A substitution cipher swaps every letter for another letter and keeps that swap for the whole message. The text still looks like text — same word lengths, same spacing, same doubled letters — it just isn't in English yet.
Word shapes survive. If you can see one- and two-letter words, an apostrophe, or the same letter doubled in the middle of a word, you are almost certainly looking at a substitution.
ROT13 A Caesar shift of exactly 13 — which means encoding and decoding are the same move.
TREASURE MAP
shift 13
GERNFHER ZNC
Every letter has been swapped for another one, and the same swap is used all the way through. Letter shapes stay put — word lengths and spacing are still real clues. This one is ROT13. The key: shift 13. A Caesar shift of exactly 13 — which means encoding and decoding are the same move. Take the first letter, G, and walk it back 13 places: it lands on T. Do that to every letter and the message reads T R E… The answer was TREASURE MAP.
Start with the short words and the most common letter. In English that letter is usually E, and a lone letter is usually A or I. Two or three correct guesses tend to collapse the rest of the message on their own.
One a day, three guesses, and a streak that breaks the moment you miss one. Today’s is cipher #1.