M-94 Cipher Device
Encode and decode with the U.S. Army's M-94, the Jefferson disk cipher built from 25 lettered wheels. Set the order the disks are threaded onto the rod, which is the secret key, choose how many rows down to read the ciphertext, then type your message. Everything runs in your browser.
The M-94 is a cylinder of 25 disks, each engraved with a different scrambled alphabet. The key is the order the disks are stacked on the rod; the offset, or generatrix, is how many rows below the lined-up message you read the ciphertext. Use the same disk order and offset to decode. Only the letters A to Z are enciphered; everything else is ignored.
Mode
Disk order (key)
The order the 25 disks are stacked, written as the numbers 1 to 25 in any arrangement. This ordering is the secret key.
Offset (generatrix)
How many rows below the lined-up message to read the ciphertext, from 1 to 25. The default of 1 reads the row directly below.
Enter text above to see the M-94 result here.
How to use M-94 Cipher Device
- 1
Choose encode or decode
Select Encode to turn plaintext into ciphertext, or Decode to recover plaintext. Decoding needs the exact disk order and offset that were used to encode.
- 2
Set the disk order
Enter the order of the 25 disks as the numbers 1 to 25 in any arrangement. This order is the secret key. Use Reset for the natural order 1 to 25, or Randomize to generate a fresh secret order.
- 3
Set the offset
Enter the offset, or generatrix, from 1 to 25. This is how many rows below the lined-up message you read the ciphertext. The default of 1 reads the row directly below.
- 4
Type your message
Type or paste your text. Only the letters A to Z are enciphered; spaces, digits, and punctuation are ignored. The result and the live letter-by-letter working update instantly.
- 5
Read and share the result
Copy or download the result, or share a link that reopens the tool with your exact disk order, offset, and text. Send the link to a partner so they can decode with the matching settings.
Understanding the M-94 Cipher Device
What is the M-94 cipher device?
The M-94 is a manual cipher device that the United States Army adopted in 1922 and used into the early years of World War II. It is a cylinder about four and a half inches long, made of 25 aluminium disks threaded onto a central rod. Around the rim of each disk is a different scrambled alphabet of all 26 letters, and each disk is stamped with an identifying number. To use it, the operator turns the disks by hand until one row spells out the message, then copies a different row as the ciphertext. Simple, pocket-sized, and needing no batteries or power, the M-94 was ideal for field units that could not carry a heavy machine.
The same basic device served under several names. The Navy called its version the CSP-488, and the underlying idea is the wheel cipher, also known as the Jefferson disk after Thomas Jefferson, who described it in the 1790s. The Army's M-94 was assembled by Major Joseph Mauborgne from a rediscovery by Colonel Parker Hitt, with the 25 mixed alphabets carefully chosen so that no two disks were too alike. It stayed in service until the more advanced M-209 took over for tactical traffic, and it remains one of the clearest, most hands-on ways to understand how a cipher works.
How the M-94 works
Every disk carries the 26 letters in a fixed but scrambled order around its edge, and all 25 disks have different arrangements. The secret key is simply the order in which the disks are placed on the rod. Once they are stacked in the agreed order, the operator rotates each disk so that the first 25 letters of the message line up along a single straight row across the cylinder. Reading along that row you would see your plaintext; the trick is that you do not send that row. Instead you read off any one of the other 25 rows around the cylinder and transmit that as the ciphertext.
This tool makes the choice of row explicit through the offset, sometimes called the generatrix: an offset of 1 means read the row directly below the message, 2 means two rows down, and so on. Because there are only 25 disks, a message is enciphered 25 letters at a time; for longer text the same disks in the same order are reused for the next block, exactly as the physical device works. On the real M-94 the sender could pick any spare row at random and the receiver simply scanned the cylinder for the one line that read as sensible language. Fixing the offset makes the process reproducible, so here decoding is the exact reverse shift rather than a visual search.
Worked example
Leave the disks in their natural order, 1 through 25, and set the offset to 1. Now encode the word JEFFERSON. The first letter, J, is set on disk 1, whose alphabet begins ABCEIGDJF; reading one place further around the rim past J gives F. The second letter, E, sits on disk 2 and becomes H; the third, F, on disk 3, becomes Y; and so on through all nine letters. The result is FHYGMNYBL. Each letter uses a different disk, which is why the same letter can encrypt to different things and different letters can share one.
To decode, keep the identical disk order and offset, switch the tool to Decode, and enter FHYGMNYBL. Reading one place back around each disk's rim returns JEFFERSON, the original word. This shows the heart of the cipher: the security lives entirely in the disk order and the offset. Anyone who knows the 25 alphabets but not the order faces a vast number of possible arrangements, while the correct order makes both encoding and decoding immediate.
Thomas Jefferson and the wheel cipher
The idea behind the M-94 is much older than the device itself. Around 1795 Thomas Jefferson, then the United States Secretary of State, described a wheel cipher of lettered disks stacked on an axle, an invention well ahead of its time. His notes were filed away and forgotten for a century. In France the cryptographer Étienne Bazeries independently built a very similar cylinder in the 1890s, which is why the design is sometimes called the Bazeries cylinder, linking the M-94 to the same family as the Bazeries cipher.
The wheel cipher resurfaced in the United States Army when Colonel Parker Hitt experimented with strip and cylinder versions in the 1910s, and Major Joseph Mauborgne developed the practical M-94 from his work. So a concept sketched by a founding father, lost, and reinvented in Europe finally became standard American military equipment more than 120 years later. That long, winding history is part of what makes the M-94 such a favourite in museums, classrooms, and cryptography puzzles.
The key: disk order and offset
The strength of the M-94 rests on two choices. The first is the order of the disks. With 25 disks there are an enormous number of possible orderings, far too many to try by hand, and that ordering is the part both correspondents must keep secret and agree on in advance. In this tool you can type the order as the numbers 1 to 25, reset it to the natural order, or press Randomize to generate a fresh secret arrangement. Sharing a link preserves your exact order so a partner can open the tool already set up.
The second choice is the offset, the number of rows between the message line and the line you actually send. On the historic device this could change from message to message and even within a message, adding a little extra uncertainty for an interceptor. Keeping a single fixed offset, as this tool does by default, makes the cipher perfectly reversible while still demonstrating the mechanism. Together the disk order and the offset form the complete key; with both correct, decoding is instant, and without the order, the ciphertext is just a jumble.
How secure is the M-94?
For a lightweight field cipher in the 1920s the M-94 was respectable. It was fast, needed no power, produced no telltale patterns from a simple frequency count, and changing the disk order daily gave a large keyspace. For the short, time-sensitive tactical messages it was built for, it offered a reasonable balance of speed and protection, which is exactly why armies carried it for two decades.
It was never unbreakable, though. The 25 alphabets were not truly secret, since captured devices revealed them, so security depended only on the order of the disks. Skilled cryptanalysts could exploit that using a technique called multiple anagramming, lining up several messages enciphered with the same setup and rearranging columns until plaintext appeared. Reused settings and predictable message openings made the attack easier still. Against any modern computer the M-94 offers no protection at all, and it should be enjoyed as a piece of history and a teaching tool rather than trusted with real secrets.
The M-94 compared with other ciphers
The M-94 is a transposition-and-substitution hybrid driven entirely by hardware: the disks substitute each letter and the choice of row shifts it, all without electricity. That sets it apart from the electromechanical Enigma machine of the same era, whose rotors stepped automatically and rewired the cipher on every key press. The M-94 is simpler and slower but also far more robust in the field, with nothing to break and no power to fail.
Compared with the pen-and-paper classical ciphers, such as the Caesar shift, Vigenère, or Playfair, the M-94 trades a little portability for a much larger keyspace and the convenience of a physical aid. None of these historical systems, however, stands up to modern cryptanalysis. To protect real information today you should always use a well-tested modern algorithm such as AES. The M-94 earns its place as a beautifully tangible lesson in how substitution, transposition, and key management come together in a real cipher.
Frequently asked questions
What is the M-94 cipher device?
How does the M-94 work?
What is the Jefferson disk?
How do I decode an M-94 message?
Can you show an M-94 example?
What is the key for the M-94?
What is the offset or generatrix?
Why does the M-94 process 25 letters at a time?
How secure was the M-94 cipher?
How is the M-94 different from the Enigma machine?
Is my text uploaded to a server?
Related tools
Keep going with these handy tools