Watermark generator

How the watermark fits StateNull

Visible watermark is rendered onto the pixels at capture time and becomes part of the cryptographically sealed image — the SHA-256 and signatures cover the watermarked frame, so the brand can't be peeled off without breaking the seal. Default (if you set nothing): the operator's @handle · organisation.

Invisible watermark* embeds an ownership tag into the image that a human can't see but a verifier can recover — useful when a file is re-shared outside the app. *The robust forensic (DCT-domain) invisible watermark ships in the app; this browser tool previews the visible mark and exports the brand assets.

Fleet / multi-tenant: push a single watermark to every device via MDM (managed configuration). Users can't override an MDM-locked watermark. Tenants can carry their own brand centrally — see your admin console.

Using the export: the Watermark PNG is a transparent overlay; the App config is a JSON your admin can import in StateNull → Settings → Security, or attach to an MDM profile.