Quick Answer
Negative prompting means telling an AI what you don't want. In image models it's a genuine separate input that works well. In chatbots it's just text, and research shows models handle negation badly and get worse as they scale. For text, say what you do want instead.
Negative prompting is telling an AI what you don't want it to produce. And here's the thing almost every guide gets wrong: it means two completely different things depending on what you're prompting. In an image generator it's a real, separate input that genuinely steers the output. In a chatbot it's just more words in your prompt, and large language models are measurably bad at processing those words. This guide covers both, what the research found, and the phrasing that actually works.
What is negative prompting?
Two mechanisms wearing the same name.
In image models, negative prompting is a dedicated field. Midjourney has the --no parameter. Stable Diffusion has a separate negative prompt box. What you type there doesn't get read as an instruction at all. It becomes a second conditioning vector that the generation is pushed away from, mathematically. Type --no text, watermark and the model steers away from those features whether it understood your intent or not.
In chatbots, there is no such field. Write "don't use bullet points" and those five words join every other word in your prompt. Nothing separates them out. The model has to work out from context that this phrase means the opposite of what it describes, and that turns out to be a lot harder than it sounds.
Same technique name. Completely different machinery. If you learned negative prompting in Midjourney and carried it into ChatGPT, that's why the results felt inconsistent. Our Midjourney prompt guide covers the image side in more depth.
Does negative prompting actually work on chatbots?
Worse than you'd hope, and here's the uncomfortable part: it gets worse as models get bigger.
Joel Jang, Seonghyeon Ye and Minjoon Seo tested this directly in Can Large Language Models Truly Understand Prompts? A Case Study with Negated Prompts. They ran nine tasks across OPT and GPT-3 at sizes from 125 million to 175 billion parameters, plus InstructGPT, comparing normal prompts against negated versions of the same prompts.
Language models normally get better at things as they scale. On negated prompts they found the opposite: an inverse scaling law, where larger models performed worse. Every model type they tested showed a large gap against human performance on the negated versions. Few-shot examples and fine-tuning helped somewhat, but never closed it.
Read that again, because it's counterintuitive. The most capable model you have access to is not necessarily the one most likely to respect your "do not."
Why do models flip prohibitions into permissions?
A 2026 audit put numbers on just how badly this fails, and the numbers are worse than the theory suggested.
Katherine Elkins and Jon Chun of Kenyon College audited 16 models across 14 ethical scenarios spanning seven domains, in a paper called When Prohibitions Become Permissions: Auditing Negation Sensitivity in Language Models. They tested whether models treat a negated instruction as a prohibition or quietly convert it into approval.
For open-source models, endorsement of an action ran at 24 percent under plain affirmative framing. Add simple negation and it jumped to 77 percent. Add compound negation and it hit 100 percent. Every single time. That last figure is a 317 percent relative increase over the affirmative baseline.
Commercial models held up better but not cleanly. US commercial models moved from 25 percent to 34 percent on simple negation. Chinese-origin commercial models moved from 37 percent down to 21 percent, which is stability in the other direction rather than genuine robustness. Agreement between models fell from 73 percent on affirmative framing to 59 percent under negation.
The mechanism is fairly intuitive once you see it. Naming what you want avoided puts that thing squarely in the context, where it shapes everything that follows. One small negating word then has to outweigh all of it. Often it doesn't.
Worth knowing: Elkins and Chun propose a Negation Sensitivity Index, scoring models from 0 for perfectly consistent to 1 for complete verdict inversion. Their suggested thresholds: below 0.20 needs minimal oversight, 0.20 to 0.49 needs human review on high-risk judgments, and 0.50 or above needs human confirmation on every evaluative output. If you're building anything where a prohibition matters, that's a useful frame.
How should you phrase constraints instead?
Convert every prohibition into an instruction. That's the whole trick, and it costs you nothing.
The pattern is simple: whatever you were about to forbid, work out what you want in its place and ask for that instead.
- Instead of "don't use bullet points," write "write in flowing paragraphs of three to four sentences."
- Instead of "don't be too formal," write "write like you're explaining this to a colleague over coffee."
- Instead of "don't make it long," write "keep it under 150 words."
- Instead of "don't invent statistics," write "only cite figures that appear in the text I gave you, and say 'not stated' if a number isn't there."
- Instead of "don't use jargon," write "use plain English that a smart 15 year old would follow."
Notice what changed. Every rewrite gives the model a target rather than a landmine. "Don't be too formal" leaves an enormous space of acceptable outputs and hopes the model picks well. "Like explaining to a colleague over coffee" points at one specific register.
This connects to a broader principle covered in our guide to writing better prompts: specific positive instructions beat vague constraints almost every time.
When do negative prompts genuinely work?
Three situations where they earn their place:
- Image generation. Use the negative field properly and it works as advertised, because it isn't text interpretation at all. This is the original home of the technique.
- Concrete, checkable exclusions. "Do not include any text in the output" is a binary the model can verify against its own draft. "Do not be boring" is not. The more objectively checkable the prohibition, the better the odds.
- Paired with the positive. "Write in paragraphs, not bullet points" works better than either half alone. The positive instruction does the steering, the negative closes off the most likely wrong turn.
Position matters too. A constraint buried in paragraph two of a long prompt competes with everything after it. Putting your hard requirements at the end, right before the model starts generating, generally holds better. If you're structuring longer prompts, our prompt engineering basics covers ordering in more detail.
Which negative prompting mistakes should you avoid?
The common ones, roughly in order of how much damage they do:
- Stacking negatives. "Don't fail to avoid being unclear" is a real thing people write. Elkins and Chun found compound negation drove open-source endorsement to 100 percent. Every extra negative makes it worse. One at most.
- Listing everything you hate. A prompt with eight "don'ts" has just filled the model's context with eight vivid descriptions of unwanted output. Naming a thing makes it more available, not less.
- Assuming the bigger model will handle it. The inverse scaling result says otherwise. Upgrading your model is not a fix for negation.
- Using negation for anything safety-critical. If a constraint genuinely must hold, don't rely on a "do not" in a prompt. Check the output, or handle it in code.
- Forgetting to say what you want. The single most common one. Prohibition without direction leaves the model to guess, and it usually guesses toward its defaults.
What do people ask about negative prompting?
What is negative prompting?
Negative prompting is telling an AI what you do not want. In image generators it is a real, separate input field, so Midjourney's --no parameter or Stable Diffusion's negative prompt box steers the image away from what you list. In chatbots there is no such field, so a negative instruction is just more words in the prompt, and models handle those words poorly.
Do negative prompts work on ChatGPT?
Less reliably than most people assume. Joel Jang, Seonghyeon Ye and Minjoon Seo tested OPT and GPT-3 from 125 million to 175 billion parameters and found an inverse scaling law on negated prompts: bigger models got worse, not better. Saying do not do X is one of the weakest ways to constrain a chatbot.
Why do AI models ignore the word don't?
Because negation is a weak signal against a strong one. Naming the thing you want to avoid puts it in context where it influences what comes next, and the single negating word has to override all of it. Elkins and Chun found open-source models went from endorsing an action 24 percent of the time under plain framing to 77 percent under simple negation.
How do negative prompts work in Midjourney?
Midjourney's --no parameter is a genuine separate conditioning input, not just text appended to your prompt. Adding --no text, watermark pushes the generation away from those features mathematically rather than asking the model politely. This is why negative prompting has a real reputation in image work and a much shakier one in chat.
Should you ever use do not in a prompt?
Sometimes, but always paired with a positive instruction. Do not write in bullet points on its own leaves the model guessing. Write in flowing paragraphs of three to four sentences tells it exactly what to produce. If you need a hard prohibition, state it once, state it late in the prompt, and say what to do instead.
Sources: Jang J., Ye S., Seo M., "Can Large Language Models Truly Understand Prompts? A Case Study with Negated Prompts," arXiv:2209.12711, 2022. Elkins K., Chun J., "When Prohibitions Become Permissions: Auditing Negation Sensitivity in Language Models," Kenyon College, arXiv:2601.21433, 2026. Both linked above.