Caesar Cipher Decoder & Encoder

How to use the Caesar cipher decoder

Paste your message, pick a shift, and the result appears as you type. If you are decoding something and do not know the shift, skip straight to Auto Decode — it lays out all 26 possibilities and highlights the ones that look like English.

• Encode — shift plain text forward into ciphertext. This is the encoder half.
• Decode (shift) — you know the key, so it shifts back by the same amount.
• Auto Decode (all shifts) — you do not know the key. Every shift from 0 to 25, side by side.

The Caesar cipher explained

Every letter moves the same distance along the alphabet, and that distance is the key. At a shift of 3, A becomes D, B becomes E, and Z wraps round to C. To decipher it you move the same distance back. That is the whole scheme, which is why it also goes by Caesarian shift, shift cipher, or simply Caesar’s code.

Encryption and decryption are the same operation pointed in opposite directions, so one tool does both. Two worked example problems:

• Encrypt HELLO at shift 3. H→K, E→H, L→O, L→O, O→R, giving KHOOR.
• Decipher KHOOR ZRUOG at shift 3. Move back three places and it reads HELLO WORLD. The Sample button loads exactly this.

People ask about types of Caesar cipher, but there is only one — the shift is the only thing that varies — though it sits inside the wider family of monoalphabetic substitution ciphers, where each letter maps to one other letter but not necessarily by a fixed distance.

The cipher wheel

The wheel above is the same thing a paper decoder ring does. Two alphabets, one inside the other: line the outer ring up against the inner ring and every letter has a partner. Turn the inner disc three places and A sits against D, which is a shift of 3.

Drag it, or use the arrow keys, and the shift box follows. Change the shift box and the wheel follows. They are two views of one number, so they cannot disagree. Print this wheel gives you a printable disc on its own, ready to cut out — useful for a classroom, a puzzle hunt, or anyone who would rather hold the thing than look at it.

Decoding without the key

A Caesar cipher has only 25 useful keys, which is its whole weakness. To reverse one you do not need to be clever — you can simply try every key, and that is what Auto Decode does. This is called a brute-force attack, and against this cipher it takes a fraction of a second.

The rows that look like real English are highlighted. That check is rough on purpose: it counts vowels and looks for spaces, so it will occasionally flag the wrong line, and on a very short message it may flag nothing at all. Read the list yourself rather than trusting the highlight.

Common shifts, and what they do

A shift of 3 is the classic, because that is the one Suetonius records Julius Caesar using. Here is what the same word becomes at the shifts people ask about most:

Shift 26 brings you back to where you started, so 26 and 0 are the same thing, and a shift of −3 is the same as a shift of 23. The tool accepts negative numbers and wraps them for you.

ROT13, and why 13 is different

ROT13 is a Caesar cipher with a shift of 13, and 13 is half of 26. That one fact makes it its own opposite: apply ROT13 twice and you are back to the original text, so the same button both hides and reveals. It was never meant as security — it is the old Usenet convention for covering a spoiler or a punchline, so that reading it has to be a deliberate act.

What happens to numbers and punctuation

Nothing. Only A–Z and a–z move; numbers, spaces, accented letters and punctuation come through untouched, and upper and lower case are each kept as they were. That is the standard behaviour, and it is why Attack at 6! at a shift of 3 becomes Dwwdfn dw 6! rather than turning the 6 into something else.

If you need the digits shifted too you are past the Caesar cipher and into a different scheme — there is no agreed way to rotate a ten-digit set alongside a twenty-six letter one, so tools that try it all disagree with each other.

Where it came from

Two facts survive from antiquity, and the history of the Caesar cipher rests on both. Suetonius, writing more than 150 years later, says Julius Caesar sent messages with each letter replaced by the one three places further on. His great-nephew and adopted heir Augustus is said to have used a shift of one, and not to have wrapped round at the end: where the Latin alphabet ran out at X, he wrote a doubled A instead.

It held up for a while because most people who intercepted a message could not read at all. It stopped being secure in the ninth century, when the Arab mathematician al-Kindi described frequency analysis. The idea carries to any language: in English, E is the most common letter by a wide margin, so the letter that turns up most often in the ciphertext is usually a disguised E — and the shift falls out of that in one step.

What this cipher is not

It is not security. Twenty-five keys is nothing — the Auto Decode tab breaks any Caesar cipher instantly, and it is doing the simplest thing imaginable. Use it for puzzles, escape rooms, homework, geocaching clues, spoiler tags and the end-credit codes in shows like Gravity Falls. Do not use it for anything you actually need hidden.

It is also a substitution cipher, which means the letters keep their positions and only change identity. The Caesar box, sometimes searched for alongside it, is the opposite idea: the letters stay themselves and change position instead. And the Vigenère cipher is a Caesar cipher where the shift changes with every letter, which is why trying 26 possibilities does not break it.