Cicada 3301: Inside the Internet's Most Elaborate Cipher Puzzle

On January 4, 2012, an anonymous image appeared on 4chan's /b/ board. It contained a white-on-black message signed "3301" and invited readers who could decode it to find a hidden URL. That image launched Cicada 3301, a puzzle series that ran for three years and combined cryptography, steganography, literature, mathematics, and philosophy into what may be the most elaborate crowdsourced cipher challenge ever created.

The first two rounds were solved. The third, which began on January 4, 2014, produced a 75-page book called the Liber Primus written almost entirely in a runic cipher. As of 2026, roughly 17 of those 75 pages have been decoded. The rest remains open. The last verified communication from 3301 was a PGP-signed message posted in April 2017.

If you want to experiment with the cipher techniques 3301 used, our Frequency Analysis tool and Caesar cipher tool cover the basics. The Liber Primus itself uses a more complex runic substitution system called Gematria Primus, which we will get to below.

Cicada 3301 is the name given to an unidentified organization that posted three rounds of cryptographic puzzles, each beginning on January 4, in 2012, 2013, and 2014. The puzzles appeared on 4chan and Twitter, then expanded to physical locations where posters were placed in cities including Paris, London, New York, Miami, and Seattle. The Wikipedia article on Cicada 3301 provides a useful overview, though the community-maintained research archives contain far more detail.

The stated goal of the puzzles, according to messages embedded within them, was to recruit "highly intelligent individuals" to a project. No one who claims to have been recruited has publicly described what the project involved. The puzzles drew on a wide range of disciplines: RSA encryption, steganography, book ciphers, Mayan numerology, prime number theory, and literary references spanning the King James Bible, the works of William Blake, and the self-published book Liber Primus.

3301 authenticated its communications using PGP signatures conforming to RFC 4880, the OpenPGP message format standard. This is a critical detail. PGP signatures allowed solvers to verify that subsequent messages genuinely came from the same source, which separated 3301 from the many copycat puzzles that appeared later. The Wikipedia article on PGP covers the history and mechanism. The use of RFC 4880-compliant signatures is one reason researchers take 3301 seriously: it demonstrates operational discipline that most internet hoaxes lack.

The first puzzle began on January 4, 2012, when an image was posted to 4chan. The image contained a message in white text on a black background, ending with the signature "3301." Solvers ran the image through steganography tools and discovered a hidden message encoded in the least significant bits of the pixel data. This is a classic LSB steganography technique, and it revealed a URL pointing to a Reddit post.

From there, the puzzle branched. The Reddit post contained a book cipher that required solvers to locate a specific text. The text turned out to be "The Mabinogion," a collection of medieval Welsh tales. Using the book cipher, solvers extracted a phone number. Calling the number played a recorded message that read out three prime numbers: 503, 509, and 3301. Multiplying these together produced 845145127, which formed the URL 845145127.com.

That site contained a countdown timer. When it expired, it displayed coordinates for physical locations around the world. Posters bearing the 3301 cicada logo had been placed at these coordinates. Each poster contained a QR code. The puzzle continued for approximately one month before concluding with a message stating that the selected individuals had been contacted. You can trace the steganography and substitution steps using our Vigenere cipher tool to understand how polyalphabetic ciphers work in similar contexts.

The second round began on January 4, 2013, again on 4chan and Twitter. It followed a similar structure: steganography in an image, then a series of cryptographic and research challenges. The 2013 round introduced more mathematical content, including problems related to prime number theory and modular arithmetic. It also required solvers to use Tor to access hidden services.

Marcus Wanner, then a teenager in Virginia, was one of the solvers who completed the 2013 round. He has publicly described his experience in interviews, including a 2015 article in Rolling Stone. According to Wanner, solvers who reached the final stage were given tasks that involved writing software and solving cryptographic problems in a collaborative setting. He has stated that the group was told the purpose was to build a system for protecting privacy and freedom of information.

Wanner's account is one of the few first-person descriptions of what happened at the end of a Cicada 3301 round. He has said that the communication eventually stopped without explanation. Whether the project he described is the actual purpose of 3301, or a cover story, remains unknown. The 2013 round was considered solved by the community, and 3301 confirmed this with a PGP-signed message.

The third round began on January 4, 2014. It started similarly to the previous rounds, but it diverged by producing a 71-page document (commonly cited as 75 pages including front matter and appendices) called the Liber Primus. The Liber Primus is written almost entirely in a runic script. It contains prose, diagrams, and what appear to be instructional passages.

The Liber Primus was distributed as a PDF. It used a custom runic alphabet that solvers named Gematria Primus. Unlike the 2012 and 2013 rounds, which were solved collaboratively within weeks, the Liber Primus proved far more resistant. As of 2026, approximately 17 of the 75 pages have been decoded. The decoded pages contain philosophical and instructional text, including references to privacy, individual sovereignty, and the nature of knowledge.

The GitHub research archive for Cicada 3301 contains the Liber Primus images, partial solutions, and community analysis. The fact that the Liber Primus remains mostly unsolved after more than a decade is remarkable. It suggests either that the cipher is genuinely difficult, or that the community of solvers has not yet identified the correct approach. Both explanations are plausible.

Gematria Primus is the name given to the runic substitution system used in the Liber Primus. It maps 29 runes to the 26 letters of the English alphabet plus three additional characters. The mapping was partially reverse-engineered by solvers who noticed that certain rune frequencies matched English letter frequencies, and that specific repeated patterns corresponded to common English words.

The cipher is not a simple monoalphabetic substitution. The decoded pages reveal that the system incorporates elements of a shift cipher, where the mapping changes based on position or context. This makes it closer to a polyalphabetic cipher than a straightforward substitution. Solvers have used frequency analysis, pattern matching, and known-plaintext attacks (where partially decoded text provides clues for adjacent sections) to make progress.

If you want to understand the underlying technique, our Frequency Analysis tool demonstrates how letter frequency distributions can break simple substitution ciphers. The same principle applies to the Liber Primus, though the polyalphabetic component makes it significantly harder. You can also compare it to the Dorabella cipher, another unsolved substitution cipher that uses a custom symbol set and has resisted analysis for over a century.

The Liber Primus has been publicly available since 2014. A dedicated community of solvers has worked on it continuously. Despite this, only about 17 pages have been decoded. Several factors explain the difficulty.

First, the polyalphabetic component means that standard frequency analysis alone is insufficient. Solvers must identify the shifting pattern, which may depend on rules embedded in the text itself. This creates a chicken-and-egg problem: you need to decode the text to understand the rules, but you need the rules to decode the text.

Second, the rune set includes characters that do not map cleanly to English letters. Some runes may represent digraphs, punctuation, or structural markers. Without knowing the full mapping, solvers are working with an incomplete alphabet.

Third, the community is small. Cicada 3301 attracts interest in waves, typically around each January 4 anniversary, but sustained effort is limited. A cipher of this complexity requires consistent collaborative work over months or years.

The last verified PGP-signed message from 3301 was posted in April 2017. It warned solvers about fake puzzles and impostors. No message has been authenticated since. Whether 3301 is dormant, dissolved, or waiting to post a fourth round is unknown. The April 2017 message is itself a historical fact worth noting: it demonstrates that 3301 maintained operational security and PGP key continuity for at least five years, which is unusual for an anonymous internet entity.