DeepMind watermarks AI-designed proteins without changing how they work

At a DNA synthesis company, a person screens the orders that come in. To build an AI-designed protein, a lab orders DNA from one of these firms, and the firm checks the order against databases of known threats ^[11]. DeepMind says AI can now design sequences that look little like any known hazard, and those unfamiliar orders can trigger slow manual reviews ^[12]. SynthID Bio is aimed at that moment: a watermark could tell the reviewer that an order came from a trusted model ^[13].

The pitch is one thing. The mark itself is more specific. For sequences, SynthID Bio runs inside ProteinMPNN, a design tool from the Baker Lab, and uses a key much like a cryptographic key to suggest each amino acid, while ProteinMPNN rejects any choice that would not fold into a working protein ^[6][7]. To read the mark back, software scans the whole sequence with the key and counts how often its suggestions appear ^[8]. For 3D structures the mark is baked into a fine-tuned slice of AlphaFold 3's weights, and DeepMind says the model keeps its accuracy while detection stays near-perfect ^[10]. The signature can be read from the physical protein, not only the digital design file ^[3]. Sarah Carter, a biosecurity policy expert at Science Policy Consulting who reviewed the work, called it "an important piece of the puzzle for tracking the provenance of biological designs" ^[5].

A screening team has to be careful about what the check actually buys. A watermark only exists if the designer used a tool that writes one, and many AI protein design tools do not use ProteinMPNN ^[19]. So the mark raises confidence in orders from cooperating models ^[13], and it does not cover an order from someone who picked an unmarked tool ^[19]. DeepMind says it still needs to make the mark harder to remove on purpose ^[20].

Two further limits are physical. Very short proteins may carry too few marked amino acids to find, and fusing a marked protein to an unmarked one can dilute the signal ^[18].

James Diggans, vice president of policy and biosecurity at Twist Bioscience, described it as a way to steer review toward the orders that need it: "For Twist, watermarking offers a promising new addition to the biosecurity toolbox that could strengthen screening, focus resources on sequences that warrant closer review and make biosecurity more efficient as AI-designed biology continues to advance" ^[14].