How to Solve a Simple Substitution Cipher

What a substitution cipher actually does

A substitution cipher swaps each letter of the alphabet for another one, consistently, for the whole message. Every A becomes a Q, every Q becomes an M, and so on. The order of the letters never changes and the spaces usually stay put, so the ciphertext keeps the rhythm and shape of ordinary English even though it reads as gibberish — and that shape is exactly what makes it breakable.

Because the swap is consistent, the statistical fingerprint of the original language survives intact. Letters that are common in English stay common in the ciphertext, and rare letters stay rare. You do not need to guess the key. You need to notice which ciphertext letters are doing the work of E, T and A.

Look at the shape before you count anything

Before you analyse a single letter, note three things.

• Word lengths. A three-letter word repeated several times is very likely THE or AND.
• Single-letter words. In English these can only be A or I. Mid-sentence, it is almost certainly A.
• Punctuation and capitals. Apostrophes point to contractions, and a capital that is not at the start of a sentence is usually a name or a place.

That is often enough to pin down two or three letters before you have counted anything at all.

The big idea: frequency analysis

In everyday English, letters appear in a fairly stable order, roughly E, T, A, O, I, N, S, H, R, D, L, U from most to least common. E alone makes up about one letter in eight of a typical passage, while Q and Z barely appear at all.

Count the letters in your ciphertext and rank them. The most frequent is a strong candidate for E; the next is often T or A. Then work in words. Two-letter words are usually OF, TO, IN, IT, IS, BE, AS, AT, SO, WE, HE, BY, OR, ON, DO, IF, ME or MY. A repeated three-letter word in a plausible position is almost always THE.

One caveat: this works on longer passages. In a message of twenty or thirty letters, a single stray word can wreck the ranking. Treat frequency as a hint, never as proof.

A worked example, step by step

Here is a short ciphertext, with the spaces kept in place.

TRRE TR GE EBR ZWN TYWW XH EBR AYCRA

Count the letters and R comes out on top with six appearances. Now look at the words. EBR is three letters and turns up twice in a nine-word message, in the positions where you would expect a definite article. Try THE: E becomes T, B becomes H, R becomes E. That agrees with the frequency count, since R is our commonest letter and E is the commonest in English.

• TRRE is now _ E E T. MEET fits, so T becomes M. That also makes TR read as ME — a sensible start to a message.
• GE is _ T. After "MEET ME", the next word is almost certainly AT, so G becomes A.
• TYWW begins with our M and ends in a double letter: M _ _ _. MILL fits, giving Y as I and W as L.
• ZWN now shows a known L in the middle: _ L _. OLD works, so Z is O and N is D.
• XH is a two-letter word between "mill" and "the". BY fits, so X is B and H is Y.
• AYCRA has the same letter at each end: _ I _ E _. RIVER fits, confirming A as R and giving C as V.

The message reads: MEET ME AT THE OLD MILL BY THE RIVER.

Patterns that give the game away

Beyond frequency, a few shapes are worth memorising. Double letters are gold: LL, SS, EE, OO and TT are common, while AA, HH and JJ effectively never appear. A word with a pattern such as ABBA or ABCAB narrows the options fast.

Then think about endings. Many English words end in -ING, -ED, -ION or -LY, and spotting one can hand you three letters at once. With apostrophes, run through the usual suspects: IT'S, DON'T, I'M, WE'RE, THEY'LL.

Work in pencil. Write your guesses above the ciphertext, note what each letter now stands for, and be willing to rub out a line that has stopped making sense.

When it refuses to crack

Short messages are the enemy. Below about fifty letters, frequency analysis becomes unreliable and you may have to lean entirely on word patterns. Deliberate misspellings, proper nouns and unusual vocabulary will slow you down too.

The commonest mistake is fixing on an early guess and bending everything else to fit it. If a solution starts producing nonsense, step back and try your second choice. Substitution ciphers reward patience far more than cleverness. Write a sentence of your own, encode it, and crack it tomorrow — that is the cheapest practice available.