Skip to content
Allin
Sign up · Sign in

Caesar cipher (ROT13)

Encode or decode text with a Caesar shift cipher — ROT13 by default.

Related tools

All Hashing & crypto tools →
Atbash cipherEncode or decode text with the Atbash substitution cipher (A↔Z, B↔Y…). Paste the text or drop the file; nothing leaves the page either way.ROT47 cipherEncode or decode text with ROT47, which rotates all printable ASCII characters. Works on a pasted block or on a file you drop in.Vigenère cipherEncode or decode text with the Vigenère keyword cipher. Drop a file in rather than pasting it — it is read in your browser and never uploaded.Adler32 Checksum CalculatorGenerate a Adler-32 hash of any text instantly in your browser, with hex or Base64 output. Used in zlib and PNG.CRC32 Checksum CalculatorGenerate a CRC32 hash of any text instantly in your browser, with hex or Base64 output. Fast integrity check (zip, PNG).CRC64 Checksum CalculatorGenerate a CRC64 hash of any text instantly in your browser, with hex or Base64 output. ECMA-182, 64-bit integrity check.Crypto address validatorPaste a Bitcoin or Ethereum address and get a real verdict: the actual checksum is verified — Base58Check for legacy addresses, Bech32/Bech32m for SegWit and Taproot, EIP-55 for Ethereum — so a single mistyped character is caught, not just a wrong length. It reports the address type and network, and runs entirely in your browser.CSS Box Shadow GeneratorDial in a CSS box-shadow with live preview and copy the generated code — offset, blur, spread, color, inset.

Caesar cipher (ROT13) is free to use as often as you like, directly from this page. Its place is under Hashing & crypto; Atbash cipher and ROT47 cipher answer the questions closest to this one.

How to use it

  1. Open the tool — no signup or install needed.
  2. Enter your input or adjust the available options.
  3. Get your result instantly, then copy or download it.

Frequently asked questions

What does Caesar cipher (ROT13) do?

Encode or decode text with a Caesar shift cipher — ROT13 by default.

When would I actually use this?

Verifying a download matches its published checksum, comparing two files without reading them, and generating a signature for an API request.

What is the most common mistake?

Hashing a password with a fast algorithm. MD5 and SHA are built to be quick, which is exactly wrong for passwords — those need a deliberately slow function like bcrypt, scrypt or Argon2.

How is Caesar cipher (ROT13) different from Atbash cipher?

They sit next to each other but answer different questions: Atbash cipher is the one to open when you need it to encode or decode text with the Atbash substitution cipher (A↔Z, B↔Y…). Paste the text or drop the file; nothing leaves the page either way. Pick whichever matches what you're starting from — both are free.

Is there a tool for the next step?

ROT47 cipher is the closest one after this: Encode or decode text with ROT47, which rotates all printable ASCII characters. Works on a pasted block or on a file you drop in.

Where do the figures come from?

The digests follow their published specifications and are computed by the browser's own crypto implementation where one exists, so a value can be checked against any other conforming tool.

Further reading

All guides →
ExplainerThe Caesar Cipher Explained: How Shift Ciphers and ROT13 WorkThe Caesar cipher shifts every letter by a fixed amount. Learn how the shift works, why ROT13 is a special case, how to encode and decode by hand, and why the cipher offers no real security today.ComparisonChecksums Are Not Hashes: CRC-32, Adler-32 and What They Are ForA checksum catches accidents. A cryptographic hash resists an attacker. A hash-table hash spreads keys. Three different jobs, three different families — and here is a CRC-32 collision constructed by hand in 0.11 seconds to show exactly why you cannot substitute one for another.GuideWhat a Password Manager Cannot MeasureEntropy prices one attack: offline guessing against a stolen hash. Above roughly 90 bits the number stops deciding anything — and the meter on this site under-reported a random 20-character password in 300 draws out of 300.ExplainerPassword Entropy: What a Strength Meter Cannot KnowEntropy measures the process that produced a password, not the characters in it. H = L x log2(R) is only true when every character was chosen at random — which is exactly why a meter scoring a human-invented password on its character classes is measuring the wrong thing.ExplainerWhat Is Inside a JWT — and What It Does Not ProtectA JWT is signed, not encrypted. Anyone holding the token can decode the payload and read every claim in it. Here is a real token, decoded without any key, plus the three attacks the signature is supposed to stop and the one problem it cannot solve.ComparisonMD5, SHA-1, SHA-256: Which Hash, and For WhatMD5 is broken and MD5 is fine, depending on which of three security properties you needed. Here is what collision resistance, second-preimage resistance and preimage resistance actually mean, which algorithm still has which, and why none of them belongs near a password.