Identify
Cipher Identifier
Paste a message you cannot read and CipherPad tells you what it probably is, and why. Every other tool here needs you to know the scheme first. This one does not.
Most likely: Morse code
- Morse codeVery likely
Every character is a dot, a dash, a space or a slash, and nothing else. That character set is unique to Morse: no other code on this site uses only two symbols plus separators.
Open in the Morse code translator
How the identifier works
Identification happens in two passes, because two very different kinds of evidence are available and one is far more reliable than the other.
The first pass reads the character set and the structure. This is the strong evidence. If the text contains only dots, dashes, spaces and slashes, it is Morse code, because nothing else uses that alphabet. If every character sits in the Unicode range U+2800 to U+28FF it is braille. If the digits are all between 1 and 5 and there is an even number of them, they pair up as coordinates on a 5x5 grid, which means a Polybius square or tap code. These tests do not care how long the text is, and they are close to conclusive when they fire.
The second pass only runs for text written in ordinary letters, where the character set gives nothing away, and it uses letter statistics. Two numbers do most of the work:
- Index of coincidence. The probability that two letters drawn at random from the text are the same. English text sits near 0.067. A cipher that renames each letter consistently, such as Caesar or Atbash, leaves this untouched, so a value near 0.067 means a simple substitution. A cipher that enciphers the same letter differently in different positions, such as Vigenere, flattens it towards 0.038.
- Chi-squared against English. How far the letter distribution sits from normal English. The identifier tries all 25 Caesar shifts and compares each result. If one shift scores several times better than leaving the text alone, that shift is almost certainly the key, and the identifier reports how much better it scored rather than simply asserting an answer.
When the index of coincidence is low, the identifier looks for the key length by splitting the text into columns and measuring the index of coincidence within each. At the correct key length every column is a plain Caesar shift, so the value jumps back up towards English. It corroborates that with a Kasiski examination, which looks for repeated three-letter sequences and the distances between them.
How to recognise each code by hand
The identifier is only automating what you can do by eye. This is the whole table it works from, so you can do it yourself, and so you know what it is looking at.
| Code or cipher | Characters you will see | The giveaway |
|---|---|---|
| Morse code | . - / and spaces | Only two symbols plus separators. Nothing else looks like this. |
| Braille | U+2800 to U+28FF | Its own Unicode block of raised-dot patterns. |
| Binary | 0 and 1 | Total bit count divides by 8 (or 7 for older ASCII). |
| Base64 | A-Z a-z 0-9 + / = | Length divides by 4 and it often ends in one or two = signs. |
| Bacon cipher | A and B only | Letter count divides exactly by 5. |
| A1Z26 | Numbers with separators | Every number lands between 1 and 26. |
| Polybius / tap code | Digits 1 to 5 | Even count of digits, none above 5: they pair as grid coordinates. |
| NATO phonetic | Whole words | Words are Alfa, Bravo, Charlie and the rest of the code word list. |
| Pig Latin | Ordinary letters | Most words end in ay, way or yay. |
| Leetspeak | Letters with digits mixed in | Digits 4, 3, 1, 0, 7 sit inside words in place of letters. |
| Caesar cipher | Letters | Index of coincidence near 0.067, and one of the 25 shifts reads as English. |
| ROT13 | Letters | Same as Caesar, but the shift that works is exactly 13. |
| Atbash | Letters | Index of coincidence near English, but no Caesar shift works: a fixed substitution. |
| Vigenere | Letters | Index of coincidence near 0.038. Repeated sequences reveal the key length. |
| Playfair | Letters, no J | Flat frequencies, even length, and the letter J never appears. |
| Rail fence | Letters | Exactly English letter frequencies, but unreadable: the letters were reordered, not replaced. |
What it cannot do
It is worth being straight about the limits, because a confident wrong answer is worse than no answer.
- Short text defeats statistics. Under about 30 letters the counts are too noisy to separate a substitution from a transposition. The identifier lowers its confidence and says the text is short rather than pretending otherwise.
- Layered schemes read as the outer layer. Text that was enciphered and then Base64 encoded will be identified as Base64, which is correct but only the first step. Decode that layer and paste the result back in.
- Some schemes are indistinguishable from the text alone. A Polybius square and tap code use the same grid and produce identical output, so they are reported together. That is a real ambiguity, not a gap in the tool.
- Non-English plaintext skews everything. The frequency tables here are English. A Caesar cipher over German or Spanish will often still be spotted, but the reported shift may be wrong.
Frequently asked questions
What cipher is this?
Paste the text into the box above and the identifier ranks the most likely schemes, with the reason for each one. It reads the character set first (only dots and dashes means Morse, only ones and zeroes means binary, digits 1 to 5 in pairs means a Polybius grid), then falls back to letter statistics for anything written in ordinary letters.
How does it tell a Caesar cipher from a Vigenere cipher?
By the index of coincidence, which is the chance that two letters picked at random from the text are the same. English sits near 0.067. A Caesar cipher just renames the letters, so it keeps that value. A Vigenere cipher enciphers the same letter differently in different places, which flattens the value towards 0.038. A number near 0.067 means a simple substitution, and a number near 0.038 means a polyalphabetic one.
Can it break the cipher as well as name it?
For some, yes. Where a scheme has no key, naming it is the same as breaking it, and the Open in translator link decodes it straight away. For a Caesar cipher the identifier also reports the shift it found. For a Vigenere cipher it reports the likely key length, which is the hard half of the problem.
Why does it say the text is too short?
Frequency analysis is statistics, and statistics need data. Under about 30 letters, a single unusual word can skew the counts enough to point at the wrong answer, so the identifier lowers its confidence and says so instead of guessing. Structural matches such as Morse or braille work on any length, because they depend on the character set rather than on counting.
Does the text I paste get uploaded?
No. The identifier runs entirely in your browser, like every other tool on CipherPad. Nothing you paste is sent to a server, logged or stored. Open your browser's Network tab while you type and you will see no requests at all.
It named the cipher, so is my message secure?
No, and that is rather the point. If a page of JavaScript can name the scheme from the text alone in a few milliseconds, the scheme is not protecting anything. Every cipher on this site is a puzzle or a teaching tool. For real protection use modern cryptography such as the Web Crypto API.
Once you know what it is
Every candidate above links straight to the translator that decodes it. If you would rather browse, the full list of translators covers every scheme on the site, and the reference page has the complete charts for Morse, braille, binary, NATO, pigpen and Polybius on a single printable page.