T

Text Machine

Powerful text tools, in your browser

Morbit Cipher

Encode and decode the Morbit cipher. The message is first written in Morse with a single x between letters and a double x between words, the dot-dash-x stream is then read two symbols at a time, and each of the nine possible pairs is replaced by a digit from one to nine in an order set by a keyword. Follow the live letters-to-Morse-to-digit working, and copy, download, or share the result. Everything runs in your browser.

Key

Key

The key fixes which digit each Morse pair becomes. Use a nine-letter keyword (its letters are numbered 1-9 in alphabetical order, ties left to right) or a nine-digit arrangement of 1-9 typed directly. Anything else falls back to the plain 1-9 order. Both sides must use the same key.

Plain text
Cipher digits

Enter text above to see the result here.

Pair → digit table

..

5

.-

6

.x

8

-.

9

--

3

-x

1

x.

7

x-

2

xx

4

How to use Morbit Cipher

  1. 1

    Choose encode or decode

    Pick Encode to turn plain text into Morbit cipher digits, or Decode to turn cipher digits back into plain text.

  2. 2

    Set the key

    Enter a nine-letter keyword or a nine-digit arrangement of 1-9. The key fixes which digit each Morse pair becomes, and both sides must use the same key to match.

  3. 3

    Type or paste your text

    Enter your message and it is converted as you type. When encoding, the steps panel shows each letter over its Morse, then the stream cut into pairs with the digit under each.

  4. 4

    Read the pair table

    Open the pair table to see all nine Morse pairs with the digit each maps to under the current key.

  5. 5

    Copy, download, or share

    Copy the result, download it as a text file, or share a link that reopens the tool with your exact text and key ready to go.

Understanding the Morbit Cipher

What is the Morbit cipher?

The Morbit cipher turns ordinary Morse code into a string of the digits 1 to 9, so that the familiar dots and dashes never appear in the finished message. It belongs to the same family of Morse-based hand ciphers as Fractionated Morse and Pollux, all of them catalogued and kept alive by the American Cryptogram Association, and it is a favourite in puzzle hunts and capture-the-flag challenges because the output looks like a meaningless run of numbers.

The name is a blend of Morse and bit, and the idea at its heart is fractionation. After the message is turned into Morse, the stream of dots, dashes, and separators is chopped into pairs and each pair is replaced by a single digit. Because two Morse symbols almost never line up neatly with one plaintext letter, every cipher digit ends up carrying fragments of its neighbours. That blending is what erases the tell-tale rhythm of Morse and flattens the letter frequencies that would otherwise give the message away.

Three symbols, nine pairs

To make Morse into a single unbroken string you need a separator. Morbit uses the letter x: a single x between letters and a double xx between words. So the message now uses just three symbols — dot, dash, and x — and nothing else.

Read two of those symbols at a time and there are 3 × 3 = 9 possible pairs, listed in a fixed order: dot-dot, dot-dash, dot-x, dash-dot, dash-dash, dash-x, x-dot, x-dash, and x-x. Nine pairs, and exactly nine digits from 1 to 9 to name them with. That neat match is the whole reason the cipher works: every pair gets its own digit with none left over and none missing.

The keyword and the digit assignment

The nine pairs are always listed in the same fixed order. What changes is the digit written beneath each one. With no keyword the pairs simply take the digits 1 to 9 in order. A keyword shuffles them: take a nine-letter word, number its letters 1 to 9 by alphabetical order — with ties broken left to right — and read that permutation against the nine pairs.

The keyword MORSECODE, for example, has the letters numbered as 5, 6, 8, 9, 3, 1, 7, 2, 4, so the first pair dot-dot becomes 5, the second pair dot-dash becomes 6, and so on. The live table above shows this mapping and updates the moment you change the key. You can also type a nine-digit arrangement of 1 to 9 directly if you prefer. The key is the shared secret: sender and receiver must use the same one.

How the Morbit cipher works

Encoding runs in three moves. First, write the whole message in Morse, putting one x between letters and two between words. Second, if the resulting string has an odd number of symbols, add a single x to the end so it divides evenly into pairs — padding with x rather than a dot or dash matters, because a stray dot would later be read back as a spurious letter. Third, read the string two symbols at a time and replace each pair with its digit from the key.

The power of the cipher is in that pairing. A single plaintext letter, once turned into Morse and joined to its neighbours with separators, is spread across several pairs, and each pair also borrows a symbol from the letter on one side. Recovering one plaintext letter therefore means reconstructing the surrounding Morse as well, which is exactly what defeats the simple letter-counting attacks that break a plain substitution cipher. The steps panel above lays this out live: the top row pairs each letter with its Morse, and the bottom row shows the stream cut into pairs with the digit under each.

A worked example

Take the phrase MORE BITS with the keyword MORSECODE. In Morse, MORE is dash-dash x dash-dash-dash x dot-dash-dot x dot, and BITS is dash-dot-dot-dot x dot-dot x dash x dot-dot-dot, with a double xx marking the space between the two words. Strung together this is a 27-symbol stream, an odd length, so a single x is added to the end to make 28.

Now read the 28 symbols two at a time to get 14 pairs, and turn each pair into its digit using the MORSECODE key (dot-dot is 5, dash-dash is 3, dot-x is 8, and so on). The result is 32379749578158. Decoding reverses the process exactly: each digit becomes its pair, the pairs are joined back into the Morse stream, and the stream is read back through the Morse table to recover MORE BITS.

Decoding a Morbit message

Decoding simply runs the three moves backwards. Each digit is looked up in the key to recover its pair of Morse symbols, the pairs are joined back into one long dot-dash-x string, and that string is split on the separators — a single x ends a letter, a double xx ends a word. Reading each run of dots and dashes back through the Morse table rebuilds the original text. Any x padding that was added during encoding sits harmlessly at the end and disappears, so a message that was encoded with this tool always decodes back exactly.

To decode correctly you must use the same key that was used to encode; a different key pairs the dyads with the wrong digits and the Morse comes out as nonsense. Because only letters and digits have Morse codes, any punctuation or other symbols in the original message were dropped during encoding and will not return. Spaces between groups of cipher digits are ignored on decode, so it does not matter whether the cipher text was written solid or in tidy blocks of five.

History, uses, and security

Morbit is one of a small set of Morse-based pencil-and-paper ciphers — alongside Fractionated Morse and Pollux — that were catalogued and kept alive by the American Cryptogram Association for recreational cryptanalysis. They reward solvers who can spot the hidden Morse structure, and they remain a staple of cipher challenges precisely because the fractionation step makes them more interesting than a straight substitution.

By modern standards the cipher is not secure. The fractionation defeats naive frequency analysis, but the underlying Morse imposes strong statistical patterns, and a known or guessed key, or simply enough cipher text, lets a determined solver or a computer recover the message. Treat Morbit as a puzzle and a teaching tool — a vivid demonstration of how combining encoding with substitution strengthens a cipher — and never as a way to protect real secrets. For genuine confidentiality, always use a modern, peer-reviewed algorithm such as AES.

Frequently asked questions

What is the Morbit cipher?
It is a hand cipher that hides Morse code inside a run of the digits 1 to 9. The message is written in Morse with x separating letters and xx separating words, the dot-dash-x stream is read two symbols at a time, and each of the nine possible pairs is replaced by a digit from a keyed table. Because the pairs rarely line up with single letters, each cipher digit blends parts of its neighbours.
Why are there exactly nine pairs?
After the message is in Morse, only three symbols are used: dot, dash, and the separator x. Reading two at a time gives 3 × 3 = 9 combinations, from dot-dot up to x-x. There are exactly nine digits from 1 to 9 to label them with, so every pair gets its own digit with none spare and none missing.
What does the keyword do?
The keyword sets which digit each of the nine pairs becomes. Take a nine-letter word and number its letters 1 to 9 by alphabetical order, breaking ties from left to right; that permutation is read against the nine pairs in their fixed order. With no keyword the pairs simply take the digits 1 to 9 in order, so the keyword is the shared secret that both sender and receiver must use.
Can you show a worked example?
With the keyword MORSECODE, the phrase MORE BITS becomes the digits 32379749578158. The message is first written in Morse as a 27-symbol stream, padded with one x to 28, then read in pairs, with each pair turned into its digit by the MORSECODE key (which numbers the pairs 5, 6, 8, 9, 3, 1, 7, 2, 4).
How do I decode a Morbit message?
Reverse the steps: look up each digit to get its pair of Morse symbols, join the pairs into one dot-dash-x string, split it on the separators (single x between letters, double xx between words), and read each run of dots and dashes back through the Morse table. In this tool, choose Decode and enter the same key that was used to encode.
Why is the padding done with x and not a dot or dash?
If the Morse stream has an odd number of symbols, one more is added so the last pair is complete. Padding with x works because x is a separator: a trailing separator simply marks the end of the final letter or word and vanishes when the message is decoded. Padding with a dot or dash would instead be read back as a real Morse symbol and could add a spurious extra letter.
Does it handle numbers and punctuation?
Letters and digits are encoded, because both have standard Morse codes. Punctuation and other symbols are dropped, and any run of spaces becomes a single word break. This means a contraction like "it's" is treated as the single word ITS, which matches the common reference implementations of the cipher.
Can I use a nine-digit number as the key instead of a word?
Yes. If you type a nine-digit arrangement of the digits 1 to 9 — each used exactly once — it is used directly as the pair-to-digit assignment. A nine-letter keyword is just a friendlier way to remember the same kind of permutation. Anything that is neither a valid nine-digit arrangement nor a nine-letter word falls back to the plain 1-9 order.
How is Morbit different from Fractionated Morse?
Both write the message in Morse first and both fractionate the dot-dash-x stream, but Morbit reads the stream two symbols at a time and outputs the digits 1 to 9, while Fractionated Morse reads it three symbols at a time and outputs letters A to Z. Morbit therefore produces numeric cipher text, whereas Fractionated Morse produces letters.
Is the Morbit cipher secure?
No. The fractionation defeats simple frequency counting, but the underlying Morse leaves strong statistical patterns, and the cipher falls to classical solving methods and to computers, especially when the key is guessed or reused or when plenty of cipher text is available. It is excellent for puzzles and learning, but for real protection use a modern algorithm such as AES.
Is my text uploaded to a server?
No. All encoding and decoding happens entirely in your browser, so your text is never uploaded, logged, or stored. Even a share link keeps your text and key in the part of the URL after the # symbol, which browsers never send to a server, so your message stays private until you choose to share the link.

Related tools

Keep going with these handy tools

Fractionated Morse Cipher

Pollux Cipher

Straddling Checkerboard

Morse Code Translator

Caesar Cipher

Vigenère Cipher