Free Tool
Encryption Learning Lab
Encryption, hashing and encoding are three different ideas that get confused constantly — even by people who should know better. This lab lets you try all three on your own text, side by side: scramble a message with an old cipher, hash it with SHA-256, and encode it in Base64, so you can see for yourself what each one actually does.
Learning tools, not real security. The Caesar cipher in this lab is a toy from two thousand years ago — it is here so you can break it, not so you can protect a real message. Real encryption uses modern algorithms and proper key management, which this lab explains but does not provide.
What this tool does
Encryption turns readable text into unreadable text that can be turned back with the right key. Hashing turns text into a fixed-length fingerprint that cannot be turned back at all — it is for checking, not for hiding. Encoding, such as Base64, turns text into a different representation that anyone can reverse, with no key and no secret at all. Three different jobs, three different tools, and confusing them is one of the most common mistakes in security.
This lab gives you one text box and three results, computed live in your browser. The Caesar cipher shifts each letter by a number you choose, and a second button shows all 25 possible shifts so you can see how easily it breaks. The SHA-256 hash shows the fingerprint of your text — change one letter and the whole fingerprint changes, which is the avalanche effect. The Base64 result shows the same text in a different alphabet, which is encoding, not encryption, and the lab explains the difference in plain English.
The lab is the starting point for the whole cryptography section of this site. Each idea here has its own dedicated tool page — the Caesar simulator, the SHA-256 and SHA-512 generators, the MD5 demonstrator, the Base64 encoder and decoder, the URL encoder and decoder — and each one goes deeper into its own topic. Start here to get the map, then follow the links to the tool you need.
Try it
Type some text, choose a Caesar shift, and watch all three results at once.
Caesar cipher: press Run the lab.
SHA-256 hash: press Run the lab.
Base64 encoding: press Run the lab.
All 25 shifts:
How it works
The Caesar cipher works by shifting each letter a fixed number of places through the alphabet: with a shift of 3, A becomes D, B becomes E, and so on, wrapping around at Z. It is one of the oldest ciphers in history, and it is also one of the weakest: there are only 25 possible shifts, so breaking it means trying all 25 and picking the one that reads as English. The lab's break button does exactly that, which is the point — a cipher you can break by hand in a minute is not security, it is a puzzle.
SHA-256 is a hash function. It takes any input and produces a fixed 256-bit fingerprint, shown as 64 hexadecimal characters. The same input always gives the same fingerprint, but the fingerprint cannot be reversed to recover the input — that is the difference between hashing and encryption. Change one letter of the input and the fingerprint changes completely, a property called the avalanche effect. Hashes are used to check integrity and to store passwords safely: a service stores the hash, not the password, and checks a login by hashing what you typed and comparing the two fingerprints.
Base64 is encoding, not encryption. It represents binary data as ordinary text characters so it can travel through systems that only handle text, such as email. Anyone can decode Base64 with no key and no secret — the lab's decoder on this site does it in one click. That is the difference that matters: encrypted text needs a key, encoded text needs nothing. If you see Base64 and think your data is protected, you are wrong, and this lab exists to make that mistake impossible to make twice.
Limitations
This lab teaches concepts with toy and demonstration tools. The Caesar cipher must never be used to protect a real message, and nothing on this page is a secure messaging tool. Real encryption — the kind that protects your messages, your files and your passwords — uses modern algorithms with proper keys, and it is built into the apps and services you already use, not assembled by hand in a browser page.
- The SHA-256 hash here is computed with your browser's Web Crypto API, which needs a secure context (HTTPS). If it is unavailable, the lab says so instead of failing silently.
- The lab shows what each process does to your text. It does not explain key exchange, digital signatures or authenticated encryption — those are covered in the encryption guides linked below.
- Nothing you type is sent anywhere. The lab works entirely in your browser and offline once the page has loaded.
Examples
Example 1 — Hello, world with a shift of 3. Type Hello, world and set the shift to 3, then run the lab. The Caesar result is Khoor, zruog. The SHA-256 fingerprint is a 64-character string that looks random, and it is identical every time you hash the same text. The Base64 result is SGVsbG8sIHdvcmxk — the same text in a different alphabet, readable by anyone with a decoder.
Example 2 — breaking the cipher. Take the Caesar result Khoor, zruog and press Break the Caesar cipher. The lab shows all 25 shifts, and one of them — shift 23 backwards, or 3 forwards — reads Hello, world. That is the whole attack: 25 tries, and the message is open. Now imagine a cipher with billions of possible keys instead of 25, and you understand why modern encryption does not fail this way.
Example 3 — the avalanche effect. Hash Hello, world and then hash Hello, worle — one letter changed. The two fingerprints look completely different, sharing almost nothing. That is what makes a hash useful for checking integrity: if a single character of a file changes, its hash changes completely, so any tampering is immediately visible.
Frequently asked questions
What is the difference between encryption and hashing?
Encryption is reversible with a key: it hides data so it can be recovered later. Hashing is one-way: it produces a fingerprint for checking, and the original cannot be recovered from it. You encrypt a message to send it privately; you hash a password to store it safely.
Is Base64 encryption?
No. Base64 is encoding — a way to represent data as text. Anyone can decode it with no key. It protects nothing; it only changes the representation. Never treat Base64 output as secret.
Why is the Caesar cipher so easy to break?
Because it has only 25 possible keys. An attacker tries all 25 and picks the one that reads as English — a few seconds of work. A secure cipher needs a key space so large that trying every key is not feasible, even for the fastest computers.
Can I use the lab's Caesar cipher for a real message?
No. It is a learning toy. Real messages need modern encryption built into trusted apps, with proper keys. Anything this lab produces can be read by anyone who tries all 25 shifts.
What is the avalanche effect?
The property of a good hash function where a tiny change in the input produces a completely different output. It is what makes hashes useful for detecting tampering: change one character of a file and its hash changes entirely.