Frequency Analysis

How to use the frequency analyzer

Frequency analysis is the oldest weapon in cryptanalysis — Arab scholar Al-Kindi described it around 850 AD, and it broke every monoalphabetic cipher for the next thousand years. The idea is simple: language has habits, and habits survive scrambling.

1. Paste your ciphertext into the box. Everything updates live.
2. Read the index of coincidence first. Near 0.065 means English under a simple substitution — crackable by hand. Near 0.038 means something stronger (polyalphabetic or transposition).
3. Study the bar chart. The gold marker on each bar is where English expects that letter. The tallest ciphertext bars map to E, T, A, O, I, N.
4. Check bigrams and trigrams. The most common cipher pair is probably TH or HE; the most common triple is probably THE.
5. Try it on a known cipher: load the English sample, note its clean 0.065, then encode it with the Cipher Lab's Caesar cipher and paste the result back here — same coincidence, shifted bars.

Why it works

A substitution cipher renames letters but cannot change how often each one appears. E is 12.7% of English whether you call it E or X — so the frequency profile of the ciphertext is the frequency profile of English, wearing a mask. The index of coincidence measures that profile in a single number, which is why it survives even when you don't know the substitution table.

When it fails

Vigenère with a long keyword flattens frequencies toward random — the index of coincidence is your early-warning system. Transposition ciphers (reordering letters) don't change frequencies at all, so frequency analysis can't touch them. And with fewer than ~25 letters, the statistics are noise.

What is frequency analysis?

Frequency analysis is the classic code-breaking technique: in any English text, some letters appear far more often than others (E about 12.7%, Z about 0.07%). A substitution cipher preserves those frequencies under new names, so counting letters in the ciphertext reveals which cipher letter probably stands for E, T, A, and the rest.

What is the index of coincidence?

The index of coincidence is the probability that two randomly chosen letters from the text match. For English it sits near 0.065; for random text near 0.038. Monoalphabetic substitutions like Caesar preserve it, while polyalphabetic ciphers like Vigenere flatten it toward random — so it tells you what kind of cipher you are facing.

Why compare against English norms?

A substitution cipher scrambles which letter is which but keeps the shape of the frequency distribution. The gold marker on each bar shows where English expects that letter; when the tallest bars sit far from their markers, the chart is showing you the cipher's substitution table in disguise.

What do bigrams and trigrams tell me?

Common English pairs and triples — TH, HE, THE, AND — survive substitution as the most common cipher pairs and triples. Matching the top bigrams against the known English list (TH, HE, IN, ER...) is how code-breakers make their first guesses at the substitution table.

How much text do I need?

More is better. Under about 25 letters the statistics swing too wildly to trust; a few hundred letters give clean frequencies. The tool warns you when the text is too short for the index of coincidence to mean anything.

Is my text sent anywhere?

No. All analysis happens in your browser with JavaScript. Nothing is uploaded, stored, or tracked.