Choose for the player, not for the cipher
An escape-room cipher should create one satisfying deduction and then move the story forward. It is not a test of cryptographic knowledge. The best choice depends on the answer length, the prop you can hide, the players’ age, and whether recognising the method is itself part of the puzzle.
Use a short plaintext—usually a location, a four-digit lock code, or an instruction. Give players a fair route to the key: a visible alphabet, a themed object, a previous clue, or a worked example. Test the clue with people who did not build it. If they must guess a convention such as reading order or alphabet, add an in-world hint.
1–5: reliable first choices
- Caesar cipher. Shift every letter by one fixed amount. A portrait, a Roman date, or a numbered dial can reveal the shift. It is quick to explain and ideal for a short word.
- Pigpen cipher. Geometric symbols turn a note into a physical prop. Hide the grid as stained glass, a fence, or a notebook margin; keep the message short because copying symbols is slow.
- Morse code. Dots and dashes work through sound, light, taps, or writing. Players need a chart and clear separators between letters and words.
- A1Z26. Letter positions such as
3-1-20for CAT are immediately useful with a numbered alphabet, book spine, or keypad. State whether A is 1, not 0. - Atbash. Reverse the alphabet so A maps to Z. A mirror, a backward alphabet, or two opposing rows makes the rule discoverable. It is better for one short phrase than a paragraph.
6–10: use when the setting supports them
- Rail fence cipher. Write letters on zigzag rails, then read row by row. It makes a good train, fence, or musical-staff clue, but show the rail count and reading direction.
- Polybius square. Pairs of coordinates point to letters in a 5×5 grid. It pairs naturally with a map, chessboard, or keypad; make the row/column order explicit.
- Vigenère cipher. A repeated keyword controls changing shifts. Use it only when the keyword and a tableau are both discoverable; otherwise it becomes brute-force work rather than a room puzzle.
- Bacon’s cipher. Two visual states—font weights, colours, or object types—encode groups of five. It rewards observation, but make the two states genuinely distinguishable under the room lighting.
- Book cipher. Numbers identify page, line, and word in one supplied book. It is wonderfully thematic for a library or detective room, but lock down the exact edition and punctuation rule.
11–15: memorable variations
- Tap code. Two taps select a row and column in a 5×5 grid. It is tactile and good for a prison or telephone theme; players need the grid or a way to infer it.
- Semaphore. Flag positions encode letters. It shines when players can find two flags, clock hands, or poses, but avoid tiny diagrams and poor sightlines.
- Scytale transposition. Wrap a strip around a cylinder, write across it, then unwrap it. The cylinder is the key, so it makes a tangible reveal rather than a paper exercise.
- Null cipher. Hide the message in every first letter, every third word, or another stated pattern. A poem, menu, or letter can carry it naturally; include a cue that tells players where to look.
- ROT13. This is Caesar shift 13 for the Latin alphabet. It is fast for players who recognise it, so give an unmistakable 13 hint and do not make it the only difficult step.
Make the cipher a fair room puzzle
Build a single chain: notice the key → apply the rule → obtain an answer → use the answer. Do not hide the key and the ciphertext in unrelated places unless finding their connection is the intended deduction. A result should have one obvious use: a word that labels a drawer, a location, or the digits for a lock.
Before opening, check four things: can every symbol be read in the actual light; does the key use the same alphabet as the message; do spaces and repeated letters behave consistently; and can a team recover after one transcription mistake? Keep an optional hint ready. Classical ciphers are excellent theatrical devices, but none of them protects a real secret.