Monoalphabetic substitution cipher

A simple substitution cipher, also called a monoalphabetic cipher, replaces every letter of the alphabet with exactly one other letter and keeps that mapping fixed for the whole message. Unlike a keyword cipher that builds the alphabet from a short seed, this tool takes the full twenty-six-letter cipher alphabet as the key so you control every mapping directly. Paste your plaintext or ciphertext, supply a permutation of A through Z, choose encrypt or decrypt, and receive the transformed string with a count of letters mapped. Spaces, digits, and punctuation pass through unchanged while letter case is preserved. Use it for classroom monoalphabetic demos, puzzle design, CTF warm-ups, and reversible obfuscation of short notes.

How the monoalphabetic key alphabet works

In a classical simple substitution cipher the plaintext alphabet A through Z is paired position-by-position with a cipher alphabet of the same length. The key you provide is that cipher alphabet: the first character replaces A, the second replaces B, and so on through Z. For example, the key QWERTYUIOPASDFGHJKLZXCVBNM maps plain A to Q, B to W, C to E, and so forth, producing a fixed monoalphabetic table for the whole message.

Encryption looks up each letter in the plain alphabet and emits the character at the same index in the key; decryption does the reverse lookup so round-trips restore the original letter casing and non-letter characters exactly. Digits, spaces, punctuation, emoji, and non-Latin scripts never enter the map—they are copied through so dates, codes, and formatting stay readable. Uppercase and lowercase forms of the same letter share one map entry; the engine preserves the case of each source character so HELLO and hello encrypt consistently relative to the same key.

Because the mapping is fixed for every letter of the message, frequency analysis can still break long English ciphertext; this tool is for teaching, puzzles, and light obfuscation, not for protecting secrets at rest or in transit. Prefer this landing when the search intent is monoalphabetic substitution cipher or simple substitution with a full key alphabet; keyword-seeded alphabets, Caesar shifts, and Vigenère polyalphabetic ciphers answer different intents and stay separate tools.

Encrypt, decrypt, and incomplete key validation

Send a required text string and a required key string, and optionally set action to encrypt or decrypt (encrypt is the default). The key is trimmed and must contain only letters A through Z. After normalization to uppercase it must be exactly twenty-six characters long and use each letter of the alphabet exactly once.

Encrypt walks plaintext letters from the plain alphabet into the key alphabet; decrypt walks the opposite direction. Status is beta while the public surface stabilizes, but the substitution rules follow this fixed classical construction and will not change for identical inputs.

Substitution alphabets in class and their limits

Call the capability with text and key as required fields. Use action decrypt when the text is already ciphertext produced by the same key alphabet. A typical lesson shows students a hand-written 26-letter permutation, encrypts a short English sentence, then decrypts to prove invertibility, and finally contrasts the fixed map with a polyalphabetic cipher later in the syllabus.

Support playbooks can reverse lightly obfuscated ticket notes that staff intentionally wrote with a shared substitution alphabet. Never treat simple substitution as a substitute for AES or authenticated encryption: letter frequencies leak structure on longer English text. Pair the tool with your lesson notes or puzzle brief so students can verify hand work against a stable reference.