StringMash.com

Cipher tools and decoders

Classic ciphers for puzzles, escape rooms and spoilers. Most can find the key for you.

Conversion

ROT13 is its own inverse. Run the output through again and the original comes back.

19 characters
Updates as you type

Show the steps
  1. Move every letter 13 places along the alphabet, going round from Z back to A.
  2. M + 13 = Z
  3. e + 13 = r
  4. e + 13 = r
  5. t + 13 = g, going past Z and round to the start
  6. m + 13 = z
  7. e + 13 = r
  8. a + 13 = n
  9. t + 13 = g, going past Z and round to the start
  10. The other 8 letters follow the same rule.
  11. Spaces, digits and punctuation stay as they are.

Every cipher

53 converters in 5 groups

Classic ciphers

20 converters
WHERE TO BEGIN

Start with the identifier

Know which cipher you're looking at? Go straight to its page. If you don't, paste the message into the cipher identifier. It tries every shift, the Atbash mirror and the common text encodings, then ranks the results by how much each reads like English.

Puzzle messages usually turn out to be one of three things: a shifted alphabet, which the Caesar cipher page handles at any shift from 1 to 25; a mirrored alphabet, which is Atbash; or not a cipher at all, but an encoding like Base64 or binary in disguise.

GOOD TO KNOW

Substitution or transposition?

Most classic ciphers substitute, swapping each letter for another, as in ROT13, Caesar and Atbash. Transposition ciphers keep every letter and scramble the order instead. A rail fence or columnar transposition message holds every letter of the original, rearranged.

That decides how a message breaks. Substitution leaves letter frequencies intact, so counting letters gives the game away. Counting won't help with a transposition, whose frequencies look like ordinary English even though the words don't read; it needs a different attack.

Coming next

Keyword cipher, Book cipher, Four-square

Questions

Which cipher is this message in?

Paste it into the cipher identifier. All letters with normal-looking word lengths suggests a shift or Atbash; digits and symbols suggest an encoding rather than a cipher.

Are these ciphers secure?

No. They're for puzzles and spoilers, and for escape rooms that need a lock anyone can pick. None of them would stop someone who knows the method. Most fall to letter counting, which al-Kindi described in the 9th century, and invisible text hides nothing from a tool that looks for it.

Why do some pages disable the swap button?

ROT13 and Atbash undo themselves, so there's nothing to swap. Each page says so where it happens.

Sources

Added . Last updated and reviewed . What's new