Skip to main content

Cicada 3301 Explained

In January 2012, an anonymous post on 4chan set off one of the internet's most famous puzzles. Nobody has publicly identified who was behind it, and the last round is still unsolved.

A short timeline

  • January 4, 2012: the first image appears on 4chan, inviting readers to find a hidden message. The hunt runs for nearly a month.
  • January 4, 2013: a second round begins. Marcus Wanner solved its first puzzle. Those who answered questions about information freedom, privacy and anti-censorship were invited to a private forum and given a project.
  • January 4, 2014: a third round is posted on Twitter. It remains unsolved.
  • January 2016: a further message appears on Twitter.
  • April 2017: the last verified message, signed with OpenPGP, says unsigned puzzles are not genuine.

What made the puzzles famous

Cicada crossed between the online and real worlds. Clues included digital images with information hidden inside them, a telephone message, websites and paper signs with QR codes posted in physical locations. Solvers had to recognize references to literature, poetry, art and music as well as handle cryptography. That mix meant no single person was likely to have every skill, so strangers teamed up online to share their findings.

The kinds of skills involved

You do not need to be a security expert to understand the basics:

  • Steganography means hiding a message so nobody knows it is there, for example inside an image file.
  • Ciphers scramble a message that is in plain sight. The classic ones are a good place to start: try the Caesar cipher and the Vigenère cipher.
  • Encodings such as binary are not secret, but puzzle makers use them as layers.
  • Digital signatures prove who wrote something. Cicada's OpenPGP signature is why people could trust a clue.

Why it still fascinates people

Cicada has everything a good mystery needs: an unknown author, a real test of skill and an ending nobody has reached. If you come across a strange code in a game or online puzzle hunt, paste it into the cipher identifier.

Try your own hunt

Want a taste of the same feeling? Escape the Cove chains eight real ciphers together, ending in a lock whose keyword is hidden earlier in the game. For a daily challenge, try Cipher of the Day, or see all our games.

Sources: Wikipedia, Cicada 3301.

Frequently asked questions

What is Cicada 3301?

Cicada 3301 is the name used by an anonymous group that posted a series of puzzles online in 2012, 2013 and 2014. The puzzles covered cryptography, steganography and internet anonymity, and the stated aim was to find highly intelligent people.

Who is behind Cicada 3301?

Nobody knows publicly. People have speculated about intelligence agencies such as the NSA, CIA and MI6, a secret society or a cyber mercenary group, but none of those ideas has been confirmed.

Has Cicada 3301 been solved?

The 2012 and 2013 rounds were completed by some participants. The 2014 round, posted on Twitter, is still described as unsolved.

Is Cicada 3301 still active?

The last message verified by its signature appeared in April 2017. It warned people not to trust puzzles without the group's signature. Anything claiming to be Cicada since then should be treated with caution unless it carries that signature.

How did people prove a message came from Cicada?

Each clue was signed with the same OpenPGP private key. Anyone could check the signature with the matching public key, so a real message could be told apart from a fake.

Can I still try the puzzles?

The rounds ran years ago, so you cannot play them as they happened. To try similar skills, start with the games and tools on this site.