ThatPainter is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Learn More
Nightshade is a free desktop application that creates image copies intended to disrupt the way a text-to-image AI model learns a targeted concept. It does not delete artwork, prevent scraping, or undo a model’s previous training. Its effect is conditional: the transformed copy must be collected, retained, and used in a relevant training pipeline without being successfully detected or filtered.
The January 2024 release mattered because it gave artists a practical, free response to large-scale scraping. The reported 250,000 downloads in the first five days showed strong creator interest, but did not prove that Nightshade had affected commercial AI systems.[C3]
Nightshade is not a tool that deletes artwork, blocks scraping, or removes images from an AI model. It is a free desktop application from the SAND Lab at the University of Chicago that creates a visually normal-looking, transformed copy of an image. If that copy is scraped and later used in a relevant text-to-image model-training pipeline, the transformation is intended to distort the model’s learned associations.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- PORTABLE 10" STANDALONE DRAWING TABLET: Create, draw, design, and learn anywhere on the compact, travel‑friendly PicassoTab A10. No computer needed — everything runs directly on the tablet. Comes preloaded with 5 creative apps for drawing, painting, animation, tutorials, and guided lessons.
- 6 BONUS ITEMS ($100 value): Comes with 2 app upgrades (lifetime PRO upgrade for Concepts drawing app, lifetime VIP upgrade for Artixo tutorials app) and 4 bonus accessories (premium tablet case, drawing glove, universal power adapter, and pre‑installed screen protector)
- LIFETIME VIP TUTORIALS - PERFECT FOR BEGINNERS: Artixo Lifetime VIP upgrade gives you step‑by‑step lessons, guided practice, and beginner‑friendly exercises. Plus, the Xplore app provides drawing guides and instant help whenever you need it.
- PAPER‑LIKE LAMINATED DISPLAY + 4096‑LEVEL ACTIVE PEN: The laminated 10" screen reduces glare and parallax for a smoother, more natural drawing feel. The 4096‑level pressure‑sensitive stylus delivers accurate, expressive strokes for sketching and illustration.
- FAST OCTA‑CORE PERFORMANCE + EXPANDABLE STORAGE: Powered by an octa‑core processor with 6GB RAM and 64GB storage (expandable up to 1TB), the A10 handles drawing apps, schoolwork, streaming, and everyday multitasking with ease.
That distinction is the key to understanding the 2024 headline. Nightshade offered artists a technical response to large-scale image scraping, but it did not guarantee that a particular image would be collected, survive dataset processing, or affect a production AI system. The project is best understood as a conditional data-poisoning or adversarial image-transformation tool—not as a universal “AI breaker,” legal shield, or permanent barrier.
Why Nightshade made headlines in January 2024
Nightshade became available for artists to download in January 2024, at a time when creators were objecting to artwork being collected for generative-AI training despite opt-out requests or do-not-crawl instructions. The University of Chicago reported approximately 250,000 downloads during the first five days after release.[C3]
That download figure showed unusually strong creator interest. It did not demonstrate that Nightshade had damaged, changed, or interrupted a commercial AI model. Downloads measure adoption of the tool, not whether processed images entered training sets or produced a measurable effect.
The appeal was the imbalance Nightshade tried to address: an individual artist may have little practical ability to prevent automated collection of public images, while a large organization may be able to gather millions of files. Nightshade’s proposed answer was not to hide an image completely, but to make unauthorized use of a collected image potentially costly or unreliable for the model trainer.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesHow Nightshade is supposed to work
Nightshade is based on a research technique described as an optimized, prompt-specific data-poisoning attack against text-to-image diffusion models.[C4] In plain language, the application modifies a copy of an image in ways intended to be subtle to human viewers but significant to the representations a model uses during training.
The importance of concept sparsity
A modern model may train on hundreds of millions or billions of images, but a particular concept—such as “dog,” “watercolor landscape,” or a named visual style—may be represented by a much smaller subset of image-and-caption pairs. This is the research paper’s idea of concept sparsity.
If enough manipulated examples are associated with a targeted concept, they may have disproportionate influence over the relationship the model learns between a prompt and an image. Nightshade attempts to exploit that narrower relationship rather than trying to alter every aspect of an entire model at once.
Rank #2
- Large Active Drawing Space: UGEE M708 V3 graphic drawing tablet features 10 x 6 inch large active drawing space with papery texture surface, provides enormous and smooth drawing for your digital artwork creation, offers no-lag sketch and painting experience
- 16384 Passive Stylus Technology: A more affordable passive stylus technology offers 16384 levels of pressure sensitivity allows you to draw accurate lines of any weight and opacity according to the pressure you apply to the pen, sharper line with light pressure and thick line with hard pressure for artistry design or unique brush effect for photo retouching
- Compatible with Multiple System and Softwares: Powerful compatibility, tablet for drawing computer, perform well with Windows 11/10/8/7, Mac OS X 10.10 or later, Android 10.0 or later, mac OS 10.12 or later, Chrome OS 88 or later and Linux; Driver program works with creative software such as Photoshop, Illustrator, Macromedia Flash, Comic Studio, SAI, Infinite Stratos, 3D MAX, Autodesk MAYA, Pixologic ZBrush and more
- Ergonomically Designed Shortcuts: 8 customizable express keys on the side for short cuts like eraser, zoom in and out, scrolling and undo, provide a lot more for convenience and helps to improve the productivity and efficiency when creating with the drawing tablet
- Easy Connectivity for Beginners: The UGEE M708 V3 offers USB to USB-C connectivity, plus adapters for USB C, ensuring easy connection to various devices and allowing beginner artists to set up quickly and focus on their creativity without compatibility concerns; Whether using a laptop, desktop, chromebook, or tablet, the UGEE M708 V3 provides a seamless experience for those just starting their digital art journey
What a poisoned association might look like
In the paper’s examples, images targeting the concept “dog” could cause a model to produce cat-like results when prompted with “dog.” The research also describes attacks aimed at style concepts and effects that can spread to semantically related concepts.
Recommended Free Tools
This does not mean that every Nightshaded image will visibly turn into a cat, nor that the artist’s uploaded file changes for ordinary viewers. The intended effect occurs inside a model-training process, if the transformed image is collected, captioned or associated with the relevant concept, retained, and used under conditions similar to those studied by the researchers.
What the published numbers mean
The peer-reviewed paper reported successful results against several evaluated diffusion-model configurations with approximately 100 poison samples in the studied settings. One analysis reported that roughly 2% poisoned data relative to clean, concept-specific data was effective on average.[C4]
Those figures are useful for understanding the research claim, but they are not a promise that 100 images—or any fixed percentage—will poison a commercial production model. The result depends on the model architecture, dataset composition, captions, preprocessing, concept being targeted, and the attack assumptions. A production system may also detect or remove the altered files before training.
The paper also reported that multiple attacks can coexist and that enough poisoned concepts could degrade broader model quality. That is why Nightshade is sometimes described as an offensive or retaliatory defense rather than simply as a private watermark. If many altered images are aggregated into a training corpus, the intended consequences could extend beyond one artist’s images or style.
Nightshade versus Glaze
Nightshade and Glaze are different tools for different threats. Nightshade aims to corrupt a learned prompt-to-image association if an image enters model training. Glaze aims to disrupt style mimicry by changing how a model represents an artist’s visual style.
| Tool | Primary purpose | What it does not guarantee |
|---|---|---|
| Nightshade | Attempts to make an image a harmful or misleading training sample for a targeted concept. | It does not stop scraping, erase an existing copy, or guarantee an effect on a trained model. |
| Glaze | Attempts to make it harder for a model to imitate an artist’s visual style. | It is not a substitute for Nightshade’s data-poisoning objective. |
The Nightshade researchers describe Nightshade as standalone. A Nightshaded image that has not also been Glazed may remain vulnerable to style imitation, while a Glazed image does not necessarily provide Nightshade’s intended poisoning effect.[C1][C2]
Rank #3
- Two Fingers Design Fits Both Hands: Whether you're left- or right-handed, this Kortimu artist glove fits snugly on either hand, adapting perfectly to your hand shape comfortably. The ambidextrous design ensures you can focus on creating without any distractions
- Anti-Slip Palm Rejection for Stylus Use: With a three-layer anti-slip design, this artist glove provides better grip and prevents accidental touches. Perfectly optimized for stylus use, it works seamlessly with iPads and other drawing tablets
- Smooth, Scratch-Free Drawing: Glide smoothly across your screen without worrying about smudges or scratches. This artist glove reduces friction, making each stroke precise, enhances your digital art experience
- Cool and Comfortable for Long Sessions: Crafted from soft, stretchy, breathable fabric, this artist glove keeps your hand cool and dry, even during extended use. The moisture-wicking design ensures comfort, making it ideal for long hours of drawing
- Bonus Cleaning Cloth, Two Gloves, and Three Sizes: This set includes two gloves and a bonus cleaning cloth, with three sizes available in Large: 3.54’’x8.46’’, Medium: 3.34’’x8.07’’, Small: 2.95’’x7.48’’. With stain-resistant fabric, it's easy to maintain and keep screen spotless. Less cleaning, more creating
For artists who want both types of protection, the project’s historical guidance has recommended applying Nightshade first and Glaze afterward. The project has also discussed testing a combined Glaze/Nightshade implementation. Do not assume that a fully integrated version is generally available unless the current official project materials explicitly confirm it.
For this combined goal, Glaze style protection is the most relevant adjacent software to investigate—but it should be treated as a separate tool, not as a paid requirement for Nightshade. Check the current project documentation, licensing, platform support, and availability before adopting a workflow.
Nightshade 1.1: current availability and requirements
As of August 12, 2026, the official download page lists Nightshade 1.1 for Windows and macOS. The page describes the April 20, 2026 update as a bug fix and driver update.[C1]
- Windows: GPU and CPU variants are listed, with bundled PyTorch GPU libraries.
- macOS: the listed build is for Apple-silicon systems, including M1, M2, M3, and later Apple processors.
- First launch: Nightshade downloads additional machine-learning libraries and resources.
- Storage: the official page says the resource download needs stable internet access and approximately 4 GB of storage. The Windows 1.1 download itself is listed at approximately 3.67 GB.
- Existing Glaze installation: in some cases, an existing Glaze installation may allow Nightshade to reuse shared resource files.
Nightshade is a local desktop workflow, so the computer matters mainly for processing time and storage. A GPU-capable Windows PC can be useful for artists processing batches, but the documentation does not establish one universally required graphics card or promise a particular speed. CPU processing is supported, but the user guide warns that it can be substantially slower and recommends closing other resource-intensive applications during a run.[C2]
The guide gives an example in which a job expected to take about 20 minutes could take several hours in CPU mode. That is project documentation rather than an independently verified benchmark, so treat it as a planning warning, not a guaranteed comparison.
On macOS, an Apple-silicon Mac is the supported direction identified by the official download information. This is a platform-compatibility detail, not a recommendation to replace a working computer solely for Nightshade.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →A careful workflow for artists
- Start with the official University of Chicago project materials. Download the current build, read the license, and review the user guide before processing a portfolio or client archive.[C1][C2]
- Keep an untouched master. Work from a duplicate, not the only copy of the original. Nightshade produces a transformed derivative; preserving the clean master lets you make future versions, meet a client request, or change your protection strategy.
- Allow time for the first resource download. The application may download several gigabytes of machine-learning resources. Use a stable internet connection and confirm that the computer has enough free space.
- Choose CPU or GPU processing realistically. GPU processing will generally be the practical choice for repeated work when compatible hardware is available. CPU mode may be adequate for occasional images, but expect it to take much longer and close other demanding applications.
- Process a copy and inspect the result. Compare the output with the original at normal viewing size and at a closer zoom. Check edges, fine texture, color transitions, signatures, and any details that matter to the artwork. Keep the derivative separate from the clean master.
- Apply Glaze afterward only if style protection is also part of the goal. Follow the current instructions for both projects rather than assuming that one application automatically performs the other tool’s job.
- Preserve the files systematically. A clearly named folder structure can separate clean masters, Nightshade derivatives, Glazed derivatives, exported web files, and project resources. An optional external SSD or backup drive may help artists retain these versions, but the official Nightshade materials do not require or specifically recommend one.
- Do not treat a public label as proof of protection. The user guide warns that announcing an image is “Nightshaded” may make it easier for model trainers to identify and filter, reducing the intended effect.[C2]
A sensible file-preservation pattern might look like this:
Rank #4
- PLEASE NOTE：XPPen Artist13.3 Pro drawing tablet Need to connect with computer,you need to use it with your computer or laptop, the 3 in 1 cable is included
- Drawing Tablet with Screen: Tilt Function- XPPen Artist 13.3 Pro supports up to 60 degrees of tilt function, so now you don't need to adjust the brush direction in the software again and again. Simply tilt to add shading to your creation and enjoy smoother and more natural transitions between lines and strokes
- Graphics Tablets: High Color Gamut- The 13.3 inch fully-laminated FHD Display pairs a superb color accuracy of 88% NTSC (Adobe RGB≧91%，sRGB≧123%) with a 178-degree viewing angle and delivers rich colors, vivid images, and dazzling details in a wider view. Your creative world is now as powerful as it is colorful
- Drawing Pad: One is enough- The sleek Red Dial on the display is expertly designed with creators in mind, its strategic placement allows for natural drawing postures. With just one wheel, you can effortlessly zoom in and out, adjust brush sizes, and flip the canvas—all tailored to suit the habits of everyday artists. The 8 customizable shortcut keys allow you to personalize your setup, streamlining your workflow and enhancing creative efficiency
- Universal Compatibility & Software Support：supports Windows 7 (or later), Mac OS X 10.10 (or later), Chrome OS 88 (or later), and Linux systems. Fully compatible with major creative software including Photoshop, Illustrator, SAI, and Blender 3D. Register your device to access additional programs like ArtRage 5 and openCanvas for expanded creative possibilities.
Artwork/
├── master-clean/
├── nightshade-derivatives/
├── glazed-derivatives/
└── web-exports/The exact folder names are unimportant. The important practice is avoiding accidental overwrites and knowing which version was uploaded to which platform.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What Nightshade cannot do
Nightshade’s limits are not minor footnotes; they define what the tool is capable of protecting.
- It cannot prevent scraping. A website, crawler, or user may copy the original or a separate version before Nightshade is applied.
- It cannot affect a model automatically. The transformed file must first enter a relevant training or fine-tuning dataset.
- It cannot force the trainer to retain the file. A curator may discard it, exclude the source, or use a previously collected clean copy.
- It may be weakened by preprocessing. Detection, removal, recompression, cropping, resizing, filtering, or other transformations may reduce the intended effect.
- It cannot undo prior use. Processing an image today does not remove a clean copy that was downloaded yesterday, and it does not reverse an already trained model.
- It does not provide legal protection. It is a technical measure, not a copyright ruling, permission system, or guarantee that a platform or court will recognize the transformation in a particular way.
Independent research has raised broader concerns about creator-protection perturbations, including the possibility that known patterns can be detected or neutralized.[C5] That does not make Nightshade irrelevant; it means artists should regard it as one layer in a broader strategy rather than a permanent technical wall.
Is Nightshade legal?
There is no universal answer that can safely be given for every country, platform, contract, or use case. The research presents Nightshade as a last-resort defense for creators whose opt-out or do-not-crawl requests are ignored, and it discusses the power imbalance between individual artists and large-scale scrapers.[C4] That framing explains the tool’s purpose, but it does not establish that using it is legally protected everywhere.
Legal questions can include the law governing the artist’s location, the hosting platform’s terms, ownership or licensing of the image, contractual obligations, and whether a transformed copy is uploaded or distributed in a particular context. Artists with a high-value dispute or commercial concern should obtain advice from a qualified lawyer familiar with the relevant jurisdiction instead of treating a technical description as a legal conclusion.
Should an artist use Nightshade?
Nightshade may be worth considering when an artist wants a free, local, technically adversarial measure against the possibility of unauthorized training and is comfortable maintaining multiple image versions. It is less suitable as a substitute for access controls, takedown procedures, contractual terms, licensing decisions, or legal advice.
A practical decision framework is:
| If your main concern is… | Nightshade’s relevance | Also consider… |
|---|---|---|
| Unauthorized model training | Potentially relevant as a conditional data-poisoning defense. | Opt-out requests, site controls, contracts, monitoring, and legal remedies. |
| Style imitation | Not Nightshade’s primary purpose. | Glaze or another current style-protection workflow, with its own limitations. |
| Protecting the only copy of an artwork | Not a backup system. | Separate local and offline backups, clear file versioning, and controlled publishing copies. |
| Stopping an image from being downloaded | Not designed for that job. | Access controls and realistic expectations about anything published publicly. |
Bottom line
Nightshade mattered because it gave artists a free way to push back technically against the collection of public artwork for generative-AI training. Its research basis is more substantial than the phrase “poisons AI” suggests: the published work describes targeted attacks that can alter learned prompt-to-image relationships under studied conditions.
Best Value
- Word-first 16K Pressure Levels: The upgraded stylus features 16,384 levels of pressure sensitivity and supports up to 60 degrees of tilt, delivering smoother lines and shading for a natural drawing experience. With no battery or charging needed, it operates like a real pen, making it easy for beginners to create effortlessly. This functionality helps novice artists develop their skills and explore their creativity without the intimidation of complex tools
- Designed for Beginners: This drawing pad desinged with 8 customizable shortcuts for both right and left-hand users, express keys create a highly ergonomic and convenient work platform
- Perfectly Adapted for Android: The XPPen Deco 01 V3 art tablet supports connections with Android devices running version 10.0 and above. It is recommended to download the XPPen Tools Android application, which adapts to your smartphone's screen aspect ratio, ensuring accurate mapping. It also supports mapping on Android screens with different aspect ratios in portrait mode
- Large Drawing Space, Bigger Bold Inspiration: This expansive drawing pad has10 x 6.25-inch helps you break through the limit between shortcut keys and drawing area
- Easy Connectivity for Beginners: The Deco 01 V3 offers USB-C to USB-C connectivity, plus adapters for USB C. This ensures easy connection to various devices, allowing beginner artists to set up quickly and focus on their creativity without compatibility concerns. Whether using a laptop, tablet, or desktop, the Deco 01 V3 provides a seamless experience, making it an ideal choice for those just starting their digital art journey
But the effect is conditional. Nightshade cannot stop scraping, recover an image already copied, guarantee that a model will train on the altered version, or promise permanent protection against detection and filtering. The most accurate description is a defensive or retaliatory data-poisoning tool that artists may use alongside—not instead of—good file preservation, publishing controls, opt-out requests, and appropriate legal advice.
Frequently Asked Questions
Does Nightshade stop AI companies from scraping my art?
No. Nightshade does not prevent an image from being scraped or copied. It creates a transformed version that may affect a model only if that version enters a relevant training or fine-tuning pipeline and survives the trainer’s preprocessing and filtering.
Do I need Glaze if I use Nightshade?
No. Nightshade and Glaze address different risks. Nightshade targets learned prompt-to-image associations, while Glaze targets style imitation. The projects’ guidance has historically recommended Nightshade first and Glaze afterward when an artist wants both types of protection.
What computer does Nightshade require?
The official materials list Windows GPU and CPU variants and a macOS build for Apple-silicon Macs, including M1, M2, M3, and later processors. The first setup also downloads approximately 4 GB of resources, and CPU processing can take substantially longer than GPU processing.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Will 100 Nightshaded images definitely poison an AI model?
No. The published research reports results under specific models, datasets, and assumptions. A trainer may detect, remove, recompress, crop, transform, or otherwise filter an image, or may already possess a clean copy. Nightshade should be treated as one defensive layer rather than a guaranteed or permanent barrier.
The Bottom Line
Nightshade is a free, local tool that creates image derivatives intended to disrupt AI training if those derivatives are scraped and used in a susceptible model-training pipeline. It is not a blocker, eraser, legal shield, or guarantee. Keep clean originals, verify the current installation guidance, and consider Glaze separately if style imitation is also a concern.
Quick Recap
