Nightshade lets artists poison AI scrapers

Nightshade is a free desktop tool built by researchers at the University of Chicago that lets artists poison their digital artwork to disrupt generative AI models training on their work without permission.

It essentially turns machine learning against machine learning. Running on PyTorch, Nightshade scans an image and applies subtle, pixel-level alterations that are practically invisible to human eyes. While a person still sees a peaceful cow in a pasture, an AI training algorithm reads the exact same pixels as a luxury leather handbag.

What it does

Nearly a year ago, the same Chicago team under Professor Ben Zhao released Glaze, a defensive utility designed to mask an artist's personal style from being cloned. Nightshade is explicitly offensive.

When an AI model ingests enough poisoned images during training, its internal associations break down. It will start generating purses instead of cows, even when a user explicitly prompts for a cow, and even when evaluating unpoisoned reference data. According to the developers, slipping fewer than 100 poisoned samples into a training set could be enough to corrupt an image model's grasp of a specific concept.

The modifications are remarkably durable. Because Nightshade does not rely on fragile watermarks or steganography, the poison survives standard image manipulation. Cropping, compressing, smoothing, resampling, taking a screenshot, or even snapping a photo of your monitor will keep the alterations intact.

The team currently recommends running Nightshade first and then layering Glaze on top, with a unified app already in development.

Hardware specs and setup

Nightshade v1.0 runs locally on both Windows and macOS.

Mac users need Apple Silicon hardware (M1, M2, or M3), running on CPU only, with an initial download size of around 255MB. Windows users need Windows 10 or 11, with a 2.6GB installer that supports CPU mode as well as GPU acceleration on compatible Nvidia cards.

Beyond the base installer, the app requires an internet connection and roughly 4GB of disk space to pull down required machine learning dependencies. If you already have Glaze installed on your machine, Nightshade can share those existing resource packs to save time and storage.

Keep in mind that early server congestion pushed some user download times up to eight hours. The software also comes with a strict EULA prohibiting commercial redistribution and modifications to the underlying source code.

Why it matters

For digital illustrators, painters, and portfolio creators who must share work online, Nightshade is an immediate must-try. It demands zero visual compromise from human viewers while turning raw images into toxic landmines for automated scrapers, all without uploading private files to cloud servers.

Some critics have already labeled the release an outright cyberattack against AI firms. But the developers are frank about their endgame: they do not want to destroy generative AI, but rather make unconsented web scraping so expensive and unreliable that paying artists for legitimate, uncorrupted licenses becomes the only practical path forward.