Microsoft Paint and Photos embed hidden server-issued ID in AI images, even offline ones
Reverse engineering of Windows Paint and Photos apps found that both send user prompts to a Microsoft server for moderation even when image generation runs locally via onboard AI models. That server returns a GUID alongside the approved prompt, and this GUID gets invisibly embedded into the pixels of the generated image, separate from the visible watermark toggle users can control. This applies even on Copilot+ PCs where generation happens entirely on-device.
GoKawiil's interpretation of the reporting above, not reported fact.
This shows that 'local' AI features in Windows aren't fully offline — prompts still leave the device for moderation, and a hidden identifier gets baked into outputs regardless of user preference. That raises privacy and transparency questions since users toggling off visible watermarks may assume no tracking metadata remains, when an invisible GUID persists and could theoretically be traced back to a session or server request.
- Paint and Photos ship local ONNX-based AI models but still contact a remote server to moderate every prompt.
- The moderation server returns a GUID that's invisibly watermarked into locally generated images, independent of the visible watermark setting.
- AI-generated image saves are restricted to formats (PNG, JPEG, GIF, .paint) that preserve C2PA metadata, tying provenance tracking into the file itself.
Wacom Intuos Wireless Drawing Tablet — If this deep-dive into Paint's AI plumbing makes you want to just draw your own pixels, the Wacom Intuos is a classic pen tablet that works great with MS Paint and any other Windows art app. Pressure-sensitive pen input gives you far more control than a mouse, and nothing you sketch gets a prompt sent anywhere.
See Wacom Intuos Wireless Drawing Tablet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: xusheng.dev, 2026-08-24
Published there as: “MS Paint and Photos inivisibly watermark even locally generated output with GUID”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.