Google DeepMind has introduced SynthID Bio, a set of watermarking methods designed to strengthen biosecurity and scientific integrity in synthetic biology. The technology embeds imperceptible signatures directly into biological codes, allowing the verification of synthesized physical proteins and predicted 3D structures while preserving their biological functions.
Product LaunchesGoogle DeepMindSynthID Bio
Google DeepMind Unveils SynthID Bio to Watermark AI-Designed Proteins Without Affecting Function
As generative AI tools such as AlphaFold and AlphaProteo enable the design of novel proteins and bacteriophages, they also introduce risks. AI-designed sequences may bypass traditional DNA synthesis screening, and mislabeled 3D structures can pollute public databases. SynthID Bio aims to provide an automated verification layer to mitigate these risks by allowing DNA synthesis providers to more efficiently screen for potential threats.
The method adapts based on the data type: it subtly guides amino acid selection for sequences and adjusts atomic coordinates for predicted 3D structures. In wet-lab testing involving target proteins such as the SARS-CoV-2 spike protein RBD and VEGF-A, the watermarked designs maintained the same hit rate, binding affinity, and natural sequence diversity as unwatermarked versions.
For protein folding tasks, SynthID Bio fine-tunes parts of the AlphaFold 3 diffusion network, embedding watermarks directly into the model's weights. This ensures that predicted 3D coordinates inherently carry a detectable signature regardless of the user.
In collaboration with Stanford University and the Arc Institute, researchers have also applied the technology to genomic models, successfully watermarking the genome of a bacteriophage designed by Evo 2. Google DeepMind is also making the methods, code, and in vitro data open-source to encourage community collaboration on biosecurity.
Sources
- Introducing SynthID Bio (Google DeepMind Blog, 2026-09-30)
- Google figures out how to watermark AI-designed proteins (Ars Technica AI, 2026-09-30)