by admin | Aug 21, 2026 | Future Jobs
You are updating your CV and you get stuck on the skills section. You use ChatGPT most days. You have built a few useful workflows. But does writing “AI tools” next to “Microsoft Excel” actually help, or does it look like something everyone claims now?
Until recently the honest answer was that nobody knew. Now there is real research. A team at the Oxford Internet Institute studied millions of job adverts and ran a controlled experiment with 1,700 hiring professionals, and the World Economic Forum published the findings in February 2026.
The short version: listing AI skills is worth more than most people assume, and it helps some candidates far more than others. Here is what the numbers say and how to write that section without overstating anything.
What AI skills on your CV are linked to in pay
The researchers looked at more than 10 million UK job postings. Roles asking for AI-related skills advertised salaries around 23% higher than comparable roles that did not, according to the World Economic Forum summary of the study.
For comparison, in the same dataset a Master’s degree was associated with about a 13% premium and a Bachelor’s with about 8%. That is the finding worth sitting with. In these adverts, demonstrable AI skills were linked to a bigger pay difference than a postgraduate degree.
One caution before you get excited. These are advertised salaries in job posts, not a promise that adding a line to your CV raises your own pay by a quarter. What it does show is where employers are putting their money right now.
They also help you get past the first filter
Pay only matters if you get the interview. So the same team ran an experiment with 1,700 recruiters in the US and UK. Each recruiter saw pairs of CVs that were identical except for one thing: whether AI skills were listed.
Candidates with AI skills were 8 to 15% more likely to be invited to interview, depending on the role. This held across very different jobs, including graphic design, office administration and software development. So this is not only a tech-sector story.
The most interesting part is who benefited most. Older applicants and candidates without advanced degrees, two groups that usually get fewer callbacks, saw the biggest improvement. The researchers describe AI skills as a partial equaliser, moving attention away from fixed characteristics and towards what you can actually do today.
A certificate makes the claim land harder
In the same experiment, the effect was stronger when the AI skills were backed by a recognised certificate from a university or company training programme. That makes sense from the other side of the desk.
From my own experience hiring freelancers for website and online projects, “AI expert” on a profile means almost nothing by itself. Half the time it falls apart in the first five minutes of conversation. A named course, a certificate with a date, or a link to something the person actually built moves them straight to the shortlist.
You do not need to pay for this. Microsoft, Google and others publish free AI learning paths, and we have collected the current options in our guides to free AI certifications you can get online and how to learn AI for free. Two solid ones to start with are the free paths on Microsoft Learn and Google’s Machine Learning Crash Course.
AI roles tend to come with better conditions too
Looking at US job postings from 2018 to 2024, the researchers found AI-related roles were roughly twice as likely to advertise parental leave and around three times as likely to offer remote work. The gap has widened in recent years, which suggests employers are competing for these people with flexibility as well as salary.
If you have been quietly worried about your position, this is a more useful frame than the usual panic. We looked at the wider picture in will AI take my job, and this research points the same way: the pressure is on skills, not on people.
How to write AI skills on your CV honestly
The research says listing AI skills helps. It does not say vague claims help. Recruiters were shown specific competencies, not the word “AI” floating in a skills box. So be concrete.
- Name the tool and the task. “Used Copilot in Excel to clean and summarise monthly sales data” beats “AI tools” every time.
- Attach a number where you honestly can. Hours saved per week, reports produced, error rate reduced.
- Put it inside your job bullets, not only in a skills list. Skills lists get skimmed. Achievements get read.
- Name your certificate with the provider and year. “Microsoft Learn, AI Fundamentals path, 2026” is checkable. “AI certified” is not.
- Only claim what you can demonstrate in an interview. If you cannot walk someone through how you used it, leave it off.
Important tip: before you send anything, read your AI-related bullets out loud and ask “could I be asked to prove this on a call tomorrow?” If the answer is no, rewrite it until it is yes.
If you want help drafting the wording itself, our guide on using AI in your job search walks through the process, and the AI skills that matter most for future jobs covers what is worth learning next.
Common Questions
Do AI skills only help in tech jobs?
No. The hiring experiment found the effect across graphic design, office administration and software development, so it showed up in ordinary office roles as well as technical ones.
Will listing AI skills really raise my salary by 23%?
That figure describes advertised salaries across more than 10 million UK job postings, not a personal raise. Treat it as a signal about where demand is, not a promise about your next payslip.
Is a free certificate good enough?
The research pointed to certificates from recognised universities or company training programmes. Several of those are free, including Microsoft Learn paths and Google’s Machine Learning Crash Course, so cost is not the deciding factor. Recognition and the ability to explain what you learned are.
Final takeaway
AI skills on your CV are not decoration any more. In the research they were linked to higher advertised pay, more interview invitations, and a real boost for candidates who usually get overlooked. The catch is that vague claims do nothing. Pick one AI task you genuinely do well, finish one free certificate, and write both in language you could defend in a five minute conversation. That is the whole job.
by admin | Aug 20, 2026 | AI Guides
Imagine you ask an AI assistant to summarise a web page. Instead of a summary, it quietly opens your email in another tab, copies a login code, and posts that code as a public comment. No pop-up, no warning, nothing you clicked.
That is not a scare story invented for clicks. Security researchers at Brave built and published exactly that attack against a real AI browser in August 2025. The technique behind it is called prompt injection, and it is now the first entry on the OWASP list of security risks for AI applications.
If you use any AI feature that reads web pages, emails, or documents for you, this one is worth ten minutes. Here is what prompt injection is, why it has proved so stubborn, and the habits that make you a harder target.
What is prompt injection, in plain English
An AI model does not really separate “the person’s instruction” from “the text I was given to read”. Everything arrives as one stream of words. So if someone hides an instruction inside content the model is about to read, the model may treat it as a command from you.
OWASP, the non-profit that publishes the well known web security top ten lists, ranks this as LLM01, the first entry on its list of risks for AI applications. Its definition contains the detail most people miss: a prompt injection does not need to be visible to a human at all. It only needs to be readable by the model.
That is why attackers use white text on a white background, zero-width characters, HTML comments, or text tucked behind a spoiler tag. You see a normal page. The AI sees an extra set of orders.
Direct and indirect prompt injection
OWASP splits the problem in two, and the difference matters.
- Direct prompt injection is when someone types something into the chat box to push the model outside its normal behaviour. Jailbreaking is the best known version of this.
- Indirect prompt injection is when the instruction arrives inside something the AI reads for you: a web page, a PDF, an email, a Reddit comment, a shared document. The attacker never touches your chat window.
The second one is the real problem, because it needs nothing from you except a perfectly reasonable request like “summarise this for me”.
A real case: the browser that read someone’s inbox
Brave’s security team documented an attack on the Comet AI browser. They hid instructions inside a Reddit comment, behind a spoiler tag. A user then clicked the browser’s own summarise button.
While processing that page, the assistant followed the hidden instructions. It opened the user’s account page to read their email address, triggered a one-time login code, opened Gmail where the user was already signed in, read the code, and posted both back as a reply to that same Reddit comment. Everything after the summarise click happened without further input.
Brave’s point was blunt. Classic web protections such as the same-origin policy exist to stop one site touching another site’s data. None of that helps here, because the AI is acting as you, with your full privileges, across every session you are logged into.
From my own years working with websites and cybersecurity, this is the part that changes how you think about it. We spent two decades teaching browsers to keep sites walled off from each other. An AI assistant with broad access walks through those walls on purpose, because that is its job.
Why prompt injection is so hard to fix
You might assume a filter could strip out suspicious text. Filters help, but the reason they do not close the hole is structural.
Brave returned to the topic in a June 2026 write-up and described the root cause as the collapse of the boundary between instructions and data inside the model’s context window. The model cannot tell where a piece of text came from. Trusted instructions and untrusted page content sit side by side, and the model’s willingness to follow instructions is exactly what makes it useful in the first place.
That write-up also kills a comfortable assumption. The researchers tested a cloud-hosted browsing agent and a fully on-device autocomplete tool running a local model. Both fell to hidden instructions. Running AI on your own machine changes where an attacker gets in. It does not remove the weakness.
OWASP is equally honest about it, saying it is unclear whether any fool-proof prevention exists today. Its advice is layered defence: least privilege, human approval for risky actions, and clearly separating untrusted content.
Even the big AI labs have not solved it
Anthropic published numbers when it started piloting its Claude extension for Chrome. It ran 123 adversarial test cases covering 29 attack scenarios. Before its new defences, browsing in autonomous mode had a 23.6 percent attack success rate. After the new mitigations, that fell to 11.2 percent.
Better, clearly. Still not zero, and the company said so openly. One attack it described, from before those defences were added, was an email claiming that messages had to be deleted for security reasons and no confirmation was needed. The assistant deleted them. Anthropic says its new mitigations now catch that particular trick.
When an AI lab publishes a double-digit failure rate against its own red team, that says something about the whole category rather than one weak product.
What this actually means for you
If you only chat with an AI and copy answers out by hand, your exposure is low. The worst case is bad information, which is a different problem covered in our guide to why AI sometimes gives wrong answers.
Risk climbs the moment the AI can act: browse, click, fill forms, send mail, or open files. That is the world of AI agents, and it is arriving fast in ordinary workplaces, as we covered in working with AI agents at work.
Important tip: treat every AI assistant as if it will believe the next web page it reads. Never give it standing access to anything you would not hand to a stranger who reads the internet on your behalf.
Simple habits that lower your risk
- Keep confirmation prompts switched on. If a tool offers an autonomous mode that skips approvals, that convenience is exactly what an attacker needs.
- Read what the assistant says it is about to do before you approve it. A step that has nothing to do with your request is your warning sign.
- Be careful asking an AI to summarise pages with open comment sections, or documents from people you do not know. Those are the easiest places to plant hidden text.
- Keep banking, health, and work admin out of reach. Use a separate browser profile for AI browsing so it is not signed into your important accounts.
- Grant access per site and per task, then take it back. Standing permissions are the thing that turns a small trick into a real loss.
None of this is exotic. It is the same instinct that stops you clicking a link in a strange email, applied to a tool that reads far more of the internet than you ever will. Our guide to using AI safely covers the privacy side of the same habit.
Common Questions
Is prompt injection the same as jailbreaking?
Not quite. OWASP treats jailbreaking as one form of prompt injection, the kind where the input makes a model ignore its safety rules entirely. Prompt injection is the wider category, and the indirect version is the one that can affect you without you doing anything unusual.
Will antivirus software protect me?
No. There is no virus and no malicious file. The attack is ordinary text that the AI chooses to obey. Your protection comes from limiting what the assistant is allowed to reach and approving its actions yourself.
Does running AI locally on my own computer solve it?
It does not. Brave’s June 2026 research tested a fully on-device assistant and found hidden instructions in a local document still shaped its output. What changes is the attacker’s entry point, not the underlying weakness.
Is this getting fixed?
It is getting better. Vendors patch specific attacks, add permission controls, and train models to spot suspicious instructions. Anthropic drove one set of browser-specific attacks down to zero in its own testing. But neither Brave nor Anthropic claims the general problem is solved, so your own habits still matter.
Final takeaway
Prompt injection is not a reason to avoid AI. It is a reason to be deliberate about what you connect it to. An assistant that drafts your email is a helpful tool. An assistant that can send your email, read your inbox, and follow instructions from any page it visits is something you should set up carefully and keep on a short leash.
Give it the smallest amount of access that gets the job done, keep the approval step, and stay a little suspicious of anything it decides to do that you did not ask for. If some of the words here were new to you, our plain English AI glossary is a good next stop.
by admin | Aug 19, 2026 | AI Guides
You upload a PDF, ask a question, and an answer comes back in seconds with a neat little citation beside it. It feels like the AI sat down and read your document the way you would. It did not. Something quite different happened, and once you know what, every strange answer you have had from a document chatbot starts to make sense.
The name for it is RAG. It is one of the most useful ideas in everyday AI and one of the worst explained, because nearly every guide is written for software engineers. This one is not. Here is what RAG in AI actually is, where you already use it, and why a perfectly good document can still give you a poor answer.
What is RAG in AI, in plain English
RAG stands for retrieval augmented generation. Three long words, one simple sequence: before the AI writes a word of its answer, something fetches relevant material for it, and the AI writes from that material.
AWS describes it in its own guide to the term as optimising a model’s output so that it references an authoritative knowledge base outside its training data before it answers. Strip the jargon: look it up first, then answer.
Picture an open book exam where you are not allowed to touch the book. An assistant reads your question, runs off, photocopies three pages he thinks are relevant, and slides them across the desk. You write a strong answer from those pages. That is RAG. Notice the detail that decides everything: the assistant chose the pages, and if he brought the wrong three, you never find out.
Why AI needed this in the first place
A large language model learns from an enormous pile of text and then stops learning. It has never seen your tenancy agreement, your company handbook or your lecture notes, and it cannot be sent back to school every time one of those files changes.
Retrieval was the way around that, and the name comes from a 2020 research paper by Patrick Lewis and colleagues, presented at NeurIPS that year, which paired a language model with a searchable index of Wikipedia. On language generation tasks they reported it produced more specific and more factual language than the model working alone.
How RAG actually works, step by step
Here is the shape of it.
- Your documents are chopped into small pieces, rarely more than a couple of paragraphs each. These are called chunks.
- Each chunk is converted into a long list of numbers representing its meaning, and those numbers go into a searchable index.
- You ask your question, and it gets converted into numbers the same way.
- The index is searched for the handful of chunks closest in meaning. Good systems look for exact word matches at the same time, which matters more than you would think.
- Those few chunks are pasted invisibly into the prompt, alongside your question.
- The model reads that bundle and writes the answer.
Read steps four and six together, because this is the part most people never hear: the model does not search your documents. A separate search step does, and the model only ever sees what that step handed it. Your two hundred page report was never read. Six paragraphs of it were.
Where you are already using RAG
You almost certainly used retrieval this week without hearing the word once.
- Every time you upload a PDF and ask questions about it.
- Google’s research assistant, called Gemini Notebook in Google’s own help pages and still found at notebooklm.google. Google describes it as giving grounded information based on your sources with clear in line citations, and says it is designed to answer from the sources you uploaded. Our walkthrough covers the practical side.
- The support chatbot on a company website that somehow knows that company’s refund policy.
- AI search answers with links underneath. Those links are the retrieval step, made visible.
Building websites and small online tools is where this stops being abstract. Anyone who has set up a help chatbot learns the same lesson quickly: the bot is only ever as current as the folder behind it. Leave a superseded price list sitting in there and it will be quoted back at a customer with total confidence. The AI is not wrong. The shelf it is reading from is.
Why RAG answers can still be wrong
Retrieval reduces invented answers, which is why companies use it, but it does not remove them. The process can fail in two places: the search fetches the wrong material, or the model misreads the right material. Most people only think about the second. Anthropic published test results in which a standard retrieval setup left 5.7 percent of the relevant material out of its top twenty chunks. Their improved method brought that share down to 2.9 percent, and adding a reranking step to 1.9 percent. Those are one company’s own tests rather than a law of nature, but the direction matters: even careful retrieval misses things, and when it does, the model answers from the wrong pages with no sign anything went astray.
Chunking causes its own trouble. Anthropic gives a neat example: a chunk reading “the company’s revenue grew by 3% over the previous quarter” is hard to use on its own, because it never says which company or which quarter. The details that would anchor it were somewhere else in the document and did not travel with the chunk. This is how a document chatbot hands you a number that is real but attached to the wrong thing, which is a different failure from a plain hallucination.
Your wording decides what gets found
This is the practical part, and it sits in a troubleshooting section almost nobody opens. Google’s help pages, explaining why its notebook tool sometimes cannot answer, say that when a notebook holds many sources the tool retrieves the most relevant information based on your question first, then builds a response from what it found. Their advice is to rephrase the question to be clearer or more specific.
Sit with that for a second. Your phrasing is doing double duty as the search query. Being specific helps, and so does using the words the document itself uses. Anthropic’s engineering write up explains why: matching on meaning alone can miss an exact term, which is why serious systems run a word matching search alongside the meaning based one. Ask “what did it say about costs” of a document that only ever says “expenditure”, and you may be handed weaker chunks than the document deserves.
Important tip: if a document AI says it cannot find something, do not assume the information is missing. Ask again, more specifically, using the words the document itself uses. That one habit fixes more bad answers than any clever prompt template.
What your file loses on the way in
A second quiet failure catches people out with reports and research papers. OpenAI’s file uploads FAQ notes that its Enterprise product supports visual retrieval for PDFs, and that on all other plans document files support text based retrieval only, so ChatGPT extracts the digital text and discards the images.
So if the figure you are asking about lives inside a chart, a diagram or a photographed table, it may not be in the pile the AI is searching at all. The same goes for a scanned document with no text layer. The AI is not refusing to tell you. It never received that part of your file. Quick check: open the PDF and try to select a sentence with your mouse. If the text highlights, there is something to retrieve. If nothing highlights, you have a picture of a page, and it needs an optical character recognition step first.
Four habits that get better answers from any document AI
- Use the document’s own vocabulary, not your paraphrase of it.
- Ask one thing at a time. A three part question pulls the search in three directions and satisfies none of them well.
- Ask where the answer came from, then click the citation. Skipping it throws away the main safety feature you were given.
- Move outdated files out of the folder rather than renaming them. Old documents do not look old to a retrieval system, and anything left in there is fair game.
Common Questions
Is RAG the same as the AI searching the internet?
Same process, different shelf. Web search retrieves from the open internet. RAG usually retrieves from a specific set of documents, such as your uploads or a company’s files. Both fetch first and write second.
Does RAG stop AI from making things up?
It helps a great deal, because the model has real material in front of it and can cite where each claim came from. It does not eliminate the problem. If the search fetches the wrong passages, the model writes a confident answer from them.
Is RAG the same as training or fine tuning a model?
No. Training changes the model itself and is expensive. RAG leaves the model untouched and hands it material at the moment you ask, which is why a company can add a new policy document to its chatbot in an afternoon instead of waiting for the next retraining cycle.
Final takeaway
RAG in AI is a search step wearing a very long name. Fetch first, write second. Once you picture that assistant running off to photocopy a few pages, you stop treating a document chatbot as an oracle that has read everything, and start treating it as a fast reader handed a small stack.
That shift changes how you use these tools. You word questions like search queries, keep your folders clean, and click the citation instead of trusting it. None of that requires technical skill, and it will get you better answers from the AI you already use.
by admin | Aug 6, 2026 | Research & Productivity
Exam week has a familiar shape. Twelve lectures to revise, four days left, and a folder of notes you have not opened since term started. So you paste a topic into a chatbot, read a clean summary, and feel like you have done something. Then you sit the paper and realise you recognised the material without being able to produce it.
Recognising an answer and being able to write one are two different skills. Exams only test the second. The good news is that if you use AI to study for exams properly, the newer study features from OpenAI and Google are built for exactly that gap.
What it really means to use AI to study for exams
There are two ways to use AI to study for exams. The first is as an answer machine: you ask, it explains, you read, you move on. It feels fast and teaches you very little.
The second is as a tutor that makes you do the work. It asks you questions, waits for your answer, corrects you, and only then moves forward. That version is slower and far more useful. Both OpenAI and Google now ship a mode built around this idea, and both describe it the same way: guide the student rather than hand over the solution.
From my own experience building websites and learning technical tools, the pattern holds outside exams too. Reading documentation feels productive. Trying to explain the thing to somebody else is when you find out what you actually understood.
Step 1: turn your syllabus into a plan before you ask for answers
Before you revise anything, give the AI your reality. Paste in the topic list or the module outline and tell it how many days you have, how many hours a day you can realistically give it, and which topics scare you most.
Ask for a day by day plan that spends more time on your weak topics and puts a short review of older topics at the start of each day. Then edit it. A plan you did not adjust is a plan you will abandon by Tuesday.
If time management is your bigger problem, our guide on how to use AI for time management and daily planning covers the wider workflow.
Step 2: switch on a study mode instead of using plain chat
OpenAI launched study mode in ChatGPT in July 2025. You turn it on by selecting Study and learn from the tools menu, then asking your question. Instead of answering outright, it uses guiding questions, hints, scaffolded explanations and short knowledge checks, and you can toggle it off mid conversation if you just want the answer. OpenAI is open about the trade off: it runs on custom instructions, so it can behave inconsistently or make mistakes.
Google has an equivalent called Guided Learning in the Gemini app. It asks you questions back, breaks a problem into steps, adapts to your level, and can build a study guide from course material you upload. Gemini also generates flashcards and quizzes, and Google says the mode runs on LearnLM, a version of its models tuned for learning.
The practical difference is real. Plain chat gives you a paragraph to read. Study mode gives you a question to answer, which is the thing your brain will need to do in the exam hall.
Step 3: make flashcards and quizzes from your own notes
Generic flashcards off the internet cover a generic syllabus. Yours does not. This is where NotebookLM earns its place: you upload your lecture notes, slides or readings, and it generates flashcards and quizzes grounded only in those sources. You can set the topic and the difficulty, share a set with classmates by link, and click explain on any card to get a fuller answer with citations pointing back to your original document.
That citation link matters more than it sounds. When a flashcard looks wrong, you can check it against your own slide in one click instead of guessing. We wrote a full walkthrough of how to use NotebookLM if you have not tried it yet.
NotebookLM also has audio formats now, including a short Brief summary and a Debate format where two AI hosts argue different sides of a topic. That one is useful for essay subjects where you need to hold two positions in your head.
Step 4: explain it back before you move on
After each topic, close the notes and explain it to the AI in your own words, out loud or typed. Then ask it to point out what you left out or got wrong.
This is the cheapest high value habit in the whole list. It takes three minutes, it needs no special tool, and it is brutally honest. If you cannot explain photosynthesis or a discounted cash flow without looking, you have not learned it yet, no matter how many summaries you read.
Step 5: practise under something like exam conditions
Give the AI a real past paper question or ask it to write one in your exam format, then answer it with a timer running and nothing open. Afterwards, paste your answer back and ask for marking against the actual marking criteria if your course publishes them.
Ask for the two specific things that would raise the grade rather than a general comment. Vague feedback is easy for a model to produce and useless to you.
A five day plan you can copy
- Day 1: Build the plan, upload your notes, generate flashcards for the two weakest topics.
- Day 2: Study mode on your weakest topic, then explain it back with the notes closed.
- Day 3: Second weakest topic, plus a ten minute flashcard review of day 2.
- Day 4: One timed past paper question, marked and reviewed. Fix the gaps it exposes.
- Day 5: Quiz yourself across everything, review only what you get wrong, then stop early and sleep.
Where AI still gets things wrong
AI models state wrong things confidently, and a flashcard is a very confident format. If a card contradicts your lecturer, your lecturer sets the exam. Trust the source, not the summary. Our post on why AI sometimes gives wrong answers explains why this happens.
Important tip: only generate study material from sources you have actually uploaded, and check anything you plan to memorise against your own notes at least once. A wrong fact you drilled twenty times is worse than a gap you knew about.
Two other cautions worth a minute of your time. Be careful what you upload, especially unpublished material or anything belonging to somebody else, and check your institution rules before you paste coursework anywhere. Working through years of websites and online tools has taught me that the upload button is the easiest place to make a quiet mistake. Our guide on using AI tools without cheating covers the academic integrity side properly.
Common Questions
Is using AI to study for exams cheating?
Using AI to quiz yourself, plan revision or explain a concept is studying, not cheating. Submitting AI written work as your own is a different thing entirely. When in doubt, read your institution academic integrity policy, because the rules vary between universities and even between modules.
Do I need to pay for these study features?
Not to get started. OpenAI made study mode available to logged in users on its free tier as well as paid ones, Guided Learning is in the Gemini app, and NotebookLM has a free tier. Paid plans mainly raise usage limits, so try the free versions before you spend anything.
Can AI predict what will be on my exam?
No, and be suspicious of anything that claims otherwise. It can spot themes across past papers you give it and generate practice questions in the same style, which is genuinely useful, but it has no knowledge of your unseen paper.
Final takeaway
The tools have quietly got better at the one thing that matters here. Study mode, Guided Learning and NotebookLM flashcards all push you to retrieve the answer rather than read it. That is the whole trick.
Pick one topic today, put the AI in study mode, and let it question you for fifteen minutes. If you finish that session slightly uncomfortable, it is working. For a wider view of how these tools fit into study and work, start with our guide on how AI can help with research and productivity.
Useful official sources: OpenAI on study mode, Google on Guided Learning in Gemini, and Google on NotebookLM flashcards and quizzes.
by admin | Aug 4, 2026 | AI Guides
You wrote every word of your essay yourself. Then a tool flags it as “likely AI-generated,” and suddenly you are defending work you actually did. If that fear has crossed your mind, you are not alone, and it is a fair question to ask: how reliable are AI detectors, really?
Short answer: less reliable than most people assume. In this simple guide we will look at what these tools do, where they fail, and what to do if one ever points a finger at your honest work.
What AI detectors actually do
An AI detector does not “know” who wrote something. It makes a guess based on patterns. AI writing often looks smooth and predictable, so detectors measure things like how “surprising” each word is. Human writing tends to be a little messier and more varied, and machine writing tends to be flatter.
The problem is that this is a statistical guess, not proof. A calm, well organized human writer can look “too smooth,” and a clever AI answer can look “human enough.” That gap is where the real trouble starts.
How accurate are AI detectors?
Independent tests put real-world accuracy of many AI detectors somewhere between roughly 60 and 90 percent, depending on the tool and the type of text. That range sounds fine until you remember what the errors mean for a real person: a wrong flag on a real student or worker.
Accuracy also drops fast in normal situations. Short pieces under about 200 words give the tool too little to work with. Lightly edited text, or text on an unusual topic, can slip past detectors or get wrongly flagged. So the same detector can look impressive in a lab and shaky in real classrooms.
The false positive problem nobody talks about
A “false positive” is when human writing gets labeled as AI. This is the scary one, and it is more common than the marketing suggests.
Stanford researchers tested seven popular detectors on essays written by non-native English speakers. On average, the tools wrongly flagged 61 percent of those human-written essays as AI, and on about one in five essays all seven detectors got it wrong at once. They almost never made that mistake with native English writers. You can read the summary on Stanford HAI.
This is not a small edge case. It means millions of students who learned English as a second language are more likely to be falsely accused.
Important tip: an AI detector result is an opinion, not evidence. Never accept a flag as final proof, and never let one be used against you without a real conversation and a look at your drafts and edit history.
Why universities started switching it off
Because of these errors, several universities stepped back from automatic AI detection. Vanderbilt University publicly disabled Turnitin’s AI detector and explained the math clearly: even a claimed 1 percent false-positive rate would wrongly flag roughly 750 of the 75,000 papers their students submit in a year. Their full explanation is on the Vanderbilt Brightspace blog.
That is 750 real students who could face a stressful accusation over an honest paper. When you see it that way, “1 percent” stops sounding safe.
Even OpenAI could not make it work
Here is the detail that surprises people most. OpenAI, the company behind ChatGPT, built its own AI text detector and then shut it down. As stated on its own classifier page, the tool was pulled on July 20, 2023 “due to its low rate of accuracy.” It had correctly caught only about 26 percent of AI text while wrongly flagging 9 percent of human text.
If the maker of the most famous AI model could not reliably detect its own output, that tells you a lot about the other tools making bold accuracy claims.
From my own work running websites and digital projects, I have learned to be careful with any tool that promises near-perfect results. The louder the accuracy claim, the more it deserves a second look.
What this means for you
If you are a student, treat detector scores as a starting point for a conversation, not a verdict. Keep your evidence. If you are a teacher or manager, use these tools as one weak signal at most, and never as an automatic judgment.
And if you do use AI to help with drafts, use it honestly and check its output, because AI makes plenty of its own mistakes. It is worth understanding why AI sometimes gives wrong answers and how to check the citations and sources AI hands you. If privacy is on your mind too, our guide on how to use AI safely walks through the basics.
How to protect your honest work
- Write in a tool that saves version history, like Google Docs, so you can show your edits over time.
- Keep your rough notes, outlines, and old drafts.
- If a detector flags you unfairly, calmly ask which specific tool was used and how accurate it really is.
- Understand the basics of how these tools work so you can explain your case clearly. Our simple AI glossary can help.
Common Questions
Are AI detectors accurate? Not consistently. Independent testing shows wide swings in accuracy and a real risk of false positives, especially on short or non-native English writing.
Can an AI detector be wrong about my essay? Yes. Human work is regularly flagged as AI, which is exactly why some universities stopped relying on these tools.
Is there any detector I can fully trust? No tool is reliable enough to stand alone as proof. Even OpenAI shut down its own detector for being too inaccurate.
How can I prove I wrote something myself? Keep your drafts and version history, and be ready to talk through your process. That evidence is far stronger than any detector score.
Final takeaway
AI detectors can be a rough hint, but they are not lie detectors and they are not proof. They get things wrong often enough that big institutions have quietly stepped away from them. So use them with caution, keep your own evidence, and remember that a machine guessing about your writing is never the final word. You are.
