---
title: Biomolecule Watermarking
type: vocabulary
url: "https://www.envisioning.com/vocab/biomolecule-watermarking"
summary: Embedding a detectable, function-preserving signal into an AI-designed protein or nucleic acid sequence or structure so its AI origin can be verified later.
year: 2026
generality: 0.55
---

# Biomolecule Watermarking

Embedding a detectable, function-preserving signal into an AI-designed protein or nucleic acid sequence or structure so its AI origin can be verified later.
Biomolecule watermarking embeds a detectable signal into an AI-designed protein, RNA, or DNA structure, either in its amino-acid sequence or its predicted three-dimensional coordinates, so the biomolecule's AI origin can later be verified with a secret key. Tools such as AlphaFold 3, ProteinMPNN, RFdiffusion, and AlphaProteo now design novel functional proteins fast enough that provenance has become a biosecurity question. This matters for screening gene-synthesis orders for engineered threats, and for keeping AI predictions out of public databases like the Protein Data Bank unless labeled as such.

Google DeepMind described a family of such methods in a Nature paper published 30 September 2026, under the product name SynthID Bio. For sequences, tournament sampling, adapted from LLM text watermarking, biases ProteinMPNN's residue-by-residue choices with a key-derived score. For structures, a version of AlphaFold 3's diffusion module is fine-tuned with a watermark detector, shifting atom-atom distances and bond or torsion angles in the predicted coordinates. The bar is higher than for text or images: imperceptible has to mean the protein still folds and binds its target the way an unwatermarked design would.

In-vitro tests on three targets, the SARS-CoV-2 receptor binding domain, VEGF-A, and PD-L1, found watermarked binders matched the binding affinity of unwatermarked equivalents, with detection above 99% at low false-positive rates. Structure watermarks reached a 99.8% true-positive rate at a 0.1% false-positive rate across proteins, RNA, and DNA. The authors describe this as a technical proof of concept, not a finished defense: a resequencing attack using the same design tool can weaken the sequence watermark, and real deployment will need further research and industry coordination on standards.

---
Source: Envisioning — Technology Research Institute (https://www.envisioning.com/vocab/biomolecule-watermarking)