AI Trace
OtherVerified

Nightshade offers artists a free, downloadable tool that uses machine learning to alter pixels in artwork so that any AI model trained on those images learns incorrect visual associations — for example, interpreting a dog as a cat. The tool was first released on January 18, 2024, and has been downloaded more than 2.5 million times globally.

Details

Nightshade takes an artist's digital image as input and applies a computed perturbation — a set of pixel-level changes invisible to the human eye but visible to AI — that causes generative AI image models to mislearn the associations between text prompts and visual content. Technically, it is a prompt-specific poisoning attack on text-to-image diffusion models, designed as a multi-objective optimization to minimize perceptible changes while maximizing disruption to model training. The tool runs entirely offline on the user's own machine; no image data is sent to the researchers. Version 1.1 was released on April 20, 2026, with bug fixes.

Products affected

Nightshade

Sources & Evidence

Cite this record

Trace Foundation. (2026). Nightshade: Nightshade offers artists a free, downloadable tool that uses machine learning to alter pixels in artwork so that any AI model trained on those images learns incorrect visual associations — for example, interpreting a dog as a cat. The tool was first released on January 18, 2024, and has been downloaded more than 2.5 million times globally (data as of 2026-04-22) [Data set record]. AI Trace. https://www.aitrace.org/r/practice/c2a42464-6698-4c68-b818-a4d02d248171. Accessed October 28, 2026.

Stable link
https://www.aitrace.org/r/practice/c2a42464-6698-4c68-b818-a4d02d248171
Data as of
April 22, 2026
Last verified
April 22, 2026

How to cite AI Trace

Other practices by Nightshade

Reading every page here costs nothing. Donations to Trace Foundation, Inc., the nonprofit that runs this site, pay for keeping it that way.

Donate →