Vigenère Cipher Decoder & Encoder

What is the Vigenère cipher?

The Vigenère cipher encodes a message with a keyword. Each letter of the keyword stands for a Caesar shift (A = 0, B = 1 … Z = 25), and the keyword is repeated along the message so that every letter gets its own shift. Because the shift keeps changing, the same plain letter can turn into different cipher letters, and the simple tricks that break a Caesar cipher stop working. That is why it is called a polyalphabetic cipher: it uses several cipher alphabets instead of one.

For about three hundred years it had a reputation as unbreakable, and in French it was nicknamed le chiffre indéchiffrable, “the indecipherable cipher”. It is not, and the tool above shows how it is broken. The name is said “vee-zhuh-NAIR”, after the French writer Blaise de Vigenère.

How to use the Vigenère cipher decoder and encoder

1. Choose Encode or Decode.
2. Type the keyword. Only its letters count, so “Lemon”, “LEMON” and “le mon” are the same key.
3. Type or paste the message. The result updates as you type. Spaces, digits and punctuation are copied as they are and do not use up a key letter, which is how most puzzles and textbooks do it. Accented letters are written as plain ones first (é becomes e, ß becomes ss), so nothing slips through unencoded.
4. Copy the result, or press Decode this to check it decodes back.

Don’t know the key? Open Crack it: I don’t know the key. The tool measures which key length fits the message best, works out each letter of the keyword, and lists the best keys with a preview of each. Press Use this key, and if a letter or two is still wrong, correct it in the Keyword box; the decoded text updates as you type. The Step by step section lines the keyword up under your message and shows the rows of the Vigenère square it uses, and Letter frequencies shows how flat the letter counts of a Vigenère message are.

Other ciphers in the family. The menu next to Encode and Decode switches between Vigenère, Beaufort, variant Beaufort, autokey and Gronsfeld (a number key). Each one encodes, decodes and has its own Step by step; the differences are explained further down.

Share it. Copy link to this gives a link that reopens the tool exactly as you see it: mode, cipher, key and text. Send as a secret message gives a link with the coded message but not the key: your friend sees “Someone sent you a coded message” and types the key you agreed on. Both keep everything after the # in the link, a part browsers never send to our server. Anyone who has a link can read what is in it, though, so for a secret message leave the key out of the link and pass it on another way. Hand-made links work too: #text=LXFOPV&key=LEMON&mode=decode decodes straight away, and &open=crack opens the cracker.

How to encode a Vigenère cipher by hand

Write the keyword under the message letter by letter, repeating it as often as needed and skipping spaces. Shift each message letter forward by the value of the key letter under it. Here is the classic textbook example, ATTACK AT DAWN with the keyword LEMON:

So ATTACK AT DAWN becomes LXFOPV EF RNHR (open this example in the tool). Look at the first letters: A under L is shifted by 11 and becomes L; the T under E is shifted by 4 and becomes X, but the very next T sits under M and becomes F. The doubled TT of ATTACK no longer looks doubled.

That is the whole point of the cipher. Encode EEEEEE with the key CAT and you get GEXGEX: one letter, 3 different disguises. In numbers the rule is C = (P + K) mod 26, where P is the message letter, K the key letter and A = 0.

How to decode a Vigenère cipher with the key

Line the keyword up under the code in the same way and shift each letter back by its key letter: P = (C − K) mod 26. With the keyword CASTLE, the message Oewm xi dy lap snd uezgm tgppv ct kxgip decodes to Meet me by the old clock tower at seven. Open it in the tool.

If the result starts well and turns into nonsense, the key and the message have slipped out of line, usually because a space or punctuation mark was counted on one side but not the other. This tool never spends a key letter on anything but a letter, so paste the code exactly as you received it.

The Vigenère table (tabula recta)

Before calculators, people used a 26 × 26 square of alphabets, each row shifted one place further than the one above. To encode, find the key letter at the left and the message letter along the top; the cipher letter is where that row and column meet. To decode, go along the key letter’s row until you find the cipher letter, and read the message letter at the top of that column.

Row A is the plain alphabet (a shift of 0), so a key letter A leaves its letter unchanged. Each row is a Caesar shift (0 to 25), which is why the Vigenère cipher is sometimes described as a set of Caesar ciphers taking turns.

In the tool, Step by step shows this square with the key letter’s row and the message letter’s column lit up, one letter at a time (tap any letter to jump to it), and Print the square prints a clean full-page copy for solving by hand.

How to crack a Vigenère cipher without the key

Trying every keyword by hand is hopeless: a five-letter keyword already has 26 × 26 × 26 × 26 × 26 = 11,881,376 possibilities, and each extra letter multiplies that by 26. The trick is to split the problem in two. Once you know how long the keyword is, every letter of the message that was encoded with the first key letter is a Caesar cipher, and so is every letter encoded with the second, and so on. Each of those is easy.

Here is how the cracker in the tool handled a 292-letter museum announcement encoded with a keyword we gave it no hint about (try it yourself in the tool).

Step 1: find the key length

Index of coincidence. Pick two letters of a text at random: how likely are they to be the same letter? In ordinary English text it is about 0.0667, the textbook figure (E, T and A make matches likely); in a jumble of evenly mixed letters it is 1 in 26, about 0.0385. (Counted over our dictionary’s word list instead of running text it comes out a little lower, 0.064, because little words like “the” count only once there.) The museum message had 0.063 before encoding and only 0.043 after: the keyword flattened the letter counts. Now split the code into columns (every 2nd letter, every 3rd letter and so on) and measure each column. When the number of columns matches the key length, each column is a single Caesar shift again and the score jumps back up toward English:

Multiples of the real length score just as well, because their columns are single shifts too, so the cracker prefers the shortest length that scores high.

The Kasiski test points the same way. When the same group of letters happens to be encoded with the same part of the key twice, the same cipher letters appear twice, and the distance between them is a multiple of the key length. Chance repeats happen too, and every even distance is divisible by 2, so the useful question is which length divides more of the distances than chance would. These are the repeats in the museum message:

Across all 7 distances in the message, 5 divides 6 of them, far more than the 1 in 5 you would expect by chance, so the Kasiski test also says: key length 5.

Step 2: solve each column like a Caesar cipher

With the length known, take each column on its own and try all 26 shifts, keeping the one whose letter counts look most like English. Each column’s best shift is one letter of the keyword. The tool then double-checks every key letter against the whole message, trying all 26 options for each position and keeping whichever makes the most real English words.

The tool also reads the message as a Beaufort cipher (the same columns, mirrored) and as an autokey cipher, tries tens of thousands of real English words as the key when the message is short, and tells you which reading looks most like English. If none of them does, it says so instead of offering nonsense as an answer. You can help it with a key length, the key letters you already know (LE?ON) or a word you expect in the message.

For the museum message it found the keyword ORBIT, which is the key we used, and the decoded text begins: “The museum opens its new space gallery on Friday morning. Visitors will be able…”

When it struggles. The method needs enough letters in every column. As a rough guide, aim for twenty or more letters per key letter: a 5-letter key wants about 100 letters of code. Short messages, very long keywords and keys as long as the message (a one-time pad) defeat it. When the result is almost right, a wrong key letter shows up as every fifth (or sixth…) letter being off, and you can fix it by hand in the Keyword box.

Vigenère cipher examples to practice

Decode these with the keyword given, on paper or with the tool, then check the answers.

Crack it without the key: two challenges

No keyword this time. Use the method above with pencil and paper, or open each one in the tool and use Crack it. Both are long enough (188 and 168 letters) for the statistics to work.

Beaufort, autokey and the rest of the Vigenère family

All of these use the same 26 alphabets; they differ in which way the key is applied and where the key comes from. Letters count from A = 0 to Z = 25, and every sum wraps around (mod 26). Here is the same message, ATTACK AT DAWN, in each of them:

Tap any result to open it in the tool, where Step by step shows each letter being worked out.

• Beaufort, named after Sir Francis Beaufort, the admiral behind the wind scale, takes the message letter away from the key letter. Because P = K − C has the same form as C = K − P, one step both encodes and decodes.
• Variant Beaufort is Vigenère turned around. A message encoded with it is cracked exactly like a Vigenère message; only the key comes out “negated” (LEMON shows up as PWOMN), which the tool spots when the negated key is a real word.
• Autokey uses the keyword once and then the message itself as the key, so the key never repeats and the key-length tests above find nothing. It still falls: every keyword letter starts its own chain of letters, and each chain can be solved from letter counts, which is how the tool cracks it.
• Gronsfeld is Vigenère with a number for a key. With shifts of only 0 to 9 it is weaker, and the key 31415 is the same as the Vigenère key DBEBF.

Related ciphers

• Caesar cipher: a Vigenère cipher with a one-letter keyword. Keyword D is a Caesar shift of 3.
• Autokey cipher: the keyword is used once and then the message itself continues the key, so the key never repeats and the key-length attack above does not apply. This is the cipher Blaise de Vigenère actually described.
• Beaufort cipher: uses the same square but subtracts the message letter from the key letter (C = K − P), so encoding and decoding are the same step.
• Gronsfeld cipher: a Vigenère cipher whose key is a number, each digit giving a shift from 0 to 9.
• One-time pad: a Vigenère-style cipher with a truly random key as long as the message, used only once. Used correctly, it cannot be broken at all.

For single-alphabet ciphers, see the Substitution Cipher solver and the Affine cipher.

History of the Vigenère cipher

The cipher is named after the wrong person. It was first described by the Italian Giovan Battista Bellaso in a booklet of 1553. Blaise de Vigenère, a French diplomat, published his book on ciphers in 1586 and described a stronger relative, the autokey cipher; in the nineteenth century the simpler repeating-key version became attached to his name, and it stuck.

Its reputation lasted until the 1800s. Charles Babbage, the English mathematician, is known to have broken Vigenère messages in the 1850s but did not publish his method. In 1863 the Prussian officer Friedrich Kasiski published the attack that now carries his name. In the early 1920s the American cryptologist William Friedman introduced the index of coincidence, which turned finding the key length into simple arithmetic.

Tips for making a stronger Vigenère puzzle

• Use a longer keyword with no repeated pattern. A one-letter keyword is only a Caesar cipher, and AAAA is no cipher at all.
• Remove the spaces or write the code in groups of five, so word lengths give nothing away.
• Keep the message short compared with the keyword if you want it to resist the cracker; keep it long if you want solvers to be able to crack it.
• Hide the keyword in an earlier clue: a riddle, a word in a picture, or an A1Z26 number code.

Free and private

The Vigenère tool runs entirely in your browser: free, with no sign-up, and the messages and keys you type are not uploaded or stored.