Cipher Tool

Encode and decode text with Caesar, ROT13, ROT47, Atbash, Vigenere, Affine, and Rail fence ciphers, plus a Caesar brute force scanner.

Input

Related tools

What it does

Encodes and decodes text with seven classical ciphers: Caesar shift, ROT13, ROT47, Atbash, Vigenere, Affine, and Rail fence transposition. A brute force mode ignores the cipher and key settings and tries every one of the 26 possible Caesar shifts at once, scoring each candidate by how many common English words it contains, so you can crack an unknown Caesar-shifted message without knowing the key.

How to use it

Paste your text, pick a cipher, and choose Encode or Decode. Enter a shift number for Caesar and Rail fence, a keyword for Vigenere, or two numbers like "5,8" for Affine's a and b values. Flip on brute force to instead see all 26 Caesar shift candidates ranked by how English-like each one reads, with the best guess called out.

Why this one

Most cipher tools online cover Caesar and ROT13 and stop there, or give you encode without decode. This one covers seven ciphers in both directions plus a real brute force scanner that scores candidates against actual English word frequency, all client-side with no ads: your files and inputs never leave your device.

FAQ
How does the brute force Caesar scanner decide the best guess?
It decodes the ciphertext with all 26 possible shifts, counts how many common English words (like "the," "and," "of") appear in each result, and ranks candidates by that count, falling back to a chi-squared letter-frequency comparison to break ties. This is far more reliable on short messages than scoring by raw letter frequency alone.
What key format does the Affine cipher expect?
Two numbers separated by a comma, like "5,8," representing a and b in the formula E(x) = (a times x plus b) mod 26. The a value must be coprime with 26 (odd and not a multiple of 13), such as 1, 3, 5, 7, 9, 11, 15, 17, 19, 21, 23, or 25, or the cipher has no valid inverse for decoding.
Why do ROT13 and ROT47 not need a mode setting?
Both are self-inverse: applying the same 13-letter or 47-position rotation twice returns the original text, so encoding and decoding are the identical operation. The mode selector still shows for consistency with the other ciphers, but it has no effect on the result for these two.

Keyboard shortcuts: press ? anywhere on this page to see them.