DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
ThatPainter
AI art

Glaze Was Bypassed: What the AI-Mimicry Attack Means for Artists

Glaze was bypassed under documented attacks, but it is not simply “useless.” Here is what the research showed, how Glaze and Nightshade differ, what the latest releases mean, and how painters can reduce exposure now.

By ThatPainter Team Updated 12 min read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ThatPainter is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Learn More

Glaze was bypassed in documented attacks, but it was not proven universally useless. Independent researchers showed that low-effort and more sophisticated techniques could weaken protection under some conditions. The Glaze team responded with updates and reported stronger results in later testing, while also acknowledging that protection varies by image and attack.

For painters, the honest takeaway is simple: Glaze is temporary friction, not a permanent shield against AI style mimicry.

Yes—but “cracked” needs a careful definition. Researchers showed in 2024 that image protections used by Glaze could be weakened with relatively accessible image-processing and model-training techniques. That means Glaze is not a permanent shield against a determined attacker. It does not mean every protected painting can now be perfectly stripped of its protection, or that Glaze is useless.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The most accurate description is that Glaze provides temporary friction against style mimicry. It can make casual copying harder, but an attacker who has a copy of the image, time, computing resources, and a new removal method may eventually overcome the protection. Artists should therefore treat Glaze as one layer in a broader publishing and rights strategy—not as a guarantee.

#1 Best Overall
Sale
XPPen Artist 13.3 Pro V2 Drawing Tablet with Screen, 16K, Full-Laminated
  • PLEASE NOTE:XPPen Artist13.3 Pro drawing tablet Need to connect with computer,you need to use it with your computer or laptop, the 3 in 1 cable is included
  • Drawing Tablet with Screen: Tilt Function- XPPen Artist 13.3 Pro supports up to 60 degrees of tilt function, so now you don't need to adjust the brush direction in the software again and again. Simply tilt to add shading to your creation and enjoy smoother and more natural transitions between lines and strokes
  • Graphics Tablets: High Color Gamut- The 13.3 inch fully-laminated FHD Display pairs a superb color accuracy of 88% NTSC (Adobe RGB≧91%,sRGB≧123%) with a 178-degree viewing angle and delivers rich colors, vivid images, and dazzling details in a wider view. Your creative world is now as powerful as it is colorful
  • Drawing Pad: One is enough- The sleek Red Dial on the display is expertly designed with creators in mind, its strategic placement allows for natural drawing postures. With just one wheel, you can effortlessly zoom in and out, adjust brush sizes, and flip the canvas—all tailored to suit the habits of everyday artists. The 8 customizable shortcut keys allow you to personalize your setup, streamlining your workflow and enhancing creative efficiency
  • Universal Compatibility & Software Support:supports Windows 7 (or later), Mac OS X 10.10 (or later), Chrome OS 88 (or later), and Linux systems. Fully compatible with major creative software including Photoshop, Illustrator, SAI, and Blender 3D. Register your device to access additional programs like ArtRage 5 and openCanvas for expanded creative possibilities.

What Glaze is designed to do

Glaze is a University of Chicago SAND Lab project. It applies small image modifications that are generally intended to be imperceptible to people but disruptive to text-to-image systems learning an artist’s visual style.

In practical terms, an artist runs an export through Glaze before uploading it. The resulting file still looks like the original to a human viewer, but the altered pixels are intended to make an AI system associate the work with a different or less useful style during training or fine-tuning. The original research described this as a style cloak and evaluated the tool with more than 1,000 artists.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That purpose is narrower than “protect my art from AI.” Glaze is aimed primarily at making style imitation more difficult. It is not a copyright registration, a takedown mechanism, a contract, a watermark, or a technical command that prevents someone from downloading the file.

What the 2024 attack demonstrated

The central challenge came from the paper Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI, by Robert Hönig, Javier Rando, Nicholas Carlini, and Florian Tramèr, published June 17, 2024.

The researchers reported that protections used by Glaze and comparable tools could be weakened through several approaches, including:

  • upscaling the protected image;
  • using alternate fine-tuning scripts;
  • preprocessing with Gaussian noise; and
  • using a more sophisticated purification process intended to remove the adversarial image changes.

The paper also described a user study in which the protections could be bypassed sufficiently to leave artists vulnerable to style mimicry. The significance is not that one universal “uncrack” button was discovered. It is that the attacker does not have to accept the protected file exactly as the artist published it. The attacker can experiment with transformations and training methods until the image becomes useful again.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why a public image creates an uneven contest

Glaze’s changes are embedded in the downloadable image. Once that image is online, an attacker can save a copy and try new removal techniques later. The artist faces the opposite problem: every public version may need to be reprocessed, replaced, or withheld as defenses change.

This creates an asymmetry. The artist must protect each work before publication and keep adapting to new attacks. The attacker needs only one successful method for one useful copy. A later Glaze update cannot reliably reach every copy that has already been downloaded, mirrored, scraped, or included in a dataset.

Rank #2
Frunsi RubensTab T11 Pro standalone Drawing Tablet
  • Standalone Drawing Tablet,No need for a computer! Frunsi T11 is designed to be completely independent, allowing you to create, sketch, and design anywhere, anytime. Equipped with a stunning 10.1-inch Full HD IPS screen (1920×1200P resolution), it delivers vibrant colors, sharp details, and wide viewing angles for an immersive digital art experience. Ideal for artists, students, and professionals who need a portable solution for both creative projects and everyday tasks like meeting notes or classroom work.
  • Drawing Tablet No Computer Needed, Fully self-contained with no external device required. Simply power it on and start creating! Built-in 5800mAh battery provides up to 5 hours of continuous use, making it perfect for long creative sessions or on-the-go use. Supports USB-C charging, ensuring quick and convenient power replenishment. You can even use a mobile power bank to extend battery life during travel.
  • Digital Drawing Tablet with Screen, High-sensitivity pressure-sensitive pen (no battery required) delivers natural, fluid strokes that mimic traditional drawing tools. The responsive screen ensures precise control, whether you’re sketching, illustrating, or editing photos. Multi-touch functionality allows for intuitive zooming, panning, and scrolling, enhancing your creative workflow.
  • Tablet with Pen, Pre-installed with a suite of professional-grade drawing apps, making it easy for beginners to learn and for experienced artists to dive right in. The pen is designed for comfort and precision, with adjustable pressure sensitivity to suit your artistic style. Perfect for digital artists, graphic designers, and anyone looking to transition from traditional to digital art.
  • Versatile Art Tablet, Not just for drawing! Use it for note-taking during company meetings, classroom lectures, or brainstorming sessions. The included adjustable stand case adds convenience for both desktop use and travel, ensuring your tablet stays protected and accessible. Compatible with Wi-Fi networks, allowing you to access online resources, tutorials, and cloud storage directly from the device.

That is why the attack paper argued for alternatives beyond adversarial perturbations. The technical approach may raise the cost of unauthorized mimicry, but it cannot provide a durable guarantee against an adaptive adversary with access to the image, time, computing power, and future image-processing research.

Does the attack work on every painting?

No. “Glaze was cracked” is too broad if it suggests that every protected image is equally recoverable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Results vary with the artwork’s visual characteristics, the base model being trained, the fine-tuning method, and the details of the attack. The attack research and Glaze’s response both point to differences between styles and individual images. Smooth-color artwork and styles already well represented in training material—including anime and cartoon-like work—were particularly important test cases.

That variation cuts both ways. A successful attack against one style does not prove that every painter’s work will be restored equally well. But variation is not a safety guarantee either. An artist cannot reasonably conclude that a particular image is secure simply because one test did not remove its protection.

How Glaze responded

The Glaze team acknowledged the reported attack and tested both its own implementation and code supplied by the researchers. It released Glaze 2.1 with changes intended to improve resistance to the reported noisy upscaler attack.

The team also emphasized that no single test captures the full impact of the attack. Its public response notes that protection varies by style and by individual artwork. That is an important qualification: the project did not claim that one update permanently solved the general problem.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The project’s own public materials warn that Glaze is not a panacea. Future algorithms may overcome its protection, potentially exposing work that an artist protected in the past. The warning is not a minor footnote; it is the correct way to understand the tool’s security model.

What the current version numbers mean

The supplied official download listing reports the following:

Tool Version and platform Reported release purpose What it does not prove
Glaze 2.2 for Windows Support update for NVIDIA 50-series GPUs; listed as released April 3, 2026 It does not prove that the underlying attack problem has been solved.
Glaze 2.1 for Windows and macOS Improved robustness against newer attacks It is not a guarantee against every attack, model, style, or future technique.
Nightshade 1.1 for Windows and macOS Bug-fix and driver update; listed as released April 20, 2026 It does not provide Glaze’s style-mimicry protection.

For a Windows artist with an NVIDIA 50-series GPU, Glaze 2.2 may address an important compatibility issue. For a macOS user, the supplied listing identifies Glaze 2.1 rather than 2.2. Neither version distinction should be confused with a claim of permanent protection.

Rank #3
Sale
HUION Inspiroy H640P 6x4 inch Drawing Tablet 8192 Pen Pressure
  • Customize Your Workflow: The 6 customizable press keys on Huion H640P drawing tablet for pc let you assign your most-used commands—like undo, zoom, brush switch, or save—so you can keep your hands on the tablet and your mind on the art. Whether you're a digital painter switching brushes, or a comic artist zooming in and out, these keys keep your workflow smooth and uninterrupted. Plus, the Huion driver lets you save different shortcut profiles for different apps, so you never have to reconfigure when switching software.
  • Professional Pen Performance: Huion H640P drawing pad for computer comes with the battery-free PW100 stylus that's always ready when inspiration strikes. With 8192 levels of pressure sensitivity, every light sketch, or bold stroke responds naturally to your hand—just like a real pen. The 5080 LPI resolution and 233 PPS report rate deliver lag-free, precise strokes, so you can draw confidently without second-guessing your cursor. The pen side buttons help you switch between pen and eraser instantly.
  • Compact and Portable: Huion H640P computer graphics tablet features a compact, ultra-portable design at just 0.3 inches thin and 0.61 lbs light, so it slides easily into your backpack—perfect for sketching in coffee shops, taking notes in class, or editing on the go between home and studio. The 6x4 inch active area offers enough room for natural pen movements while fitting comfortably on crowded desks, or lecture hall seats.
  • Stable Compatibility: Huion H640P graphic drawing tablet works seamlessly with Mac, Windows, Linux PCs, and Android smartphones/tablets (OS version 6.0 or later). Left-handed friendly, and you just need to flip the tablet and adjust the settings in the driver. Please note: H640P does NOT support iPhone/iPad.
  • Move Beyond the Mouse: Huion Inspiroy H640P is a pen tablet that replaces your mouse for more natural, precise control. Freehand draw, take notes, or even play OSU—everything you do with a mouse, you can do better with a pen. The precise tip makes it ideal for detailed photo editing, graphic design, or signing PDF. Meanwhile, the ergonomic pen grip helps you avoid the strain that comes from hours of using a mouse.

Glaze and Nightshade solve different problems

Nightshade is related to Glaze but is not a replacement for it. Nightshade is intended to alter an image so that, if the image enters model-training data, it may introduce incorrect associations into the model. Its goal is to discourage unauthorized training by poisoning data relationships.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Glaze, by contrast, is aimed at disrupting the model’s ability to learn and reproduce an artist’s visual style. One addresses a training-data poisoning objective; the other addresses style mimicry. The official Nightshade materials explicitly warn that the standalone Nightshade application does not provide Glaze’s style protection.

The project’s current guidance says that artists who use both should apply Nightshade first and Glaze afterward. A combined tool has been described as under development or testing. Applying the tools in the wrong order, or assuming that Nightshade alone prevents an AI from imitating a style, defeats the point of the distinction.

Artist concern Relevant tool or measure Limitation
Prevent or reduce AI style mimicry Glaze Can be bypassed under some conditions and may affect workflow or image appearance.
Discourage unauthorized model training by corrupting associations Nightshade Does not provide Glaze’s style-mimicry protection and is not a guaranteed defense against countermeasures.
Establish authorship and chronology Private originals, layered files, drafts, dated exports, commissions, and provenance records These records do not stop scraping or remove an artwork from a model.
Reduce exposure Lower-resolution previews, selective publication, private releases, contracts, and platform controls They reduce risk but cannot reliably undo earlier scraping or training.

What artists should do now

1. Use the current Glaze release if its trade-offs are acceptable

If an image is going to be publicly displayed and style imitation is a serious concern, running the final web export through a current Glaze release remains a reasonable risk-reduction step. The decision should account for processing time, hardware requirements, file-management complexity, and any visible effect on the image.

Keep the unprocessed master private. Export a separate copy for Glaze and inspect that copy at normal viewing size and at the size used on your website. Protection is not useful if the processed file introduces artifacts that harm the presentation of the painting.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not assume that a stronger setting is automatically better. The useful setting is the one that provides an acceptable balance between image quality, processing cost, and the artist’s tolerance for exposure. Glaze’s own warnings mean that even a carefully processed export should not be treated as a security guarantee.

2. Do not use Nightshade as a substitute

Use Nightshade only if its training-data objective fits your purpose, and understand that it is not the tool for preventing style imitation. If using both according to the project’s guidance, apply Nightshade first and Glaze afterward. Keep a record of which files were processed with which tool and version.

3. Protect the originals and document the work

Maintain a private archive containing:

  • high-resolution originals;
  • layered working files where applicable;
  • dated sketches, drafts, and progress images;
  • commission agreements and correspondence;
  • dated exports and publication records; and
  • information showing when and where the work was first created or released.

These materials cannot stop someone from scraping a public JPEG. They can, however, help establish authorship and chronology when negotiating a license, responding to a dispute, filing a platform complaint, or evaluating a possible infringement claim. Keep backups in more than one secure location; do not rely on metadata embedded in a public file, since platforms may remove or alter it.

4. Reduce the value of the public copy

Consider publishing a lower-resolution preview rather than a full-resolution file, especially for portfolio images that do not need to be printed or downloaded. Selective publication can also help: an artist may choose to show representative work publicly while keeping the most distinctive series, high-resolution details, or new commissions private.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
XPPen Deco 01 V3 10x6 Drawing Tablet, 16K Battery-Free Stylus, 8 Keys
  • Word-first 16K Pressure Levels: The upgraded stylus features 16,384 levels of pressure sensitivity and supports up to 60 degrees of tilt, delivering smoother lines and shading for a natural drawing experience. With no battery or charging needed, it operates like a real pen, making it easy for beginners to create effortlessly. This functionality helps novice artists develop their skills and explore their creativity without the intimidation of complex tools
  • Designed for Beginners: This drawing pad desinged with 8 customizable shortcuts for both right and left-hand users, express keys create a highly ergonomic and convenient work platform
  • Perfectly Adapted for Android: The XPPen Deco 01 V3 art tablet supports connections with Android devices running version 10.0 and above. It is recommended to download the XPPen Tools Android application, which adapts to your smartphone's screen aspect ratio, ensuring accurate mapping. It also supports mapping on Android screens with different aspect ratios in portrait mode
  • Large Drawing Space, Bigger Bold Inspiration: This expansive drawing pad has10 x 6.25-inch helps you break through the limit between shortcut keys and drawing area
  • Easy Connectivity for Beginners: The Deco 01 V3 offers USB-C to USB-C connectivity, plus adapters for USB C. This ensures easy connection to various devices, allowing beginner artists to set up quickly and focus on their creativity without compatibility concerns. Whether using a laptop, tablet, or desktop, the Deco 01 V3 provides a seamless experience, making it an ideal choice for those just starting their digital art journey

For client work, use private customer delivery where appropriate and define permitted uses in the contract. Contract language cannot control every scraper, but it can clarify whether a client or intermediary may upload, sublicense, train on, or redistribute the work.

Check the rights-reservation, training opt-out, and privacy controls offered by each platform. Their availability, scope, and enforcement vary. An opt-out setting may help communicate a preference or create a record, but it is not a technical block and may not affect data that was already collected.

5. Watch the legal and regulatory layer

Technical protection is only one part of the response. The U.S. Copyright Office’s Part 3 report addresses issues including training on copyrighted works, licensing, liability, and opt-out questions. It is policy analysis, not a final universal rule that resolves every dispute about AI training.

In the European Union, obligations for general-purpose AI providers include copyright policies and public summaries of training content. Those transparency requirements may make it easier for rightsholders to investigate how training data is assembled. They do not themselves create a technical barrier against copying and do not guarantee compensation to an artist.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Because laws, platform policies, and enforcement practices differ by country and may change, artists should avoid treating a technical setting or a platform label as legal advice. For a valuable catalog or a commercial dispute, consult a qualified professional in the relevant jurisdiction.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

A practical decision framework for painters

Publishing situation Reasonable baseline What to expect
Small, low-resolution social-media preview Use a separate export; consider Glaze if the visual and workflow trade-offs are acceptable. Casual style copying may become less convenient, but the image can still be saved and analyzed.
Important portfolio piece Glaze the public export, keep the original and process records private, publish at the lowest useful resolution, and retain dated proof of creation. Several layers reduce exposure and improve documentation, but none is permanent.
Distinctive new series or unreleased work Consider private previews, selective publication, or delaying public release until the business need is clear. Less exposure generally means less opportunity for scraping, although it may reduce discoverability and sales.
Client commission or licensed work Use controlled delivery and clear contractual terms in addition to any image-protection tool. Contracts clarify permitted use but do not guarantee compliance by unknown third parties.

What is likely to happen next?

The next phase is unlikely to produce one unbeatable cloak. It is more likely to be an arms race between adaptive image-processing attacks and updated defenses, supported by provenance records, access controls, licensing, platform enforcement, and legal remedies.

Glaze’s continuing updates show that technical defenses can evolve. The attack paper shows why each update should be tested against adaptive attacks and, where possible, independently reproduced rather than judged only by the tool’s own demonstrations.

Three statements can all be true:

  1. Glaze can make casual AI style imitation harder.
  2. Glaze can be bypassed under some conditions.
  3. Glaze is not therefore useless or permanently broken.

The practical mistake is turning any one of those statements into the whole story. Artists need to decide how much public exposure they can accept, apply current tools where the trade-offs make sense, retain evidence of their work, and use contractual, platform, and legal options where available.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Evidence behind this assessment

The technical assessment is based on the original Glaze style-cloak research and official Glaze materials; the paper Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI by Hönig, Rando, Carlini, and Tramèr; the Glaze team’s response and version updates; and the official Glaze and Nightshade download and project information. The legal context comes from the U.S. Copyright Office’s Part 3 AI report and European Union guidance concerning general-purpose AI providers, copyright policies, and training-content summaries.

Best Value
Sale
GAOMON PD1161 Drawing Tablet with Screen, Tilt, 8 Shortcut Keys, 11.6" FHD
  • Please kindly note that GAOMON PD1161 drawing tablet is not a standalone tablet, It must be connected to a laptop or computer to work.
  • [Create Right On Screen]: Sketch, draw and paint directly on the full HD 11.6" IPS screen of GAOMON PD1161 drawing tablet. And the pre-installed matte film on display makes it feel like sketching on paper while reducing uncomfortable glare and reflection at the same time.
  • [Vivid Color Perfomance]: A combination of 72% NTSC (100% SRGB) color gamut and 16.7 million display colors enables to present your drawings in a more lifelike way with smoother color gradation on this drawing tablet for pc.
  • [Battery-free Stylus AP50 ]: Say goodbye to the hassle of charging, GAOMON PD1161 graphics tablet includes a battery-free pen AP50 with 8192 levels of pressure sensitivity and tilt function, which is easy to control, giving you the familiar feel of standard pencil.
  • [Customize Your Workflow]: The 8 press keys on the side of the PD1161 drawing monitor and 2 pen buttons can be programmble in the driver, which is great to get easy shortcus and improve workflow. Warm Reminder: it is not a standalone drawing tablet, so it should work with a computer running windows or mac OS.

The Glaze Project reports more than 8.5 million Glaze downloads since March 2023 and more than 2.5 million Nightshade downloads since January 2024. Those are project-reported download counts, not independently audited totals or a measure of how many artists actively use either tool.

Frequently Asked Questions

Does Glaze stop people from copying a painting?

Does Glaze stop people from copying a painting?

No. Glaze changes an image to interfere with AI systems learning an artist’s style. It does not prevent downloading, reposting, tracing, or ordinary copying, and it does not determine whether a use is legally permitted.

Should artists use Nightshade instead of Glaze?

Should artists use Nightshade instead of Glaze?

No. The tools have different objectives. Nightshade is intended to introduce incorrect associations if an image enters model-training data, while Glaze targets style mimicry. The official guidance says artists using both should apply Nightshade first and Glaze afterward.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does Glaze 2.2 fix the attack?

Does Glaze 2.2 fix the attack?

The supplied download listing describes Glaze 2.2 for Windows as a support update for NVIDIA 50-series GPUs. Glaze 2.1 included changes intended to improve resistance to newer attacks. Neither release is evidence of a permanent solution against all future attacks, models, or artistic styles.

Should I reprocess artwork I protected in the past?

Should I reprocess artwork I protected in the past?

Review important public work using the current project guidance and decide whether replacing the public export is worthwhile. Reprocessing a new copy cannot reliably remove older copies that were downloaded, mirrored, or scraped, so it is a risk-reduction step rather than a reset.

Can provenance records protect an image from AI training?

Can provenance records protect an image from AI training?

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

No. Private originals, layered files, drafts, dated exports, and commission records do not technically block scraping or remove an image from a dataset. They can help establish authorship and chronology when dealing with platforms, licensing discussions, or disputes.

The Bottom Line

Bottom line: Glaze was bypassed in documented attacks, but that does not make it worthless. Use it as temporary friction against style mimicry, not as a permanent shield. Pair it with lower-resolution public exports, selective or private releases, secure originals, provenance records, clear contracts, and realistic expectations about what platform and legal remedies can accomplish.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

More from the Paint Desk

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.