Cipher Identifier

The Cipher Identifier analyzes unknown text and returns a ranked list of cipher and encoding candidates. Each candidate includes a confidence score, evidence labels, and a direct link to the related tool, so you can move from identification to verification without retyping the text.

The detector combines two kinds of signals. Pattern-based checks look for strict formats such as Base64 padding, hexadecimal-only input, binary groups, URL percent escapes, Unicode escape sequences, Morse symbols, A1Z26 numbers, Polybius-style coordinates, and JWT dot-separated structure. Statistical checks then examine alphabetic ciphertext with the Index of Coincidence, chi-squared letter frequency, bigram readability, common n-gram matches, and cipher-specific heuristics.

When one supported candidate reaches at least 70% confidence and leads the next candidate by 10 percentage points or more, the service can automatically run the matching cracking workflow. This currently applies to supported brute-force or cracking actions such as Caesar, Affine, and Vigenere analysis, while the full candidate table remains visible for manual review.

The tool currently checks 27 detector types across several families: encodings and structured formats: Base64, Hexadecimal, Binary, URL encoding, Unicode escape, JWT; codes and alphabet systems: Morse code, Bacon cipher, A1Z26, Polybius Square; monoalphabetic ciphers: Caesar, ROT13, Atbash, Affine, Simple Substitution, XOR; polyalphabetic ciphers: Vigenere, Beaufort, Autokey, Gronsfeld, Alberti; fractionating ciphers: Bifid, Trifid; transposition ciphers: Rail Fence, Columnar Transposition; polygraphic ciphers: Playfair, Hill.

For language-dependent analysis, the alphabet setting can be left on auto-detect or limited manually to English, Russian, German, Spanish, French, Italian, Portuguese, or Turkish. Choosing the correct alphabet helps the frequency model compare the ciphertext against the right language profile.

The result is not a single yes-or-no guess. It is a ranked diagnostic report for unknown ciphertext. The top row is the most likely candidate, the percentage shows relative confidence, and the evidence labels explain why the detector matched: format pattern, character set, IoC range, frequency shape, readable bigrams, common words, key-length signal, or cipher-specific scoring.

Use Open tool to continue in the matching cipher or encoding page with the same text carried over. If a candidate has a supported cracking action, use Crack to run the available solver directly from the identifier results. If an automatic result appears, it is a convenience result from the strongest supported candidate, not a replacement for checking close alternatives.

This service is useful when you have an unknown encrypted message, puzzle text, CTF challenge, classroom cryptography exercise, encoded token, copied data fragment, or legacy cipher sample and need to know where to start. It helps separate simple encodings such as Base64, Hex, Binary, URL encoding, and JWT from classical cryptography such as Caesar, Vigenere, Playfair, Affine, Atbash, Rail Fence, Columnar Transposition, Polybius, Bacon, Bifid, Trifid, Hill, and related systems.

The identifier is especially helpful as a first step before decryption: it narrows the search space, suggests the most relevant tool, and shows whether the text looks more like a format, a substitution cipher, a polyalphabetic cipher, a transposition cipher, or a coordinate-based system.

Short samples, mixed languages, heavy punctuation, transcription errors, and partially copied ciphertext reduce confidence. Strict encodings can often be recognized from short strings, but statistical identification for classical ciphers works best with longer alphabetic samples. As a practical rule, 50 or more letters gives the detector much more evidence than a single word or a short code.

The input limit is 3000 characters. For best results, paste the ciphertext itself, remove unrelated labels or explanations, preserve spaces only when they may be meaningful, and choose the likely alphabet if auto-detection is uncertain. The tool is designed for classical ciphers, educational cryptanalysis, and common text encodings; it is not a detector for modern cryptographic algorithms such as AES, RSA, or encrypted binary files.