Mistfall Hunter Ciphers: Which NPC Takes Yours
Read the word printed on your cipher, not its name — each of the seven camp NPCs owns a themed vocabulary, and the one who knows your word pays the bonus.
The short answerThe word printed on your cipher names the NPC, not the cipher’s own name: Dramm takes Fire, Ashes and Anvil, Merimo takes Hay, Cheese and Salt Block, Pip takes Prayer, Mantra and Score.
Where are the words?
Open the cipher in camp or in your bag. It prints two clue words. 47 words are mapped across the seven camp NPCs below, and handing a cipher to the wrong one still pays the base result — the only thing at stake is the bonus.
All 47 words, grouped by who takes them. Tap any word to run it through the lookup. A dashed word is printed by the creator guide alone.
Every decipher NPC, word by word → — one page each for Soekja, Dew, Pip, Dramm, Cazarro, Sigrid, Merimo, plus the thirteen named ciphers reported to pay a bonus with them.
Ashen Cipher→Abyssal Cipher→Golden Cipher→Seal Cipher→Survivor Cipher→Forbidden Cipher→Bloodbound Cipher→Echo Cipher→Prayer Cipher→Elder Edict Cipher→Old World Cipher→Ancestral Cipher→Shadow Cipher→Lost Cipher→Nameless Cipher→
The decoder, with all 47 words A–Z →Or browse all seven decipher NPCs →
The ciphers
Which one are you holding?
15 ciphers with pages of their own. None of them has a fixed NPC — that is decided by the word on your copy, which the lookup above resolves.
Ashen Cipher
Read the word on your copy first — "give it to Sigrid" may be one player's cipher, not a rule.
Check the word your cipher carries and hand it to the NPC who owns that word. The advice everywhere else — including an earlier version of this page — is "give it to Sigrid for a Ripple Gem", and that is what one player got. But the bonus is chosen by the cipher's word rather than by its name, and Sigrid owns Sealing Wax, Residual Heat, Acid, Malt and Cloves. If your copy shows one of those, Sigrid is right. If it shows Anvil, Dramm is.
3sources · read the evidence →
Abyssal Cipher
There is no fixed NPC for it — read the word on your copy, then look that up.
It deciphers into currency at camp and is consumed on use. The question "which NPC takes the Abyssal Cipher" has no answer, and that is not a gap in the research: the bonus is matched by the word your cipher carries, not by its name, so the right NPC differs between two players both holding an Abyssal Cipher. No reward table has been published for it either, so the percentages you have seen belong to the Golden Cipher.
3sources · read the evidence →
Golden Cipher
The event cipher with a real published table — and four deadlines, not one.
Golden Ciphers drop from chests and monsters on every map and every intensity, and you have to extract with one for it to count. Bellring publishes the full reward table: nine in ten pay 450 Gyldenblod, and the ten-and-twenty decipher milestones are worth more than the gamble. The dates are the part everyone gets wrong — drops stop on 12 August, deciphering stays open to 19 August, and only the grand-prize eligibility cutoff is the 10th.
3sources · read the evidence →
Seal Cipher
Reported to be Soekja's — but the word on your copy outranks the name.
Survivor Cipher
Reported to be Cazarro's — but the word on your copy outranks the name.
Forbidden Cipher
Reported to be Dew's — but the word on your copy outranks the name.
Bloodbound Cipher
Reported to be Dramm's — but the word on your copy outranks the name.
Echo Cipher
Dew — and here the name is also her word, so the two rules agree.
Prayer Cipher
Pip — and Prayer is one of his words, so both rules agree.
Elder Edict Cipher
Pip — Elder Edict is one of his words as well as the cipher's name.
Old World Cipher
Reported to be Dew's — but nothing corroborates it, so read your word.
Ancestral Cipher
Reported to be Sigrid's — the desk that holds the one established pairing.
Shadow Cipher
Reported to be Soekja's — one source only, so read your word.
Lost Cipher
Reported to be Merimo's — one source, so the printed word decides.
Nameless Cipher
Reported to be Dramm's — and his forge words are the easiest to spot.
The evidence
Why the answer is the word, not the cipher
The reasoning behind the lookup, the sources it was built from, and the type-level pairings the rest of this niche publishes instead.
This reframes the question everybody asks. “Which NPC takes the Abyssal Cipher?” has no answer, because it depends on the word your copy happens to carry — which is why one write-up concluded no bonus applies to it at all. They went looking for a rule at the level of the cipher type, and there isn’t one.
It also puts a question mark over the most-repeated claim in this niche, including on our own Ashen Cipher page. “Give the Ashen Cipher to Sigrid” is most likely one player’s Ashen Cipher carrying one of Sigrid’s words — Sealing Wax, Residual Heat, Acid, Malt or Cloves — written up as a rule and copied sideways for a week. We cannot prove that, so it is offered as the reading the evidence favours rather than as a finding. Read the word on your own cipher before trusting either version.
- Whether the bonus pays once per cipher word or on every delivery. No source says, and the publisher only calls it a bonus for “the first delivery”.
- Whether these lists are complete. Two of the three sources record readers reporting words missing from them — and Search Console now names two of the missing ones. Ciphers print word pairs, and players search the pair: “malt dregs” draws 76 impressions where only Malt is catalogued, “hoarding and haggling” draws 71 where only Haggling is. Both halves belong to a vocabulary this file already has, so the lookup still answers correctly off the catalogued half; what is unpublished is whether Dregs and Hoarding are separate entries or the second word of a fixed pair. No source says, and neither has been added on the strength of a search query.
- Whether the named-cipher pairings hold. They come from one creator compiling Reddit and YouTube reports, and that creator says so.
- What the bonus item actually is. The press sources say only that it has a high chance of being Epic rarity.
- Whether Dew and Serenia are one NPC under two published names or a localisation split. The summary board prints both together, which is evidence but not a statement.
The seven NPC vocabularies and their camp roles. Lists Covenant and Interest under Cazarro, which the other source does not. Community-derived; the article itself notes a reader flagging missing words.
The same seven vocabularies, published independently a day later, and that the bonus item has a high chance of being Epic rarity. Traces the list to a Reddit thread rather than to the developers.
Official — that a correct NPC exists for each cipher and that delivering it there yields a bonus. The publisher does not publish the word list itself, which is why everything below is corroborated rather than official.
Each NPC’s card read off screen, in Spanish and English side by side, plus a summary board carrying all seven at once. It is the only source that pairs *named ciphers* to NPCs, that prints Prayer, Weaver, Guidance, Return and Victory Wine, and that titles the maiden’s card “Dew / Serenia” — settling a name this site had only one half of. The creator states plainly that not everything in it is confirmed and asks viewers to report corrections, so it is graded reported, never official.
The receipt
The type-level claims, and why they conflict
These are the pairings the rest of this niche publishes. They are not wrong so much as mis-levelled — each is a real observation of one cipher, generalised into a rule about a type.
- Ashen Cipherestablished
Sigrid
Ripple Gem, on top of the base payout
allthings.how (2026-08-02) and NerdsChalk (2026-08-03) independently, and consistent with the publisher's general rule.
- Golden Cipherreported
Sigrid
First-delivery bonus on top of the drawn reward
MistfallDB reports Sigrid, flagged there as community-reported and unconfirmed. The event page states a bonus exists without naming the NPC.
- Mantra Cipherreported
Pip
An upgrade piece
mistfallhunterguide.org. No primary source, and the beta event this cipher belongs to has ended.
- Abyssal Cipherreported
Merimo
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints “Código abismal (Abyssal Cipher)” on Merimo’s card. This row read “not established” until then, on the strength of NerdsChalk (2026-08-03) stating no NPC bonus applies — a conclusion drawn from looking for a type-level rule, which is the error `cipher-words.ts` describes. One creator compiling community reports does not settle it, so: reported.
- Ancestral Cipherreported
Sigrid
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints “Código ancestral (Ancestral Cipher)” on Sigrid’s card, beside the Ashen Cipher that two press outlets already put there. The pairing being thematically consistent with a row that is independently established is what makes it worth publishing at all.
- Mystic Cipherunknown
Not established
Unknown
No source names a pairing. Dew’s card is headed “mysticism and fate”, which is a temptation rather than an argument — the same reasoning would have handed the Ashen Cipher to the blacksmith.
- Prayer Cipherreported
Pip
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints “Código de oración (Prayer Cipher)” on Pip’s card, and Prayer appears in his keyword list on the same card. Game Rant titled its cipher-NPC article after this cipher on 6 August without pairing it, which is why the word reached this site only inside a citation URL until now.
- Old World Cipherreported
Dew
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints “Código del viejo mundo (Old World Cipher)” on the card headed “Dew / Serenia”.
- Echo Cipherreported
Dew
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on the card headed “Dew / Serenia”. Corroborated by the mechanic rather than by a second guide: Echo is one of Dew’s clue words, documented by Game Rant (2026-08-06) and allthings.how (2026-08-07), so the official word rule reaches her independently.
- Elder Edict Cipherreported
Pip
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Pip’s card. Like Echo and Prayer, the name is also one of the NPC’s documented clue words, so the word rule points the same way without the card.
- Forbidden Cipherreported
Dew
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on the card headed “Dew / Serenia”, beside the Echo and Old World Ciphers. No clue-word overlap corroborates it.
- Seal Cipherreported
Soekja
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Soekja’s card beside the Shadow Cipher. No clue-word overlap corroborates it.
- Shadow Cipherreported
Soekja
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Soekja’s card beside the Seal Cipher. “Shadow” is in no vocabulary, so the card is the whole of the evidence.
- Survivor Cipherreported
Cazarro
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Cazarro’s card. No clue-word overlap corroborates it.
- Bloodbound Cipherreported
Dramm
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Dramm’s card beside the Nameless Cipher. No clue-word overlap corroborates it.
- Nameless Cipherreported
Dramm
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Dramm’s card beside the Bloodbound Cipher. No clue-word overlap corroborates it.
- Lost Cipherreported
Merimo
Unknown — the pairing is reported, the payout is not
Desorden (2026-08-09) prints it on Merimo’s card beside the Abyssal Cipher. Worth reading next to the NerdsChalk (2026-08-03) conclusion that no NPC bonus applies to this desk — that was drawn from looking for a type-level rule, which is the error cipher-words.ts describes.
All seven offer Decipher: Soekja, Dew, Pip, Dramm, Cazarro, Sigrid, Merimo. Handing a cipher to the wrong one does not waste it — you still get the base payout, you simply do not get the bonus. Which is also why the word lookup above is worth a few seconds: the downside of checking is nothing, and the downside of guessing is an Epic-rarity item you never see.
Disambiguation
“Cipher” means three different things
The search results for the word mix all three, which is most of why this system reads as confusing.
Reward ciphers
Sealed items you hand to a camp NPC to open. The Ashen and Abyssal Ciphers in your launch mail are these, and so is the Golden Cipher from the live event. This is what most people mean.
Gylden Rush event ciphers
Golden, Ancestral and Mystic Ciphers, which feed the launch prize draw. Same decipher action, different reward table — and the only one of the three tables Bellring has published.
Cipher keys
Consumables that unlock endgame content rather than paying out rewards. The Legendary Dried Flower Knot is the one people mean: its drop rate went up with the 6 August update, and the same update opened the Einherjar Mist Lord, which carries a raised chance of Holy Weapons and Holy Forging Materials. It is not deciphered and no camp NPC touches it.
Both spellings turn up: the game writes it cipher, and a good share of players search cypher. They are the same item, and this page covers both.
A cipher — or cypher, if that is how you searched for it — is a sealed item you hand to a camp NPC to open. Deciphering unlocks at level 5, any of the seven camp NPCs can do it, and the cipher is consumed either way — so the only decisions that matter are which NPC you hand it to and whether you are ready to spend it. Bellring Games states that every cipher has one NPC who genuinely knows it and pays a bonus for it, and the match is made on the word the cipher carries rather than on its name. That is why the answer differs between two players holding the same kind of cipher, and why the lookup below asks for your word instead of your cipher.
Decipher outcomes
What is established, and what is only claimed
This block was rewritten on 7 August 2026 after we read Bellring's event pages rather than the coverage of them. Two rows we had graded unverified turned out to be official, and the correction is shown rather than quietly swapped.
- OfficialDeciphering appears on camp NPCs once you reach level 5.
- OfficialAll seven camp NPCs can decipher: Soekja, Dew, Pip, Dramm, Cazarro, Sigrid and Merimo.
- OfficialThe cipher is consumed when you accept the result. There is no second attempt.
- OfficialEvery cipher has one NPC who “truly knows how to decipher its secrets” and pays a bonus for it.
Bellring Games, Golden Cipher event page, read 2026-08-07. This is a general rule, not a quirk of one cipher.
- OfficialThe 90.7761% / 450 Gyldenblod table is real, published in full, and its eighteen rows sum to 100.0001%.
Bellring Games, Golden Cipher event page. This site previously graded it unverified. That was wrong and the row is corrected rather than removed.
- UnverifiedThat the published table applies to the Ashen or Abyssal Cipher.
The table is the Golden Cipher's. Write-ups that print it under an Ashen Cipher heading are asserting a link no source makes.
- CorroboratedSigrid adds a Ripple Gem to the Ashen Cipher.
allthings.how (2026-08-02) and NerdsChalk (2026-08-03), independently.
Supply
Where ciphers come from
Two routes: the launch mail, which expires, and the loot table, which does not.
One Ashen and one Abyssal Cipher are sitting in every player’s in-game mail as part of the second-wave launch reward. That copy has a deadline: log in before 2026-09-01 00:00 UTC+0 or it expires. It is a gift rather than the only supply, so missing it costs you two ciphers, not access to the system.
During a run, ciphers come from:
- Locked chests, which are the most reliable placed source.
- Marked enemies — the ones carrying a purple brand — and the containers they guard.
- Unidentified items: every one of them has a chance to resolve into a cipher.
Securing one matters more than finding it. A cipher in your ordinary bag goes to whoever kills you on the way out, which is the argument for putting it in the safe pouch the moment it drops.
The Gylden Rush
Four deadlines, not one
Every write-up in this niche says the event ends on 10 August. Bellring's own pages list four separate windows, and the 10th is only the grand-prize eligibility cutoff. These rows read the clock.
Next deadline
Decipher window closes in 22h 40m.
Ciphers stop dropping on 12 August but stay openable for another week. Anything still sealed when this closes is wasted, so spend them before it.
- Grand-prize eligibilityClosed
30 Jul 01:00 – 10 Aug 23:59:59 UTC+0
Reach Lv.5, unlock the Golden Cipher feature and extract from at least one match inside this window to enter the Alienware PC draw. Miss it and you can still open ciphers — you are simply not in the draw.
- Golden Envoy Faction WarClosed
30 Jul – 12 Aug UTC+0
The fortnight in which streamers can run Bounty Mode. After it closes, killing a creator no longer drops a Golden Cipher.
- Golden Cipher drop scheduleClosed
30 Jul 01:00 – 12 Aug 17:00 UTC+0
The last moment a Golden Cipher can enter your inventory from a chest, a monster or an envoy. Ciphers already banked are unaffected.
- Decipher windowOpen · 22h 40m left
30 Jul 01:00 – 19 Aug 17:00 UTC+0
Ciphers stop dropping on 12 August but stay openable for another week. Anything still sealed when this closes is wasted, so spend them before it.
- Gylden Rush overallOpen · 7d 6h left
30 Jul 01:00 – 26 Aug 00:59 UTC+0
The umbrella event window the publisher prints on the hub page.
Daily envoy hunt hours
29 July – 11 August · 18:00 – 22:00 daily
30 July – 12 August · 17:00 – 21:00 daily
A window being open means creators may switch Bounty Mode on, not that one is in your lobby. Bounty Mode holds eight charges and regenerates one every thirty minutes, so even an active envoy is not marked continuously.
The event runs a prize draw on collected ciphers, with an Alienware gaming PC at the top of the board. It brings three cipher types of its own — Golden, Ancestral and Mystic — which are event currency rather than the mail rewards. The published reward table and prize board sit on the Golden Cipher page, and the envoy bounty system has its own.
Cipher FAQ
From here
Now the part the cipher was for
A decipher pays out into an economy with its own deadlines, and the mail copy expires on 1 September whether or not it was opened.
You are here
You have worked out who takes your cipher
- 1Every decipher NPC, word by word
Seven pages, one per camp NPC, each carrying that NPC’s full keyword list and the ciphers reported to pay a bonus there — plus the frame it was all read off.
- 2Where the seven NPCs actually stand
The word on your cipher names the NPC, and the NPC is somewhere specific in Windrest. Sigrid is in the Victory Wine area, attached to the tavern.
- 3What your payout is worth
Gyldenblod and gems both price differently by region and platform. The ledger is browser-local, so checking costs you nothing.
- 4The other consumable people confuse with these
The Dried Flower Knot is a cipher key rather than a cipher: no NPC takes it, and it opens the Mist Lord fight that drops Holy weapons.
Related
Researched by Mistfall Hunter Guide Editorial Team