Is the Caesar cipher secure?
No. The Caesar cipher provides zero cryptographic security. With only 25 possible shifts, an attacker can try every key in microseconds. Frequency analysis breaks it even faster — the letter E is the most common in English, so whichever ciphertext letter appears most often is almost always the encrypted E. Use AES-256-GCM, ChaCha20-Poly1305, or another modern authenticated cipher for any real confidentiality need.
What shift did Julius Caesar use?
According to Suetonius, Caesar used a left shift of 3 for his military correspondence — A became D, B became E, and so on. Augustus reportedly used a shift of 1. Both ciphers were considered adequate at the time because most adversaries were illiterate or unfamiliar with the technique, not because the cipher was strong.
How do I decode a Caesar cipher without knowing the shift?
Brute force: try all 25 shifts and pick the one that produces readable English. Frequency analysis is the principled approach — count letter frequencies in the ciphertext and align the most frequent ciphertext letter with the expected E. The shift falls out immediately. There is no hard math required, which is exactly why the Caesar cipher is insecure.
What is the difference between Caesar cipher and ROT13?
ROT13 is a Caesar cipher with the shift hard-coded to 13. The general Caesar cipher accepts any shift between 1 and 25, so it has 25 possible keys instead of 1. Both are trivially breakable; the shift of 13 is special only because it makes the cipher self-inverse — applying it twice returns the original.
Why are there 25 valid shifts and not 26?
A shift of 0 (or 26, 52, …) maps every letter to itself, producing identical plaintext and ciphertext — which is not a cipher. So the meaningful key space is shifts 1 through 25. A shift of 26 wraps back to 0; a shift of -3 is the same as +23.
Does it preserve uppercase, digits, and punctuation?
By default, yes. The "Preserve case" option keeps uppercase letters uppercase and lowercase letters lowercase after the shift. The "Passthrough non-letters" option leaves digits, spaces, punctuation, and Unicode characters unchanged. Disable either if you want a normalised lowercase-only or letters-only output (common for classical cryptanalysis exercises).
Is my text uploaded to your servers?
No. The Caesar cipher transformation runs entirely in JavaScript inside your browser. Nothing leaves your device. Open DevTools → Network and click Apply — no requests fire.
Can a Caesar cipher protect a password?
Absolutely not. A password "encrypted" with a Caesar cipher can be recovered in milliseconds. For storing passwords use a slow KDF like Argon2id or bcrypt; for transmitting them use TLS; for encrypting payloads use AES-GCM with a properly managed key.