# Cicada 3301 was a secret recruitment puzzle run by an intelligence agency or secret society

**No verdict.** The puzzles, the PGP-signed provenance, and the still-unsolved Liber Primus are all real and documented, but no government agency, company, or society has ever been confirmed as the author, and no solver has been shown to have been hired by one.

Category: Science, Space & Technology · Era: Internet age · First circulated: 2012 · Believed by: Niche but large solver community; no polling data exists
URL: https://theconspiratory.com/theory/cicada-3301

## Summary
Three rounds of ferociously difficult puzzles, posted between 2012 and 2014 and authenticated by a single consistent PGP key, sent thousands of solvers through cryptography, steganography, phone numbers, and physical posters on four continents in search of an anonymous group calling itself 3301. Who built it, and why, has never been established.

## The claim
That Cicada 3301 (the anonymous entity behind a series of elaborate cryptographic puzzles posted online from 2012 to 2014, with a final authenticated message in 2017) is a front for an intelligence agency (commonly named as the NSA, GCHQ, or CIA) or a secretive private society, using the puzzles to identify and recruit exceptionally skilled cryptographers, hackers, and codebreakers.

## Origin and timeline
- 2012-01: A user posts an image titled to 4chan's /x/ board: 'We are looking for highly intelligent individuals. To find them, we have devised a test.' The image's pixel dimensions, 503×509, are both prime.
- 2012-01–02: Solvers extract a Caesar-shifted message, then an OutGuess-hidden PGP-signed clue, from the image, eventually reaching a site at 845145127.com (503 × 509 × 3301) that reveals a Book of the Law passage and a countdown.
- 2012-01: The countdown ends in a list of GPS coordinates in Warsaw, Paris, Seoul, Sydney, Seattle, New Orleans, Hawaii, and Miami, among others; solvers on the ground find printed posters bearing the cicada emblem and a QR code taped to lampposts and phone poles.
- 2012: The trail continues through a phone number with a recorded countdown, book ciphers (including a passage identified from the medieval Welsh Mabinogion), and a private Tor hidden service; the round ends without a public announcement of a 'winner.'
- 2013-01: A second round begins, again on January 4th. Solver Marcus Wanner later says those who reached the end were quizzed about information freedom, online privacy, and opposition to censorship, then invited into a private online forum built around related projects.
- 2014-01: A third round launches, this time announced on Twitter. It introduces Liber Primus ('First Book'), 58 pages of an unknown 29-symbol runic alphabet ('Gematria Primus'); most of the book remains encrypted to this day.
- 2016-01: A new clue appears on Twitter, but its authenticity is disputed within the solver community and it is not followed by further verified activity.
- 2017-04: 3301 posts what is, to date, the last message authenticated with the group's original PGP key: a warning that any puzzle not signed by that key is not from them, urging solvers to keep verifying signatures. No further authenticated communication has appeared since.

## The evidence, claim by claim
- Claim: The puzzles required exactly the skill set an intelligence agency would want to test for: cryptography, steganography, obscure historical texts, Linux, Tor, and operational security.
  Evidence: Accurate, and it is the strongest plank of the theory. The 2012 round alone chained a Caesar cipher, OutGuess steganography, a Book-of-the-Law reference, a Mabinogion book cipher, and real-world GPS coordinates: a genuinely unusual breadth for an anonymous internet post, and one that mirrors puzzles agencies are known to have run, such as GCHQ's public 'Can You Find It?' recruitment challenge.
- Claim: A named CIA official flatly denied it, which believers read as exactly what a cover story would sound like.
  Evidence: Ron Patrick, the CIA's head of recruitment at the time, told a reporter, 'They thought for sure we were the ones behind it, but it's definitely not us.' That is a denial, not evidence either way, but no on-the-record confirmation from any agency has ever surfaced to counter it, and FOIA requests referencing Cicada 3301 have returned either heavy redaction or 'no records found,' which is consistent with either a classified program or simply nothing to find.
- Claim: Winners of the 2013 round were reportedly funneled into private projects after being questioned about their political views on privacy and censorship.
  Evidence: That part is corroborated by a named solver, Marcus Wanner, who described being invited into a closed forum organized around privacy and anti-censorship software after finishing the puzzle. It points toward a privacy-advocacy or cryptography collective at least as plausibly as toward a state agency: the described ideology (opposing surveillance and censorship) sits awkwardly with a recruitment pitch from the NSA or GCHQ.
- Claim: No solver has ever been confirmed to have gone on to work for a government agency because of Cicada.
  Evidence: Correct, and it cuts against the theory. Despite over a decade of an active, motivated solver community trying to trace outcomes, there is no verified case of a Cicada 3301 participant being subsequently hired by the NSA, CIA, GCHQ, or any other intelligence service. Every specific attribution (this agency, that society) remains speculation layered onto real puzzles.

## Why people believe it
- The puzzles are real, extraordinarily well-made, and impossible to dismiss as a prank, which makes 'some serious, well-resourced organization must be behind this' feel like the only proportionate explanation.
- Governments really have run public cryptography recruitment challenges before (GCHQ's code-breaking Christmas card puzzle is the clearest precedent), so the theory isn't reaching for something unprecedented, just something unconfirmed in this specific case.
- The total anonymity, the consistent PGP signature, and the total absence of any monetization or public claim of credit are unusual for an alternate-reality-game marketing stunt, which is the most mundane alternative explanation, and that absence of an obvious payoff pushes people toward more dramatic explanations.
- A decade of silence from 3301 itself, punctuated only by terse verification notices, leaves a vacuum that the solver community, invested, skilled, and numerous, has filled with theories rather than let the case go cold.

## Open questions
- Who actually built and ran Cicada 3301 has never been established by any confirmed source. A CIA recruiter denied his agency's involvement on the record, but no other agency, company, or society has ever claimed it, confirmed it, or been named by anything stronger than circumstantial fit. And the puzzle's own reference pool, spanning Mesoamerican numerals, a self-erasing piece of cyberpunk art, medieval Welsh prose, and historical runes, doesn't cleanly match the profile of any single known type of institution, state or private.
- What the puzzle was actually screening for is still unknown. The opening post promised only that solving it would 'lead you on the road to finding us,' and the closest thing to an explanation on record (Marcus Wanner's account of being asked to help build cryptographic dead-man's-switch software after the 2013 round) describes a project, not a purpose. Nobody has ever said, on the record and verifiably, what the finished software, or the minds recruited to build it, were ultimately for.
- Whether Cicada 3301 is still active in any form is unresolved. The last message authenticated with the group's original PGP key arrived in April 2017, warning solvers to keep verifying signatures; a clue posted to Twitter in January 2016 is disputed as inauthentic within the solver community; and nothing bearing a verified signature has appeared since 2017. That leaves it genuinely unknown whether the project ended, went fully dormant, or continues through channels no outside solver has ever found.
- Even the one detailed account of what happened to a 'winner' ends in a shrug rather than an answer. Marcus Wanner has said that after finishing the 2013 puzzle, he and other solvers were invited into a private channel and set to work on whistleblower dead-man's-switch software, only for the project to quietly wind down: a fellow solver told him simply that they'd been 'laid off,' and the group's private site went offline for good shortly after. Whether that was the entire operation folding, one cell being cut loose from something larger, or an experiment 3301 simply lost interest in has never been confirmed, and no equivalent account has ever surfaced from the 2012 or 2014 rounds' furthest-reaching solvers.

## Sources
- Cicada 3301 First Puzzle Walkthrough (documented, step-by-step solver reconstruction of the 2012 image, Caesar cipher, OutGuess steganography, and prime-number URL), Boxentriq: https://www.boxentriq.com/guides/cicada-3301-first-puzzle-walkthrough
- Cicada 3301 Liber Primus Guide (documented rune transcriptions, Gematria Primus alphabet, and the status of solved versus unsolved pages), Boxentriq: https://www.boxentriq.com/guides/cicada-3301-liber-primus
- Cicada: Solving the Web's Deepest Mystery (long-form reporting including the CIA recruitment office's on-the-record denial and named-solver interviews), Rolling Stone (2015): https://www.rollingstone.com/culture/culture-news/cicada-solving-the-webs-deepest-mystery-84394/
- cicada3301 archive (community-preserved primary artifacts: original puzzle images and intermediate steganographic payloads, all 75 Liber Primus page scans, and the PGP-signed messages authenticated with key ID 7A35090F, including the final April 2017 message), GitHub (krisyotam/cicada3301): https://github.com/krisyotam/cicada3301
- Cicada 3301 Code-breaking Scavenger Hunt Has the Internet Mystified (contemporaneous 2012 news coverage of the physical poster locations and early puzzle spread), CBS News (2012): https://www.cbsnews.com/news/cicada-3301-code-breaking-scavenger-hunt-has-the-internet-mystified/
- Cicada 3301 (overview confirming the January 4, 2012 launch date, and cataloguing the range of recruitment, corporate, secret-society, and alternate-reality-game theories proposed for its authorship), Wikipedia: https://en.wikipedia.org/wiki/Cicada_3301
- Solving Cicada 3301 (technical solver walkthrough documenting the Mayan-numeral Vigenère key, the Mabinogion and William Gibson's Agrippa book ciphers, and the path from the first 4chan image to the Tor hidden service), ClevCode: https://clevcode.org/cicada-3301/
- Cicada 3301: the mystery keeping cryptologists awake at night (an independent, on-the-record weighing of intelligence-agency, corporate, secret-society, and hobbyist explanations that settles on none of them), The Conversation: https://theconversation.com/cicada-3301-the-mystery-keeping-cryptologists-awake-at-night-21407

Rated by The Conspiratory, a neutral, sourced encyclopedia of conspiracy theories. Full page: https://theconspiratory.com/theory/cicada-3301