Substitution Cipher Solver
Free substitution cipher solver that cracks a cryptoquote with frequency analysis, then lets you lock letters and finish the mapping.
Loading tool...
What is Substitution Cipher Solver?
The Substitution Cipher Solver cracks monoalphabetic ciphers the way a cryptographer would, but in under a second: letter frequencies choose the starting key, a deterministic hill climb improves it against a dictionary and bigram scores, and rotated restarts escape weak local optima. The winning key loads into an editable 26-letter mapping grid — fix any letter by hand with the preview re-rendering live, lock the ones you trust, and re-crack with those pinned. Punctuation and spacing are preserved, so the answer reads like the original message.
Key Benefits
- Automatic cracking for English text of a sentence or more
- Editable mapping grid with live re-decryption
- Per-letter lock-in that survives re-cracking
- Deterministic: the same input always yields the same result
- Fully offline — pasted ciphertext never leaves the page
Common Use Cases
- •Solving cryptoquotes and newspaper puzzles
- •Puzzle-hunt and ARG cipher stages
- •Teaching frequency analysis in a cryptography unit
- •Decoding old family or game letters enciphered by hand
- •Checking a constructed puzzle has a solvable, unique answer
How to Crack a Substitution Cipher
- Paste the ciphertext: Paste the encrypted message keeping its spacing and punctuation. Only letters are analyzed; everything else passes through untouched.
- Run the cracker: Click the crack button. Letter frequencies choose a starting key and a deterministic hill climb improves it against a dictionary and bigram scores, usually landing close to the answer on English text of a sentence or more.
- Fix the stragglers: Scan the decrypted text for wrong letters and correct them in the mapping grid — the preview re-renders as you change each one.
- Lock and re-crack: Lock the letters you trust and run another pass; the solver keeps every locked letter pinned and only reshuffles the rest. Copy the finished plaintext when it reads cleanly.
Key Features
- Automatic cracking via frequency analysis and hill climbing
- Dictionary and bigram scoring tuned for English plaintext
- Editable 26-letter mapping with live re-decryption
- Per-letter lock-in that survives re-cracking
- Fully offline with copyable output
Frequently Asked Questions
How much text does the solver need?
English text of a sentence or more works well — a hundred letters is usually enough for the frequency start plus the dictionary scoring to lock in the common letters, and three hundred or more makes the hill climb very reliable. Very short texts leave too many ties, so fix the letters you know and re-crack with them locked.
What is the lock for?
The lock pins a letter mapping so the cracker cannot move it. When you have identified two or three letters — say you recognized a signature word — lock them and re-run; the solver shuffles only the unlocked letters, which turns a hard search into a small one.
Does it work on Caesar or ROT13 ciphers?
Yes. Caesar, ROT13 and Atbash are all special cases of a simple substitution, so the same cracking pipeline handles them — or just read the mapping grid, where a Caesar cipher shows up as a uniform shift you can spot immediately.
Why is one letter still wrong at the end?
Letters that appear only once or twice in the ciphertext carry almost no frequency signal, so the climb may leave two rare letters swapped. Read the decrypted text, spot the nonsense word, and swap the pair in the mapping grid — the preview corrects instantly.