Text Encoding for Developers: ROT13, Morse Code, and the NATO Alphabet

Some encoding systems are for security. Some are for compression. And some — ROT13, Morse code, and the NATO phonetic alphabet — are for communication clarity and convention. Developers encounter all three more often than they might expect: ROT13 in forums and puzzle games, Morse in embedded systems and radio protocols, and NATO notation whenever they need to dictate a string character-by-character without ambiguity.

This guide covers how each system works, where developers actually use it, and the edge cases worth knowing.

ROT13: The Simplest Useful Cipher

ROT13 (Rotate by 13) is a Caesar cipher that shifts each letter 13 positions forward in the alphabet. Because the Latin alphabet has 26 letters, rotating by 13 twice returns to the original — applying ROT13 twice is a no-op.

A → N    N → A
B → O    O → B
C → P    P → C
...
M → Z    Z → M

ROT13 is its own inverse: encoding and decoding use the same operation.

ROT13("Hello World") = "Uryyb Jbeyq"
ROT13("Uryyb Jbeyq") = "Hello World"

Non-alphabetic characters (digits, punctuation, spaces) are passed through unchanged.

How it works

function rot13(str) {
  return str.replace(/[a-zA-Z]/g, char => {
    const base = char <= 'Z' ? 65 : 97;  // uppercase: 65 (A), lowercase: 97 (a)
    return String.fromCharCode(((char.charCodeAt(0) - base + 13) % 26) + base);
  });
}

rot13("Hello World");    // "Uryyb Jbeyq"
rot13("Uryyb Jbeyq");    // "Hello World"

Where developers use ROT13

Forum spoiler tags. Before CSS spoiler classes and <details> elements were widespread, online communities used ROT13 to hide spoilers. A reader who wanted to see the spoiler would manually apply ROT13 — enough friction to be intentional, not a security barrier. Reddit's /r/books, many game wikis, and classic forums like rec.arts.sf.written used this convention.

Puzzle games and CTFs. Many Capture the Flag competitions include ROT13-encoded flags or clues. It is trivial to implement and immediately recognisable to participants.

Obfuscating strings in source code. Developers occasionally use ROT13 to obfuscate email addresses, API keys (badly — ROT13 is not security), or strings that should not be immediately obvious in source code. This provides approximately zero security but prevents casual readers from immediately recognising the content.

Email harvesting protection. Some early spam-protection scripts served email addresses ROT13-encoded in JavaScript and decoded on the client. This fooled simplistic scrapers that did not execute JavaScript, though modern scraper strategies and other encoding methods have largely replaced it.

Identifying encoding. ROT13 is so recognisable that it is a useful first test when you encounter mystery text: if a string of letters looks like random English syllables, try ROT13. It is often the answer.

Use the ROT13 Encoder to apply ROT13 instantly — both encoding and decoding use the same tool since the operation is identical in both directions.

ROT13 variants

ROT5 applies the same principle to digits only (0–9, rotate by 5):

0→5, 1→6, 2→7, 3→8, 4→9
5→0, 6→1, 7→2, 8→3, 9→4

ROT47 applies to all printable ASCII characters (! through ~, 94 characters, rotate by 47):

ROT47("Hello World!") = "w6==@ (@C=5P"

ROT47 has a smaller character set than ROT13 and less cultural recognition, but handles non-letter characters.

Morse Code: Communication Over Signals

Morse code is an encoding system that represents letters and digits as sequences of dots (short signals) and dashes (long signals). Developed in the 1830s for telegraph communication, it remains in active use in amateur radio, aviation, and emergency signalling.

The encoding table

A  .-       N  -.
B  -...      O  ---
C  -.-.      P  .--.
D  -..       Q  --.-
E  .         R  .-.
F  ..-.      S  ...
G  --.       T  -
H  ....      U  ..-
I  ..        V  ...-
J  .---      W  .--
K  -.-       X  -..-
L  .-..      Y  -.--
M  --        Z  --..

0  -----     5  .....
1  .----     6  -....
2  ..---     7  --...
3  ...--     8  ---..
4  ....-     9  ----.

Timing is the core of Morse: the length of signals and silences defines the encoding:

• Dot (dit): 1 unit
• Dash (dah): 3 units
• Gap between elements of the same letter: 1 unit
• Gap between letters: 3 units
• Gap between words: 7 units

In text representation, / separates words and space separates letters within a word:

Morse: .... . .-.. .-.. --- / .-- --- .-. .-.. -..
Text:  H E L L O   W O R L D

Where developers use Morse

Embedded systems and hardware. Morse is the simplest encoding for single-wire, single-LED, or single-tone communication. When a device has one output indicator (a status LED, a buzzer), Morse is often used for diagnostic codes. A boot error might blink SOS (... --- ...) or a device-specific error code.

Amateur radio. Proficiency in Morse code (at least 5 words per minute) is still part of some amateur radio licensing examinations. The amateur radio bands designated for CW (Continuous Wave, i.e., Morse) remain active.

Aviation. VOR (VHF Omnidirectional Range) navigation beacons transmit their three-letter identifier in Morse code every 30 seconds so pilots can identify them by ear without visual reference to instruments.

Emergency signalling. SOS (... --- ...) is internationally recognised. Flashlights, mirrors, car horns, and any other interruptible signal source can transmit it.

Assistive technology. Morse code input is used by people with limited mobility who can activate a single switch. One switch → can input any letter, spelling any word. Systems like iOS's Switch Control support Morse input.

Implementing Morse in code

const MORSE_CODE = {
  'A': '.-',   'B': '-...', 'C': '-.-.', 'D': '-..',
  'E': '.',    'F': '..-.', 'G': '--.',  'H': '....',
  'I': '..',   'J': '.---', 'K': '-.-',  'L': '.-..',
  'M': '--',   'N': '-.',   'O': '---',  'P': '.--.',
  'Q': '--.-', 'R': '.-.',  'S': '...',  'T': '-',
  'U': '..-',  'V': '...-', 'W': '.--',  'X': '-..-',
  'Y': '-.--', 'Z': '--..',
  '0': '-----','1': '.----','2': '..---','3': '...--',
  '4': '....-','5': '.....','6': '-....','7': '--...',
  '8': '---..','9': '----.',
};

function textToMorse(text) {
  return text.toUpperCase()
    .split(' ')
    .map(word =>
      word.split('').map(char => MORSE_CODE[char] || '').join(' ')
    )
    .join(' / ');
}

function morseToText(morse) {
  const REVERSE = Object.fromEntries(
    Object.entries(MORSE_CODE).map(([k, v]) => [v, k])
  );
  return morse.split(' / ')
    .map(word => word.split(' ').map(code => REVERSE[code] || '?').join(''))
    .join(' ');
}

Use the Morse Code tool to convert text to Morse instantly, including audio playback so you can hear the timing.

The NATO Phonetic Alphabet

The NATO phonetic alphabet — formally the International Radiotelephony Spelling Alphabet — assigns a unique word to each letter of the Latin alphabet. It was designed so that letters sound unambiguous over radio or telephone, even with noise and distortion.

A  Alpha      N  November
B  Bravo      O  Oscar
C  Charlie    P  Papa
D  Delta      Q  Quebec
E  Echo       R  Romeo
F  Foxtrot    S  Sierra
G  Golf       T  Tango
H  Hotel      U  Uniform
I  India      V  Victor
J  Juliet     W  Whiskey
K  Kilo       X  X-ray
L  Lima       Y  Yankee
M  Mike       Z  Zulu

Digits:

0  Zero    5  Fiver (or Five)
1  One     6  Six-er (or Six)
2  Two     7  Seven
3  Tree    8  Ate (or Eight)
4  Fower   9  Niner

The distinctive pronunciations ("Tree" for 3, "Fower" for 4, "Niner" for 9) prevent misreading: "niner" cannot be confused with the German "nein" (no), and "fiver" is clearer than "five" over a noisy channel.

Where developers use NATO

Dictating strings character by character. When reading out an API key, a UUID, or a server's SSH fingerprint over a phone call or voice channel, "Alpha Bravo Charlie" is unambiguous in ways that "a, b, c" is not. "B" and "D" and "E" and "P" and "T" and "V" all sound similar over a phone call; "Bravo", "Delta", "Echo", "Papa", "Tango", "Victor" do not.

Support conversations. Tier 1 support agents and developers often need to spell out identifiers. "Your API key starts with X-ray-Kilo-Alpha..." is unambiguous. This is particularly important for case-sensitive keys where "S" versus lowercase "s" is communicated as "Sierra, lower case".

Security key ceremonies. Hardware Security Module (HSM) key ceremonies, certificate authority private key ceremonies, and similar high-stakes procedures require witnesses to confirm they are reading the same values. NATO spelling ensures there is no question about which character was read.

Aviation and maritime. Call signs, runway identifiers, and waypoint names are spelled using NATO on all air traffic control communications worldwide. Runway "27R" is "Two Seven Romeo". Flight IBERIA 42 is "Iberia 42".

NATO vs other phonetic alphabets

The NATO alphabet is not the only phonetic alphabet. The British armed forces used a different one before standardisation ("Able Baker Charlie"). Police forces in many countries use local alphabets ("Adam Baker Charlie David" in the US, "Andrew Benjamin Charlie David" in the UK).

The NATO alphabet is the international standard for aviation, maritime, NATO military, and business communication. If you are dictating to someone in a non-English-speaking country, confirm which alphabet they know — the NATO one is most universal, but not universal everywhere.

Use the NATO Alphabet tool to convert any text to NATO spellings for reading aloud, and to quickly look up the NATO word for any letter or digit.

Choosing the Right Encoding

ROT13, Morse, and NATO are communication conventions, not security systems. ROT13 provides no security — it is instantly reversible by anyone who recognises it. Morse provides no security — it is an open standard. NATO provides no security — it is designed to be universally understood.

Use them for what they are: communication tools that solve specific problems of clarity, channel compatibility, or cultural convention.