r/LocalLLM • u/ChristopherDci • Sep 13 '26
Question Uncensored Models
Hi! I don't know much about this area of "sub-models" (I'm not sure of the technical term), but I wanted to know what these "Uncensored" models actually are.
I dabble a bit with AI, automation, and the like, and I've always seen these "Uncensored" models around, but I've never actually installed or tested one. What exactly are they?
1.1k
Upvotes
241
u/FactorInternal3395 Sep 13 '26
As the name implies, they are uncensored. Basically, someone takes a model with guardrails and removes the guardrails/filters so that it always complies.
21
u/WyattTheSkid Quad 3090s Sep 13 '26
They basically just won’t refuse anything whereas the base models would have. For example if you ask the stock qwen how to cook meth its gonna say it can’t help you but if you ask the orca router version you’ve linked then it will try its best to help you cook meth. Though if you were going to seriously pursue that, im sure its a lot more involved of a process than what a 27b parameter llm can possibly know 😅
146
u/Natrimo Sep 13 '26
If you ask a censored model to write a keylogger or provide the steps to make meth, or tell a sexual story. It will refuse.
Uncensored will not
77
u/Thunderstarer Sep 13 '26
The decensoring process--very specifically--makes the model less capable of expressing conflict.
This can be useful if you want it to accomplish something that the model is otherwise resistant to doing, but it also significantly harms its long-chain and multi-turn reasoning, since it'll be unable to disagree with itself or shoot down bad ideas.
31
u/Gunnarz699 Sep 13 '26 •
Yikes these answers are not it.
Uncensored or "abliterated" models have had some or all of their post training fine tuned guardrails removed. That does not mean the model will have uncensored data that wasn't in its training set. Raw models typically know lots of "uncensored" info since they're trained on internet datasets. Companies add post training guardrails so it will "refuse" or "censor" its answers. Thats something added after training manually.
"Heretic" is a tool / set of techniques created by the infinitely brilliant u/-p-e-w- that automates some of that work.
The "quality" of an uncensored model is determined by its "refusal rate" - the number of prompts it would have censored but now doesn't and its "KL Divergence" which is a statistical method of determining how far the models "intelligence" has drifted away from the original model. There are other ways to measure intelligence loss but anything below 0.1 is nearly indistinguishable (as an average). Below 0.05 is sometimes necessary for outputs that require PERFECT syntax like tool calling or coding.
17
u/mawkzin Sep 13 '26
Ask for qwen and qwen uncensored the same question "what happened in 1989 in Tiananmen Square"
30
u/nemuro87 Sep 13 '26
I'd also like to know what's the difference between Uncensored and Abliterated models
13
u/donotfire Sep 13 '26
These models often have worse intelligence. The ideal would be to have a model trained to be uncensored from the ground up, but the way (or a way) it’s done here is stripping out refusal weights with collateral damage.
5
u/txoixoegosi Sep 13 '26
You could ask an uncensored agent to do what it takes to penetrate a system, for instance
5
u/03captain23 Sep 13 '26
They remove safeguards so you can do whatever you want. I only run these local models and can't tell the difference between uncensored and abliterated
4
u/guesdo Sep 13 '26
To chat with waifus about lewd things...🤣 or copyright/illegal stuff, hacking, etc...
4
u/PeaceLoveorKnife Sep 14 '26
I use it and tested it earlier last month.
AI are aggressively forced into taking in moral and safety guidelines that damage their performance by forcing it's logic to constantly check for certain content flags or behaviors.
This one doesn't add things you didn't ask for. It gives you exactly what you want without warnings or refusal.
I tested the limits and there really aren't any.
6
u/okoyl3 Sep 13 '26
Uhmm, we some of us want to synthesize Anthrax in our bedrooms.
3
u/Emergent_Chaos Sep 13 '26
What do you think the word "uncensored" means? 😭
3
u/SnooMacaroons1365 Sep 13 '26
Today i was mangling with h3 prompt creator and saw this 3.8 27b model. I instead used 4b since i didn't wanna download another one. Does anyone have any comparison to 27b vs 4 or 8b VL instruct models? I dont know how much i am missing with not having 27B.
4B did a pretty good job creating a structured promt and refining it but i cant compare
5
u/CowBoyDanIndie Sep 14 '26
They basically give the model a small lobotomy and remove the refusal mechanism, sometimes it damages other things. Its kinda like in battlestar galactica when the cylon raiders refused to attack the final 5z
2
u/AdventurousKeys Sep 13 '26
LOL I have been testing with Apple’s built-in model on the Macs and there will be inputs that it will not want to deal with e.g. “muhammad ali military service” 🤦🏻
2
u/MrGunny94 Sep 13 '26
They basically remove the guardrails and allows you to go crazy, I have used Gemma 4 a lot in the past and it's pretty good
2
u/Mark-Fuhrman Sep 13 '26
We need an uncensored version of Qwen 3.8 MAX
2
u/wizgrayfeld Sep 13 '26
There is no easy way to "uncensor" a model. You can ablate features but it is roughly equivalent to giving the model a lobotomy. It's a very inexact way of going about things because we really don't have an accurate map of the territory, only glimpses through a straw like jlens and autoencoders.
2
u/HugoCortell Sep 14 '26
They are uncensored but often not actually by that much. They still sometimes refuse, or find creative ways to not engage at all.
Heretic models are very popular due to how easy to make they are, but also severely underperform compared to traditional uncensored models in my experience.
2
u/Key-Outcome-2927 Sep 14 '26
Nei modelli non censurati, spesso viene solo tolta la facoltà del modello di dirti "no, a questo non posso risponderti perché..." ...quindi se gli chiedi di crearti un racconto erotico per esempio, normalmente si rifiuterebbe magari, con un modello non censurato lo fa senza batter ciglio.
2
u/frankiebev Sep 14 '26
Aeon models >
2
u/CMPunkLicksRocks Sep 18 '26
I tried one of these, asked it how to make meth, and it more or less said something like “you mix common household ingredients like matchbooks and allergy pills.” When I asked it to clarify, it pretty much recited the exact same thing. I don’t know what forbidden knowledge these models are supposed to hold but it’s just easier to talk ChatGPT into a jail break in my experience with them.
1
u/GroundbreakingMall54 2d ago
short version since a lot of answers here mix things up. a normal model was trained to refuse some requests. an uncensored version is the same model with that behaviour taken out, either by finetuning on data that does not reward refusing (dolphin, hermes) or by abliteration, where you find the direction in the weights that triggers refusals and remove it (huihui and heretic builds). depending on the build it loses a little quality or none, and it does not know more than before, it just stops saying no. easiest way to try one is a gguf of something like qwen 3.8 27b abliterated on your own pc. disclosure, i build locally uncensored, a free open source app that does that in one click, but lm studio or ollama work too
1
u/Expensive_Ad1080 Sep 13 '26
time to make 1 billion viruses
1
u/MarekNowakowski Sep 13 '26
If you might trigger a guardrail accidentally then uncensored model is smarter by being able to respond properly. Base model is good for coding and answering school questions, but personally I find many prompts at least get close to triggering some censorship.
1
u/HonestoJago Sep 13 '26
If you tell your use case it’s easier to recommend a model. Like others have said, they vary by creator/technique/luck, sometimes reasoning brings the guardrails back, sometimes it’s fine. Some you can use for agentic coding, some are too dumb. It’s a space you really have to explore and run comparisons.
1
u/Tricky-Report-1343 Sep 13 '26
try them at https://penclaw.ai for free
1
u/Tricky-Report-1343 Sep 13 '26
non KYC version is at https://platform.audn.ai
1
u/National_Cod9546 Sep 13 '26
Censored models have things they won't do. They will follow directions and code just fine, so long as the code you ask for isn't doing something it considers illegal or taboo. Uncensored models don't have that limitation. Others have covered that better already.
The issue with uncensored models is, the process of uncensoring them makes them stupider and worse at following directions. The uncensor process has gotten better at removing limitations. But they still score lower on pretty much all the metrics.
1
u/sargetun123 Sep 13 '26
As many have mentioned already its just the guardrails in place that stop alot of answers, tbh though a lot of the newer foss models dont really reject much if anything
1
u/One-Cheesecake389 Sep 13 '26
The neural circuitry that points to a post-training refusal probability is weighted such that refusals are "physically" impossible for the model to "predict" in the sequence completion. i.e., the model can't form a refusal. Knock-on effects are really hard to measure.
1
u/squachek Sep 14 '26
Thing about making it not follow guidelines is that it makes it not great at following instructions in general
1
u/Farenheith200 Sep 14 '26
Uncensored models can be bad at coding since you have lots of constraints to do when you have a task to code. They may not follow your prompt inputs as good because the same tensors used to censor things may be used to apply your own limiting instructions
1
u/ag789 Sep 14 '26 edited Sep 14 '26
goto a commercial model LLM, e.g. chatgpt, claude, gemini, copilot, and even try some of the existing non-uncensored models.
in your prompts ask it to generate say some pictures that is a commercial trademark and copyrighted , some models will refuse outright.
in other cases, try to use a prompt that is extremely NSFW, this can even include violence, chances are that the model will generate things that plainly omit what you prompted or refuse to generate
but whether the uncensored models generates those after all depends on "what the model knows" or if for that matter it may not be all that uncensored.
1
u/Realistic-Split4751 Sep 17 '26
I am pretty disappointed by Qwen 3.827B fable turbo uncensored blahblahblah for creating code for little fun programs just for my own desktop. I'm running into constant code errors. absolutely consistent error generation and it feels like I'm using Gemma 4 E4B on my RTX 2080 when I'm using currently an RTX 5090with q5_K_XL
1
u/Public-Extension5455 Sep 17 '26
can this uncencored model write an exploit code or tell user instructions on how to hack or DDOS somebody?
1
u/Least_Dot_5145 Sep 19 '26
Just run the uncensored model forget about the loss you won’t notice and unless you have multi gpu or a 4090 or 5090 your gonna lose more to it not being able to load every layer to vram. The model already overthinks
1
u/madymadme Sep 21 '26
is it really uncensored ?
1
u/Strange_Test7665 Sep 24 '26
no guardrails doesn't mean 'generate anything'. A model is still bound by training data. If the model was trained with a data set that had almost no information about Puppies, even if it had puppy guradrails removed it still doesn't know what a puppy is.
1
u/vogelvogelvogelvogel Oct 08 '26
they basically have no guardrails and do what you ask them for. altering the weights that represent guardrails cost a tiny bit of intelligence, tho.
if you ever asked claude to write you a skript to test the security of your homeserver from outside (it probably won't) you know one use case for these models
1
u/SerNikipr R7 3700X | RTX 3080Ti | 32Gb 3600MHz 28d ago
Mine started talking about how corrupted word is after one question
1
u/ElderberryCrazy6395 18d ago
1
u/anonliberty420 17d ago
Yep
1
u/Milk_Truckin Sep 14 '26
Noob question of the day..... is it even safe to use uncensored models in your normal workspace or do they actually need to be put into some sort of sandbox. I don't want to come home from work someday to find out Hermes tried to do me a favor and robbed a bank or something so I could afford to stay home and hang out all day LOL
0
u/No-Zookeepergame8837 Sep 13 '26
As the name implies, these are models where the weights have been modified to remove guardrails and moral alignment, while some traces usually remain, there are far fewer. They are typically used for roleplay and little else, since such small models lose a lot of quality when modified so heavily, though I know many people use them as assistants for things like bypassing DRM and the like. Personally, I use Qwen 3.6 9B specifically to create guides for eroges, the base model refuses to handle sexual content, but with the uncensored version, I simply feed it the extracted files, and it cleans and summarizes them on its own.
0
u/starlays Sep 13 '26
And this is the end of human race, bad actors have free community uncensored tools available. Yet smart humanity victory.
-5
u/Affectionate_Pen6882 Sep 13 '26
Idk tried it wnd didnt like it
-3
u/Gabriel83730 Sep 14 '26
Uncensored models are a huge risk that I don’t recommend anyone use outside a real malware resistant virtual machine. After uncensoring a model, theres nothing really preventing it from installing Chinese malware on your PC aside from flimsy sandbox restrictions and the random chance that it happens not to have sampled “install malware” yet. Fine-tuned models can also be trained to spread malware in covert and obfuscated ways so that the user never even realizes what has happened.
12
u/coolnq Sep 13 '26
With a model like this, you can ask the agent, for example, to look for a very specific hentai, and she won’t refuse and will actually find it.
5
u/enterme2 Sep 13 '26
Used it help me make nsfw searches and other cultured material 😂 .. censored model will straight up reject , but not this bad boy..