Skip to content
clickidy
🎯 ALL GAMES

READING · 17 MIN

THE DECODER RING
WAS NEVER A RING.

Everyone remembers a “secret decoder ring” from somewhere - a cereal box, a radio show, a movie. Almost nobody remembers it correctly. Here’s what the toy actually was, and the cipher hiding inside it.

A pin, not a ring ◢

The device everyone calls a “decoder ring” was, historically, almost always a pin or a badge - worn on a lapel, not a finger. The confusion is old and well documented: kids of the era mashed together two separate toy categories (decoder badges, and unrelated hollow “secret compartment” rings) into one shared memory. A genuine metal-and-finger decoder ring wasn’t manufactured until the 1960s, for the cartoon Jonny Quest - decades after the radio premiums that made the idea famous.

Little Orphan Annie’s Secret Society ◢

The device that started it all belonged to Little Orphan Annie, the hit radio drama sponsored by Ovaltine. From roughly 1935 through 1940, the show mailed out a new members-only decoder badge every year to kids who sent in proof-of-purchase seals - “Super Decoders,” “Telematic Decoders,” and similar names, each one part of the Radio Orphan Annie Secret Society. A 1937 example sits in the Smithsonian’s collection today. Announcers read a scrambled string of numbers at the end of the episode; only members with that year’s badge could turn it back into words.

Captain Midnight’s Code-O-Graph ◢

When Ovaltine dropped Annie in 1940, it moved the same trick to a new show: Captain Midnight. Its Secret Squadron badges - branded “Code-O-Graphs” - ran through the 1940s and worked on the exact same principle as Annie’s. Neither show, despite the enduring legend, ever actually issued a ring.

The mechanism: a physical Caesar cipher ◢

Strip away the branding and every one of these badges is the same tool: two concentric wheels. The outer wheel carries the 26 letters in a fixed, scrambled order - that arrangement was the year’s real secret. The inner wheel carries the numbers 1 through 26 in plain order, and it rotates. The broadcast would give listeners a single instruction, something like “set your dial to B-12” - turn the number wheel until 12 lines up with B - and from that one setting, every other letter-to-number pair on the badge was now fixed for the message.

That’s not a metaphor for a Caesar cipher. It is one - a whole alphabet shifted by a chosen amount, exactly what our Caesar cipher decoder does on a screen instead of a badge. Some later variants skipped the scrambled outer ring entirely and just mapped letters straight to numbers in order, A through Z - which is precisely the substitution our A1Z26 cipher tool runs today.

The “crummy commercial” scene ◢

The device’s most famous modern appearance is in A Christmas Story (1983), where Ralphie finally decodes his message only to find it’s an ad: “Be sure to drink your Ovaltine.” It’s a great punchline, and it’s fiction layered on a real toy - Ralphie’s pin is drawn from the genuine Annie/Captain Midnight badges, but the gag itself was invented for the film. The mix-up runs both ways, too: even the movie’s prop is a pin, not a ring, which hasn’t stopped several generations from remembering it as one.

Same idea, no cereal box required ◢

The badge is gone; the cipher underneath it isn’t. Rotating a wheel to a key letter and reading off substitutions is the entire mechanic behind the Codes & Ciphers tools on this site - you’re running the same trick Annie’s Secret Society ran in 1937, just without the proof-of-purchase seals.

Try a real decoder ring, digitally →

Play the ciphers in this story

CODESCaesar Cipher Decoder

Shift the alphabet to encode - or brute-force all 25 to crack it.

SHIFT 1-25 · ROT13CODESA1Z26 Cipher Decoder

Letters as numbers - A is 1, Z is 26.

A=1 · Z=26CODESCodes & Ciphers

Morse, binary, Caesar, more - encode anything.

10 CIPHERS

More Codes & Ciphers history →

WHAT THE RECORDS SHOW ◢

Yes, they were real ciphers, and the interesting part is where the secret sat. A radio decoder badge carried a working substitution alphabet, but the sponsor manufactured that alphabet in bulk and posted it to every child who asked for one. Owning the badge was the key. That makes it a membership token that happens to encrypt, rather than a tool for keeping anything from anybody.

Key Takeaways

  • The sponsor's own licensed fiction put the key space in print: twenty-six settings, in Joyce of the Secret Squadron (Whitman, 1942). The badge's large secret, the scrambled alphabet itself, was the part the sponsor manufactured and mailed out.
  • In that same novel a mechanic reconstructs the badge's alphabet from one four-letter word he happens to remember, which is a demonstration of the design's weakness written by the licensee.
  • A cipher instrument patented in the United States in 1935 already moved the secret somewhere the maker could not mail out: a changeable code sentence, applied letter by letter.
  • That patent's inventor also wrote down that swapping letters for numbers was an obvious equivalent, so the badge's letter-to-number dial was not a novelty even at the time.
  • The sponsor's covering letter went to the parent, not the child, and argued the club's value in household terms.

How many keys did a decoder badge actually have?

The number went out in print, in a book the sponsor's licensee published. Joyce of the Secret Squadron, written by R. R. Winterbotham for Whitman Publishing of Racine, Wisconsin in 1942, describes the Secret Squadron's badge and then states its key space outright: "By varying the positions of the dial, twenty-six different codes could be devised" (pages 104 to 105).

Twenty-six is a small number to say out loud about a cipher. It is small enough that an interceptor who owned the same device could work through every setting by hand in the time it takes to boil a kettle. The novel is not shy about this either. When the mechanic Ichabod Mudd rebuilds a badge from memory, he explains why he scrambled the letters rather than running them in order: "That'd be too easy to figure out and the Codograph wouldn't be very secret" (page 118).

So the design has two separate secrets doing two different jobs. The scrambled letter ring is the substitution alphabet, and it stays put. The setting is which of twenty-six alignments is in force, and it changes. Only one of those two is genuinely large: there are twenty-six alignments, but the number of ways to scramble twenty-six letters is twenty-six factorial, which is 403,291,461,126,605,635,584,000,000. The enormous secret is the one that was mass-produced. The tiny one is the one announced on the air.

Where did a decoder badge keep its secret, and who else had it?

On the letter ring. And that is the problem, because the badge was the product.

Every member received the same manufactured alphabet for that year's badge. Any member could therefore read any other member's traffic, and the only people locked out were the people who had not sent away for one. In cryptographic terms the badge does not provide confidentiality between its users at all. It sorts the world into members and non-members, which is exactly what a club wants and exactly what a cipher is supposed to avoid depending on.

The 1942 novel confirms this from the inside. Squadron members are under standing orders "to destroy these codes before allowing them to fall into the hands of a non-member" (page 105). A device whose capture is a catastrophe is a device that carries the key rather than one that merely applies it.

Then the same book shows how little it takes to rebuild that key. Mudd cannot remember the whole alphabet, but he remembers writing out his own surname, and he writes the letters M, U, D, D against the numbers 7, 17, 1 and 1 (page 119), which is four letters but only three distinct pairs, since the D repeats. He has already said he gave the letter A the number 12 (page 118). Captain Midnight's reply is the giveaway: "Do you think you can figure out the rotation from those three?" (page 119).

Three pairs. One remembered word. In cryptanalysis that is a crib, and the fiction treats it as sufficient, which is a fair reading of the mathematics: with a fixed ring and a rotation to find, a handful of known pairs pins the arrangement down. The licensee published the attack in the same volume as the product.

What did a serious cipher patent look like in the same years?

Very different, and the difference is instructive. United States patent 2,003,812, "Instrument for enciphering and deciphering", was granted on 4 June 1935 to Norman Alexander Smith of Adelaide, Australia. The application was filed on 5 January 1934 under serial number 705,374, following an Australian filing on 28 January 1933.

Smith opens by saying what the device is for: "Its object is to enable a message or communication to be changed into a secret cypher after such message has been associated with a code sentence or arrangement of letters known to the recipient, the message being deciphered by the use of a similar instrument" (page 1, left column).

Read that again for what it moves. The alphabets on Smith's instrument stay in ordinary order. He is explicit that they have to: "The order of the letters must however, for the above described manner of using the instrument, be the same on each of the members" (page 2, right column). The secret is not in the hardware. It is in a code sentence, and the specification says where that lives: "An arrangement of letters or words comprising the code sentence, which is also known to the recipient, is written upon a pad or elsewhere" (page 2, left column). A pad, or elsewhere. Anywhere the two correspondents like, changed whenever they like, and manufactured by nobody.

His worked example runs like this. The key letter is S. The code sentence begins "Adelaide", the message begins "New", and the message is written letter for letter beneath the code sentence. Sliding N under A produces F, sliding E under D produces R, and sliding W under E produces A, so the transmitted opening is F, R, A.

That checks out arithmetically, and you can verify it in a minute. Number the alphabet A as 0 through Z as 25, so the key letter S is 18. Each cipher letter is 18 plus the code-sentence letter minus the message letter. N under A gives 18 plus 0 minus 13, which is 5, the letter F. E under D gives 18 plus 3 minus 4, which is 17, the letter R. W under E gives 18 plus 4 minus 22, which is 0, the letter A.

The point of the arithmetic is the middle term. It changes with every letter of the code sentence, so no two letters of the message are enciphered under the same alignment. That is the running-key family, the one Vigenère's name is usually attached to, although Smith's instrument subtracts where a Vigenère table adds, so his own worked example will not reproduce letter for letter under the standard form. The badge does the opposite of both: one alignment, held for the whole message.

Set the two objects side by side and the design choice is stark.

Design choice Decoder badge Smith's 1935 instrument
Letter order on the parts Scrambled, fixed for the year Ordinary alphabetical order
Where the secret lives In the hardware In a code sentence on a pad
Key per message One alignment, held throughout A new alignment for every letter
Changing the key Manufacture and mail a new badge Write a different sentence
Who holds a copy Every member of the club Sender and recipient

There is one more line in Smith's specification worth having, because it settles how novel the badge's numbering was: "It will be obvious that the letters of the alphabet can be replaced by other suitable symbols provided the sender and the recipient know which letters, or perhaps numbers, the symbols represent" (page 1, left column). Letters standing for numbers was already the obvious variation, written into an application filed in Washington in January 1934 and in Australia a year before that.

Was the decoder badge itself ever patented?

Not under the sponsor's name, as far as the Patent Office's own annual indexes show.

The Patent Office published a yearly Index of Patents with an alphabetical list of patentees and a subject list. Searching the 1935 volume for cipher work returns very little: one entry for an instrument for enciphering and deciphering, which is Smith's, and one for a coding apparatus, number 2,010,610, granted to W. P. Simpson on 6 August. The 1942 and 1943 volume turns up a slightly longer list of cipher and coding machines, and again nothing filed by a food manufacturer.

That absence is worth stating plainly rather than filling with a guess. A metal disc riveted to a second metal disc is not obviously patentable subject matter in the first place, and a sponsor giving the thing away has little to gain from a monopoly on it. The indexes say what they say: in the years the badges were circulating, American cipher patents were a thin file of instruments for commercial and military correspondence, and the badge that was being manufactured by the sackful is not in that file.

Who was the sponsor actually writing to?

The parent. A letter preserved with a Secret Squadron mailing, on The Wander Company's Chicago letterhead, opens "Dear Parent" and never addresses the child at all.

Its first sentence begins "It is a pleasure to send your child the enclosed Captain Midnight 'Secret Squadron' Membership Badge and Club Booklet", and then turns to the adult reading it, hoping "that you will see in them something even more significant than just entertainment for your child."

Then the argument the whole club exists to make: "Membership in Captain Midnight's 'Secret Squadron' provides a wonderful indirect way of encouraging boys and girls to do something of vital importance to their own physical well-being."

The rest is a food advertisement addressed to whoever does the shopping. It runs through vitamins A, B, D and G, tells the parent that three glasses a day supply a child's full daily requirement of two of them, warns against confusing the product with "chocolate 'powders' and syrups that are designed as mere flavorings for milk", and closes with a postscript on the two varieties then sold. The letterhead itself is a small piece of evidence about scale, listing affiliated laboratories in Berne, London, Paris, Prague, Zagreb, Budapest, Bucharest, Copenhagen, Osthofen, Milan and Peterborough in Canada.

Two audiences, two documents, one envelope. The child got a cipher device and a club booklet. The adult got the sales argument, in plain language, with the word "indirect" doing the work.

What was the radio side of it worth?

Enough to be a trade-press headline. Broadcasting, the industry weekly, reported on 15 January 1940 that the Mutual Broadcasting System's president had pointed to "the recent contract placed with MBS by the Wander Co. for Ovaltine for a 52-week strip of daytime programs on 85 stations starting Jan. 22" as "the largest daytime revenue ever placed with the network".

The same issue carries the ninth annual New York World-Telegram poll of radio editors, run by Alton Cook, which ranked programmes by category. Among children's programmes the winner was Let's Pretend, with The Lone Ranger second and Little Orphan Annie third. The vote count printed beside Annie is garbled in the surviving scan, but the list runs in descending order and the entries either side of it are legible, which fixes the placing even where the number does not survive.

A year's daytime strip across eighty-five stations, and a top-three finish among children's shows in the trade's poll of the people who covered radio for a living. That is the machine the badge sat inside. The cipher was the enrolment form.

Frequently asked questions

Were the ciphers on decoder badges genuine, or just decoration?

Genuine. A badge performed a real monoalphabetic substitution and a real reader could recover the plaintext exactly, with no ambiguity, which is more than can be said for a lot of novelty items. What it could not do is keep a message from anyone else who owned the same badge, because the substitution alphabet was manufactured in bulk and identical across every copy issued for that year.

How many settings did a decoder badge have?

Twenty-six, according to Joyce of the Secret Squadron, the Whitman novel licensed from the radio series in 1942, which states that varying the dial gives twenty-six different codes. Twenty-six possibilities is a key space that can be searched exhaustively by hand, so the setting was never doing the security work. The scrambled letter ring was, and everybody in the club had a copy of it.

Could someone break a decoder badge message without a badge?

With effort, yes, and the licensed fiction shows the shortest route. In Joyce of the Secret Squadron a character recovers part of the alphabet from a single remembered word, writing M, U, D, D against 7, 17, 1 and 1, which is four letters but only three distinct pairs since the D repeats, and using those pairs to work back to the arrangement. A known word inside a message, what cryptanalysts call a crib, does the same job against a fixed substitution alphabet.

What did a real cipher device of the 1930s do differently?

It kept the secret in something changeable. United States patent 2,003,812, granted in 1935 to Norman Alexander Smith of Adelaide, describes an instrument whose alphabets stay in ordinary order and whose security comes from a code sentence known to sender and recipient. Because the sentence advances letter by letter, every letter of the message is enciphered under a different alignment, and the secret can be replaced without replacing the hardware.

Was there a patent on the radio decoder badges themselves?

None appears under the sponsor's name in the Patent Office's annual Index of Patents for 1935 or for 1942 and 1943. Those volumes list a handful of cipher and coding instruments per year, aimed at commercial and military correspondence, and no food manufacturer among them. The badges were a manufacturing and mailing operation rather than an invention the sponsor sought to protect.

If a fixed alphabet plus one alignment is the weak end of this family, the rest of the family is next door. Try naming an unlabelled message with the cipher identifier, run the substitution that has no key at all on the Atbash cipher, then read Leo Marks and the SOE, where the keys were poems and printed silks rather than a mass-produced piece of hardware.

Sources