How to Identify a Cipher
People search for a cipher identifier or ask how to tell what cipher was used on puzzle ciphertext. No web page can infallibly label unknown modern malware crypto, but classical homework ciphers give clues. Use this checklist, then open classical ciphers and the Frequency Lab to test hypotheses.
What this page helps you solve
Narrow ciphertext to Caesar, Vigenère, monoalphabetic substitution, or transposition (Rail Fence).
Avoid wasting time on the wrong attack (e.g., frequency on Rail Fence letter counts).
Route to the correct cracker guide after identification.
When you do not know the key
Identification happens before key recovery. You only see letter distribution, repeats, spacing, and puzzle context (title hints “Vigenère”, etc.).
Collect ciphertext length, alphabet (A–Z only?), and whether spaces/punctuation remain.
Manual solving method
Caesar / shift: Single-letter frequencies still look like English, shifted. Try 26 decryptions—if one reads clearly, you are done (Caesar cracker).
Substitution: Letter counts match English shape without uniform shift; repeated words show repeated ciphertext words with different letters than plaintext would suggest.
Vigenère: Repeating trigrams at regular intervals; IC spikes at certain periods. Not fixed by one shift.
Rail Fence / transposition: Letter frequencies match normal English (no substitution), but order is scrambled; anagram feel.
Atbash: Fixed reverse alphabet; try mirror mapping via Atbash guide.
Step-by-step example
KHOOR alone → try Caesar first → HELLO at shift 3.
Long text where ciphertext letter J is ~12% and bigrams resemble TH when partially mapped → substitution.
Ciphertext HOLELWRDLO with normal E/T counts but unreadable order → Rail Fence (Rail Fence guide).
Common mistakes
Calling Base64 or hex “a cipher” without decoding the outer encoding first.
Assuming Enigma for short A–Z puzzles (use Enigma simulator only when settings are provided).
Ignoring puzzle title hints and known word lengths.
Related tools on DecodeCipher
Classical ciphers hub — definitions and links.
Frequency Analysis Lab — histogram shape for substitution vs shift.
Decrypt without a key — after identification.
- Looks like English counts
- Caesar or substitution
- Repeats every L letters
- Vigenère length L
- Normal counts, scrambled order
- Transposition
Frequently asked questions
Is there a cipher identifier tool here?
No automatic classifier—use the checklist and Frequency Lab, then family-specific guides.
How to tell Caesar vs substitution?
Try all 26 shifts; if none read well, move to frequency mapping (substitution).
How to identify encrypted text type?
Check alphabet, spacing, frequency shape, repeat spacing, and puzzle context.
What about Enigma?
Enigma needs machine settings; short A–Z puzzles are usually classical, not Enigma.
Classical ciphers reference · Frequency Analysis Lab · Decrypt without a key