Skip to content
Kordu Tools Kordu Tools

Caesar Cipher Decoder

Runs in browser

Decode Caesar cipher text with any shift 1–25, or brute-force all 25 shifts instantly. Historically used by Julius Caesar with shift 3.

Last updated 02 Apr 2026

Enter the shift used to encode the message (or enable Brute Force to try all 25 shifts at once) and get the decoded plaintext instantly. Uppercase and lowercase letters are handled independently; digits and punctuation pass through unchanged. Runs entirely in your browser — nothing uploaded.

Looking for Caesar Cipher Encrypt?

Loading rating…

How to use

  1. 1

    Paste the ciphertext

    Enter or paste the Caesar-encrypted text into the left panel.

  2. 2

    Enter the shift value

    If you know the shift used to encode the message, enter it (1–25). The decoded text appears instantly. The classic Caesar cipher uses shift 3.

  3. 3

    Use Brute Force if the shift is unknown

    Toggle Brute Force mode to see all 25 possible decodes at once. Scan the list for the row with readable text — that is the correct shift.

  4. 4

    Copy the decoded text

    Click Copy next to the correct output (or next to a specific row in brute force mode) to copy it to your clipboard.

Frequently asked questions

How do I decode a Caesar cipher without knowing the shift?
Enable Brute Force mode. It tests all 25 possible shifts and displays every resulting plaintext in a compact list. Look for the shift that produces readable words in your language — that is the correct one.
Is this tool safe? Are inputs sent to a server?
No data is uploaded. All decoding runs entirely in your browser. Nothing leaves your device.
What shift does the classic Caesar cipher use?
Julius Caesar reportedly used a shift of 3. This is the most famous variant, but any shift from 1 to 25 is a valid Caesar cipher. ROT13 (shift 13) is a special case where encoding and decoding are the same operation.
Why does the decoder not change numbers and punctuation?
The Caesar cipher only shifts the 26 Latin letters (A–Z). Digits, spaces, and punctuation are not part of the cipher alphabet and pass through unchanged.
What is frequency analysis and can it help me decode a Caesar cipher?
Frequency analysis identifies the most common letters in the ciphertext and maps them to typical English letter frequencies (E, T, A, O, I, N are most common). With a Caesar cipher, brute-forcing all 25 shifts is faster than frequency analysis — just scan the list for readable text.
What is the difference between Caesar cipher and ROT13?
ROT13 is a special case of the Caesar cipher with shift = 13. Because 13 + 13 = 26, ROT13 is self-inverting — encoding and decoding are identical operations. Any other Caesar shift requires knowing the shift value to decode correctly.
Is the Caesar cipher secure?
No. With only 25 possible shifts, any attacker can test all of them in milliseconds. The Caesar cipher has no practical security value — it is used only for educational purposes, puzzles, games, and historical demonstrations.
Does my text get uploaded anywhere?
No. All decoding runs in your browser using JavaScript. Your text never leaves your device.
Can the Caesar cipher be used for modern encryption?
No. It is a substitution cipher with only 25 keys (possible shifts), providing no real security against any modern attack method. For actual encryption, use AES-256-GCM or RSA-OAEP.

Decode Caesar cipher text by reversing the letter shift applied during

encoding. If the message was encoded with shift 3, decoding subtracts 3

from each letter's position: D→A, E→B, Z→W. Enter the shift and the

original plaintext is restored immediately.

**Unknown shift?** Enable Brute Force mode. A scrollable panel lists all

25 possible decodes at once — each row shows the shift number and the

resulting text. Scan for the row that produces readable words.

**About the Caesar cipher:** Julius Caesar reportedly used a shift of 3 to

communicate with his generals around 50 BC. It is one of the oldest known

cipher techniques. Despite its historical significance, it provides no

practical security today — all 25 shifts can be tested in milliseconds.

Uppercase and lowercase letters are processed independently. Digits,

spaces, and punctuation are passed through unchanged.

All decoding runs entirely in your browser. Nothing is uploaded.

Related tools