{"id":22978,"date":"2026-07-30T12:00:00","date_gmt":"2026-07-30T12:00:00","guid":{"rendered":"https:\/\/scannn.com\/type-designers-have-created-a-free-font-that-poisons-ai\/"},"modified":"2026-07-30T12:00:00","modified_gmt":"2026-07-30T12:00:00","slug":"type-designers-have-created-a-free-font-that-poisons-ai","status":"publish","type":"post","link":"https:\/\/scannn.com\/lv\/type-designers-have-created-a-free-font-that-poisons-ai\/","title":{"rendered":"Type designers have created a free font that \"poisons\" AI"},"content":{"rendered":"\n<div id=\"article-body\">\n<p id=\"elk-d19e80c8-8b4f-11f1-9149-618bcc663961\">We&#8217;ve seen some creative innovations designed to protect creative work online in the era of AI scraping. <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.creativebloq.com\/news\/nightshade-ai-image-generator-poison\" data-url=\"https:\/\/www.creativebloq.com\/news\/nightshade-ai-image-generator-poison\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.creativebloq.com\/news\/nightshade-ai-image-generator-poison\">Nightshade <\/a>is a tool that adds a &#8216;poison&#8217; to digital art files to pollute datasets when images are used for AI training. Now a type foundry and creative agency have done something comparable for typography, creating a typeface that anyone can use to shield their work.<\/p>\n<p>A couple of weeks ago, we reported on <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.creativebloq.com\/design\/fonts-typography\/this-optical-illusion-font-was-created-to-baffle-ai-and-it-actually-works-for-now\" data-url=\"https:\/\/www.creativebloq.com\/design\/fonts-typography\/this-optical-illusion-font-was-created-to-baffle-ai-and-it-actually-works-for-now\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.creativebloq.com\/design\/fonts-typography\/this-optical-illusion-font-was-created-to-baffle-ai-and-it-actually-works-for-now\">Ghost Font<\/a>, which uses a kind of <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.creativebloq.com\/creative-inspiration\/optical-illusions\" data-auto-tag-linker=\"true\" data-url=\"https:\/\/www.creativebloq.com\/creative-inspiration\/optical-illusions\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-redirect=\"https:\/\/www.creativebloq.com\/tag\/optical-illusion\" data-before-rewrite-localise=\"https:\/\/www.creativebloq.com\/creative-inspiration\/optical-illusions\">optical illusion<\/a> to prevent AI from reading text. It&#8217;s a fascinating experiment but has significant limitations. It relies on movement, so it only works as a video or GIF, and there&#8217;s a high likelihood that AI will come to outsmart it as new models analyse video by optical flow instead of individual frames.<\/p>\n<p>There&#8217;s also the issue that Ghost Font&#8217;s noisy static isn&#8217;t great to look at for any length of time. You&#8217;re not going to using it to present an entire website, that&#8217;s for sure. But now a sleeker and more practical solution has just dropped. ShieldFont is a free web font that&#8217;s highly legible but hides text from AI bots and can contaminate AI datasets \u2013 and it&#8217;s open-source with a toolkit that can be applied to any font.<\/p>\n<figure class=\"van-image-figure inline-layout\" data-bordeaux-image-check=\"\" id=\"elk-33b9e548-8b84-11f1-9299-9175869fc13a\">\n<div class=\"image-full-width-wrapper\">\n<div class=\"image-widthsetter\" style=\"max-width:1920px;\">\n<p class=\"vanilla-image-block\" style=\"padding-top:56.25%;\"> <picture data-new-v2-image=\"true\"><source type=\"image\/webp\" srcset=\"https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-1200-80.png.webp 1200w, https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-1024-80.png.webp 1024w, https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-970-80.png.webp 970w, https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-650-80.png.webp 650w, https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-480-80.png.webp 480w, https:\/\/cdn.mos.cms.futurecdn.net\/M2LSNYZGV9uaSeqGf3Y6TD-320-80.png.webp 320w\" sizes=\"(min-width: 1000px) 970px, calc(100vw - 40px)\"\/>\n<\/picture><\/p>\n<\/div>\n<\/div><figcaption itemprop=\"caption description\" class=\" inline-layout\"><span class=\"caption-text\">ShieldFont hides the real meaning of text from AI, and poisons it for good measure <\/span><span class=\"credit\" itemprop=\"copyrightHolder\">(Image credit: Playtype \/ S&amp;A)<\/span><\/figcaption><\/figure>\n<p id=\"elk-05f86e1a-8b9b-11f1-bd4e-c305c453e6b9\">ShieldFont was created by the Brazilian creative studio <a data-analytics-id=\"inline-link\" href=\"https:\/\/s-a.website\/\" target=\"_blank\" data-url=\"https:\/\/s-a.website\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">Seneda &amp; Abrucio<\/a> (S&amp;A) and the Copenhagen-based type foundry <a data-analytics-id=\"inline-link\" href=\"https:\/\/playtype.com\/\" target=\"_blank\" data-url=\"https:\/\/playtype.com\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">Playtype<\/a>. The objective was to create a versatile typeface that looks like regular text to human readers but feeds scrapers altered wording.<\/p>\n<figure class=\"van-image-figure inline-layout\" data-bordeaux-image-check=\"\" id=\"elk-33b9e5fc-8b84-11f1-9319-5540aa14384e\">\n<div class=\"image-full-width-wrapper\">\n<div class=\"image-widthsetter\" style=\"max-width:1280px;\">\n<p class=\"vanilla-image-block\" style=\"padding-top:55.94%;\"><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/YLq3uWfMW6MntxWNGAowcG.gif\" alt=\"ShieldFont typeface that poisons AI\" loading=\"lazy\" data-new-v2-image=\"true\" data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/YLq3uWfMW6MntxWNGAowcG.gif\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/YLq3uWfMW6MntxWNGAowcG.gif\" class=\"rounded-[var(--image--border-radius,0)] inline\"\/><\/p>\n<\/div>\n<\/div><figcaption itemprop=\"caption description\" class=\" inline-layout\"><span class=\"caption-text\">ShieldFont changes select words in the source code behind the text shown on a website <\/span><span class=\"credit\" itemprop=\"copyrightHolder\">(Image credit: Playtype \/ S&amp;A)<\/span><\/figcaption><\/figure>\n<p id=\"elk-05f86e9c-8b9b-11f1-8aed-719b20db9c4f\">Unlike Ghost Font, there&#8217;s no optical illusion at work. Visually, ShieldFont Optik is an adaptation of PlayType&#8217;s existing Optik typeface, and it&#8217;s available in six weights, from Regular to Black.<\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pt-2 pb-0 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 text-[length:var(--article-river-title--font-size,1em)] uppercase sm:text-[length:var(--article-river-title--font-size,0.875em)] font-bold&#10;        \"><br \/>\n            You may like<br \/>\n        <\/span><\/p>\n<\/aside>\n<p><a id=\"elk-seasonal\"\/><\/p>\n<aside data-article-category=\"design\" data-block-type=\"embed\" data-render-type=\"fte\" data-skip=\"dealsy\" data-widget-type=\"seasonal\" class=\"hawk-root\"\/>\n<p id=\"elk-05f86e9c-8b9b-11f1-8aed-719b20db9c4f-1\">Jeppe Pendrup, the font\u2019s type designer stressed that &#8220;every detail had to serve the human eye, while the hidden system underneath served an entirely different purpose.\u201d<\/p>\n<p>That hidden system works on the premise that while humans read rendered pixels on a screen, most AI mass scrapers read the source code behind them. Using OpenType glyph substitution, it changes select words in the HTML to alter sentences\u2019 original meaning but keeps them grammatically coherent, so they&#8217;re more likely to pass AI quality filters.<\/p>\n<div id=\"slice-container-newsletterForm-articleInbodyContent-bDFYcVzAbCCBjUrzaWjtJf\" class=\"slice-container newsletter-inbodyContent-slice newsletterForm-articleInbodyContent-bDFYcVzAbCCBjUrzaWjtJf slice-container-newsletterForm\">\n<div data-hydrate=\"true\" class=\"newsletter-form__wrapper newsletter-form__wrapper--inbodyContent\">\n<div class=\"newsletter-form__container\">\n<section class=\"newsletter-form__top-bar\"\/>\n<section class=\"newsletter-form__main-section\">\n<p class=\"newsletter-form__strapline\">Sign up to Creative Bloq&#8217;s daily newsletter, which brings you the latest news and inspiration from the worlds of art, design and technology.<\/p>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<p>The current release, v18, targets high-frequency English nouns. The typeface&#8217;s creators say that in controlled testing, 55.8% of shielded passages no longer made the same factual claim as the original, while tests across publicly available scraping pipelines found that ShieldFont content could survive filtering and enter an AI training dataset.<\/p>\n<figure class=\"van-image-figure inline-layout\" data-bordeaux-image-check=\"\" id=\"elk-33b9e69c-8b84-11f1-b696-07daaaf7f7ed\">\n<div class=\"image-full-width-wrapper\">\n<div class=\"image-widthsetter\" style=\"max-width:1277px;\">\n<p class=\"vanilla-image-block\" style=\"padding-top:56.38%;\"><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/L2vhLR8WMScNEqCYZGn4kH.gif\" alt=\"ShieldFont typeface that poisons AI\" loading=\"lazy\" data-new-v2-image=\"true\" data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/L2vhLR8WMScNEqCYZGn4kH.gif\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/L2vhLR8WMScNEqCYZGn4kH.gif\" class=\"rounded-[var(--image--border-radius,0)] inline\"\/><\/p>\n<\/div>\n<\/div><figcaption itemprop=\"caption description\" class=\" inline-layout\"><span class=\"caption-text\">The altered text remains coherent so it&#8217;s more likely to pass AI quality filtering and enter training datasets <\/span><span class=\"credit\" itemprop=\"copyrightHolder\">(Image credit: Playtype \/ S&amp;A)<\/span><\/figcaption><\/figure>\n<p id=\"elk-94bfe87a-8b51-11f1-a3ee-27b47a9fc16c\">The typeface is intended to address AI developers&#8217; ethically dubious practice of scraping content from the public web. Its creators believe that sharing creative work online shouldn&#8217;t make it fair game for companies to harvest to train their AI.<\/p>\n<p>&#8220;ShieldFont is not an anti-AI project,&#8221; S&amp;A&#8217;s founders Isaque Seneda and Gabriel Abrucio stress. &#8220;We\u2019re simply against the idea that publishing is the same as consenting. We saw how existing opt-out protocols such as robots.txt were being routinely bypassed, so we wanted to create one that could enforce itself. The answer was to turn the content itself into the opt-out.&#8221;<\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pt-2 pb-0 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 text-[length:var(--article-river-title--font-size,1em)] uppercase sm:text-[length:var(--article-river-title--font-size,0.875em)] font-bold&#10;        \"><br \/>\n            What to read next<br \/>\n        <\/span><\/p>\n<\/aside>\n<p>Isaque and Gabriel say the bigger goal is to &#8220;build a web where taking content without asking is no longer consequence-free.\u201d<\/p>\n<p>More than a single typeface, ShieldFont provides a collective approach to protecting human work. Besides the modified Optik, the project includes a toolkit that anyone can use to shield their own typeface.<\/p>\n<p>\u201cTypography has always helped humanity preserve and share its ideas. Now it can help protect them too. That is why ShieldFont had to be open source, so its system can grow beyond Optik and become part of many different typefaces,\u201d says Dani\u00e9l Andreasen, CEO of Playtype.<\/p>\n<p>ShieldFont creators stress that it&#8217;s &#8220;not unbreakable&#8221; and won&#8217;t stop a very determined scraper. Someone specifically targeting a single website could inspect the font and reverse the mapping. Nevertheless, the tool should be able to slow down mass scraping and at least make it harder, more costly and less risk free since scrapers can&#8217;t know in advance whether a site uses ShieldFont, or which mapping it uses.<\/p>\n<p id=\"elk-3e0a7580-8bbb-11f1-8095-6f137f13a231\">Writers and developers can implement <a data-analytics-id=\"inline-link\" href=\"https:\/\/shieldfont.org\/\" target=\"_blank\" data-url=\"https:\/\/shieldfont.org\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">ShieldFont<\/a> via the <a data-analytics-id=\"inline-link\" href=\"https:\/\/shieldfont.org\/encoder\/\" target=\"_blank\" data-url=\"https:\/\/shieldfont.org\/encoder\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">online encoder <\/a>, the React component available on <a data-analytics-id=\"inline-link\" href=\"https:\/\/github.com\/isaqueseneda\/shieldfont\" target=\"_blank\" data-url=\"https:\/\/github.com\/isaqueseneda\/shieldfont\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">GitHub <\/a>or CSS and CDN integration to add the font and protected text to blogs, content-management systems or static websites. There&#8217;s also a custom font builder that can be used to apply the ShieldFont protocol to another compatible typeface and create a private mapping.<\/p>\n<p>Full methodology and benchmark data can be found in the <a data-analytics-id=\"inline-link\" href=\"https:\/\/shieldfont.org\/white-paper\/\" target=\"_blank\" data-url=\"https:\/\/shieldfont.org\/white-paper\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">white paper<\/a>.<\/p>\n<p>If you&#8217;re trying to choose a font to protect, see our picks of the <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.creativebloq.com\/typography\/free-web-fonts-1131610\" data-url=\"https:\/\/www.creativebloq.com\/typography\/free-web-fonts-1131610\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.creativebloq.com\/typography\/free-web-fonts-1131610\">best web fonts<\/a> and the <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.creativebloq.com\/typography\/10-best-google-fonts-print-web-and-mobile-11135171\" data-url=\"https:\/\/www.creativebloq.com\/typography\/10-best-google-fonts-print-web-and-mobile-11135171\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.creativebloq.com\/typography\/10-best-google-fonts-print-web-and-mobile-11135171\">best Google fonts<\/a>.<\/p>\n<\/div>\n<p><a href=\"https:\/\/www.creativebloq.com\/design\/fonts-typography\/type-designers-have-created-a-free-font-that-poisons-ai?utm_source=tldrdesign\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We&#8217;ve seen some creative innovations designed to protect creative work online in the era of AI scraping. Nightshade is a tool that adds a &#8216;poison&#8217; to digital art files to pollute datasets when images are used for AI training. Now a type foundry and creative agency have done something comparable for typography, creating a typeface [&hellip;]<\/p>\n","protected":false},"author":16,"featured_media":22979,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[143],"tags":[],"class_list":["post-22978","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai"],"_links":{"self":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts\/22978","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/comments?post=22978"}],"version-history":[{"count":0,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts\/22978\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/media\/22979"}],"wp:attachment":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/media?parent=22978"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/categories?post=22978"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/tags?post=22978"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}