to ordinary image edits without clearly notifying users at the moment of saving.

The watermark is not visible in the image itself. Instead, it is embedded in the file’s metadata in line with the C2PA Content Credentials standard, an industry specification backed by Adobe, Microsoft, and other companies to record how a piece of media was created and edited. Users who inspected files saved from MS Paint and Photos reported finding a GUID — a globally unique identifier — baked into this metadata block.

What has drawn the most attention is that the watermarking appears to apply regardless of whether the image ever touched an AI feature or cloud service. Files created from a blank canvas in Paint, or simple crops and edits in Photos, were reported to carry the identifier after being saved locally. This distinguishes the behavior from Microsoft’s AI image-generation tools, where Content Credentials were publicly announced as a provenance measure.

The GUID itself does not directly contain a user’s name or email address, according to those who have inspected the data. However, because it is unique and persistent, observers note it functions as a pseudonymous fingerprint: anyone who obtains multiple files could determine they came from the same Windows installation or device, and Microsoft could in principle link the identifier to an account or device record.

Why a Silent GUID Concerns Privacy Watchers

The core issue is concern over user consent and visibility. Provenance metadata was promoted as a tool for labeling AI-generated content, so its appearance on wholly local, human-made images — without an obvious prompt or warning — has raised questions. Users sharing screenshots edited in Paint, or personal photos cropped in Photos, may be transmitting a persistent device-linked identifier they were not aware of.

This has implications for sharing images in various contexts. Images shared by journalists, activists, or whistleblowers could carry an identifier that, if correlated with other data, might reveal information about their origin. It also raises questions about compliance with privacy laws: silent assignment of unique identifiers to user content may be subject to data protection regulations in some jurisdictions, which often require disclosure or consent for tracking mechanisms.

The watermark has a stated purpose related to content verification. Content Credentials aim to help viewers assess whether an image is authentic or AI-generated — a concern as synthetic media becomes more prevalent. The concern is about the default application of this technology to files users assume are private and local.

How Content Credentials Reached MS Paint

The Coalition for Content Provenance and Authenticity (C2PA) developed the Content Credentials standard to establish a tamper-resistant record of a media file’s origin and edit history — including information about the creation tool, edits made, and AI involvement. Adobe, Microsoft, camera manufacturers, and news organizations have adopted or endorsed the standard.

Microsoft has publicly committed to implementing Content Credentials for its AI-generated images, including outputs from Bing Image Creator and Copilot features. MS Paint has incorporated Generative Fill and other AI tools in recent Windows 11 updates, and Photos has integrated AI-driven editing features. The recent testing indicates that the watermarking infrastructure, introduced alongside these features, extends beyond AI-generated content to include the apps’ normal save processes.

Historically, MS Paint saved images with minimal metadata, which contributed to its popularity for quick edits and screenshots. The recent changes represent a shift from this previous behavior.

“Even a blank image drawn and saved entirely offline came out with a GUID embedded in its metadata.”

— Users inspecting saved files in community discussions

What Is Still Unverified

Microsoft has not issued a detailed public statement confirming whether local, non-AI saves are watermarked, nor has it clarified the specific contents of the GUID or how long it persists. It remains unclear whether this behavior applies across all Windows 11 versions or only certain builds, Insider previews, or configurations with AI features enabled.

Most reports are based on user observations rather than independent audits, and details such as whether the GUID remains consistent across files from the same device or changes after system reinstalls are not yet confirmed. Additionally, the persistence of metadata through common sharing platforms, which often strip metadata, has not been systematically verified.

Steps for Stripping the Watermark

Users seeking to prevent the watermark from being embedded can use methods such as saving images with tools that do not embed metadata or removing metadata after saving through utilities or export options. These methods may help eliminate the GUID, but users should verify the results with appropriate tools. Future Windows updates may include settings or policies to disable or control this feature.

Awaiting official clarification from Microsoft on whether the watermarking for local files is intentional, whether it can be disabled, and what the GUID contains. Privacy regulators and researchers may also evaluate whether the silent assignment of persistent identifiers to user content complies with existing data protection regulations.

Key Questions

Does the watermark change how my image looks?

No. The GUID is stored in the file’s metadata, not in the visible pixels. The image appears unchanged visually; the identifier is accessible only through metadata inspection tools.

Is my name or email embedded in the watermark?

The embedded data appears to be a GUID, a unique identifier that does not directly include personal information such as your name or email. However, because it is persistent and unique, it could serve as a device fingerprint if correlated with other data.

Does this happen to images I never edit with AI tools?

According to user reports, yes — files created and saved entirely locally, without using AI features, have been found to contain the GUID. The reasons for this behavior are under investigation, and Microsoft has not provided detailed explanations.

Can I remove the watermark?

Yes. Metadata removal tools and certain sharing platforms automatically strip metadata during upload or sharing. Re-saving images with software that does not embed metadata can also eliminate the GUID.

Why is Microsoft adding these watermarks at all?

Microsoft supports the C2PA Content Credentials standard, which aims to record the origin and edit history of media files to verify authenticity, especially for AI-generated content. The concern is that this technology is being applied by default to local files without clear user consent or notification.

Source: hn