Website profiles · Technology insights · Alternatives

untap.in No paid content found

Categories: Games & Board Games

Play-test your CCG and TCG decks in the browser online live with opponents around the world. Untap the potential in your deck!

Visit website

Updated: 2026-09-30 09:48 Language: English (default) Access: Normal

Profile views 1 Outbound visits 0
Untap.in Full homepage screenshot
Editorial Review

Website Review

What is Untap.in?

Untap.in is a free, browser-based virtual tabletop for play-testing trading card games. You build a deck from a card database, open a table, and play against live opponents or by yourself — with no download, install, or patching. Crucially, it does not enforce game rules, so it works like sitting across a real table: you and your opponent handle triggers, priority, and legality yourselves.

What you can do on it:

  • Build decks — search card databases for 40+ games, import a plain-text decklist or one by URL, and share decks with a link.
  • Play live — open a table or join from a public lobby on desktop, tablet, or phone.
  • Goldfish solo — test opening hands, mulligans, and lines against an empty seat.
  • Draft, cube, and sealed — run booster drafts with friends; bots fill empty seats.
  • Spectate and rewind — watch matches, undo a misclick, or replay a finished game turn by turn.
  • Custom games — upload your own cards with art and text and build decks from them like any published game.

Supported titles include Magic: The Gathering, Pokémon TCG, Yu-Gi-Oh!, One Piece Card Game, Disney Lorcana, Flesh and Blood, Star Wars: Unlimited, Digimon Card Game, Dragon Ball Fusion World, Final Fantasy TCG, Cardfight!! Vanguard, and Android: Netrunner, plus 30+ more.

Who it suits, and the trade-off. It fits players who want cheap, fast repetition: testing a new brew, learning a matchup, or prototyping a homebrew set without buying cards or waiting for a client to update. The cost is that nothing is automated — you track life totals, counters, and rules interactions yourself, so a careless opponent or a misclick can distort your testing. If you want enforced rules and matchmaking, a rules-engine client is a better fit; if you want to test ideas quickly with a friend, Untap.in is the lighter option.

Next step: paste an existing decklist into the deck builder, then goldfish ten opening hands against an empty seat. If the hands look functional, open a public table and play a real opponent to see how the deck behaves under interaction. For paper players, Untap.in is also a reasonable way to test a Commander or draft pod before committing to buying the cards.

How do I import an existing decklist into Untap.in?

Paste or link it. Untap.in's own description says you can "paste a plain-text decklist or import one by URL from popular deck-building sites," then start play-testing right away. There is no separate import tool to learn: the deck builder is where the list goes in.

Two routes into the deck builder

Route When it fits What to watch for
Plain-text paste You have a list in a forum post, notes app, spreadsheet or chat Keep one card per line, with quantity first and set/collector info only if you need a specific printing
Import by URL Your list already lives on a popular deck-building site The URL must point at the saved list, not your account page or an edit view

A concrete walkthrough

Say you have a 60-card list copied from a friend's message. Open Untap.in in your browser, go to the deck builder, pick the game your list belongs to — Magic: The Gathering, Pokémon TCG, Yu-Gi-Oh!, One Piece Card Game, Disney Lorcana, Flesh and Blood, Star Wars: Unlimited, Digimon Card Game, Dragon Ball Fusion World, Final Fantasy TCG, Cardfight!! Vanguard, Android: Netrunner and more are listed — then paste the text into the import field and confirm. Check the count and the sideboard/extra-deck section against your original before you save.

The URL route is the same idea with less manual work. Copy the share or export link from the site where the deck is saved, paste it into the import-by-URL option, and let Untap.in pull the entries in. It works best when the source site exposes a clean text or export view rather than a JavaScript-heavy page.

After it lands

  • Share the finished deck with a link so testing partners can load the same list.
  • Goldfish it solo first: opening hands, mulligans and your early lines against an empty seat.
  • Then take it to the public lobby for a live match, or run a draft, cube or sealed pod with bots filling empty seats.
  • If something imports wrong, fix it by hand — Untap.in does not enforce rules, so a misread card will not be flagged for you.

If your list is for a homebrew game

You are not limited to published games. Upload your own cards with art, text and whatever fields your game needs, then build decks from them the same way. Solo testing is the quickest way to shape a set: goldfish against an empty seat, or use the supporter Deck vs Deck mode to pilot two prototypes against each other.

If the import fails

Most failures come from three things: the wrong game selected in the deck builder, a URL that points at a page rather than an export, or a pasted list with formatting the parser cannot read — extra columns, blank lines mid-list, or quantities written as words. Reformat to quantity card name, one per line, and try again.

For anything the site does not explain, the Untap.in wiki and the contact address shown on the site are the next step. If you want a second place to keep lists before importing, Moxfield and Archidekt are established deck-building sites for Magic, while Limitless TCG covers Pokémon.

Can I play-test a custom or homebrew card game on Untap.in?

Yes. Untap.in supports custom cards: you upload your own cards with art, text and whatever fields your game needs, then build decks from them the same way you would for a published game. The platform does not enforce any game's rules, so a homebrew set sits on the table on equal footing with Magic, Pokémon or anything else.

What that means in practice

  • You define the card data yourself, so mechanics that no existing game supports are fine — you and your opponent just resolve them manually, as you would across a physical table.
  • Deck building, importing lists, opening a table, goldfishing against an empty seat, and playing live all work the same for your cards as for supported games.
  • Because there is no rules engine, both players need to know the rules and agree on how effects resolve. Nothing will stop an illegal play.

A practical way to start

  1. Upload a small first set — enough for two 40-card decks — rather than a whole expansion.
  2. Goldfish each deck solo to check opening hands, curve and whether any card is dead weight.
  3. Move to a real opponent only once the basics feel right.

The page notes that supporter mode "Deck vs Deck" lets you sit on both sides of the table, which is the quickest way to test two prototypes against each other without recruiting a playtester. For solo iteration, that is more useful than goldfishing alone, since you see how the two decks actually interact.

Trade-offs to expect

The upside is speed and zero cost: no printing, no proxies, no downloads, and you can iterate between matches. The downside is that everything is manual — triggers, life totals, counters and shuffling are on you, so games run slower than on a rules-enforced client such as MTG Arena, and misplays caused by forgetting a trigger are common. Untap.in is a play-testing table, not a referee.

If your goal is refining wording and balance before a print run, this works well. If your goal is a polished digital demo with automatic rules, you will eventually need something built for that.

What is the best way to test a deck solo before playing live opponents?

Use Untap.in's Goldfish mode as your first stop. It lets you test opening hands, mulligans, and your early lines against an empty seat, so you can find clunky draws and sequencing mistakes without spending a real opponent's time. The platform does not enforce rules, so you have to track your own triggers and life totals — which is actually useful practice, because it exposes gaps in your understanding of the deck.

A practical solo routine

  1. Goldfish 10 opening hands. Note how often you keep, mulligan, or stall on lands/resources.
  2. Play out the first 4–5 turns of each hand, narrating your ideal line. If you cannot describe a clear plan, the deck has a problem.
  3. Then test against a real deck. For this, Untap.in's Deck vs Deck supporter mode lets you sit on both sides and pilot two prototypes against each other — useful for testing a new build against a known aggressive or control list.
  4. Only after that should you open a public table or join the lobby. By then you will know your keepable hands and your turn-one-through-four defaults.

What to watch for

  • Mulligan decisions: Solo testing is the cheapest place to learn which hands are traps.
  • Mana or resource consistency: Goldfishing reveals color screw and curve gaps quickly.
  • Combo lines: Run your combo against an empty board until the sequence is automatic.
  • Sideboard plans: Note which cards felt dead; that informs what to cut before live play.

Where Untap.in fits

Untap.in is a free, browser-based table for play-testing CCG and TCG decks — no download, no install. It supports 40+ games including Magic: The Gathering, Pokémon TCG, Yu-Gi-Oh!, One Piece Card Game, Disney Lorcana, Flesh and Blood, Star Wars: Unlimited, Digimon Card Game, and many more. It also supports custom cards, so you can upload your own art and text and test a homebrew exactly like a published game. Decklists can be pasted as plain text or imported by URL from popular deck-building sites.

Trade-off to know

Because Untap.in does not enforce rules, solo testing depends entirely on your own discipline. If you skip triggers or misread a card, you will rehearse the mistake. Keep a rules reference open and be honest about your board state. For a second opinion on card interactions, Scryfall is a reliable card database for Magic, and Gatherer is the official one. For Pokémon, Pokémon hosts official card resources.

Next step

Goldfish until your first four turns are automatic, then use Deck vs Deck to test against a real opposing strategy before you take the list into the public lobby.

How do I run a booster draft with friends if I don't have enough players?

Use the bot-fill option in Untap.in's draft, cube, and sealed tools. The page states that bots fill any empty seats so a pod is always ready, so you can start a booster draft with however many friends you have and let bots take the rest of the seats.

A practical setup:

  1. Pick the game and draft format you want, then open the draft/cube/sealed tool.
  2. Invite your friends into the pod and let them join their seats.
  3. Leave the remaining seats to bots rather than waiting for more humans.
  4. Run the draft as normal, then play out the matches with the decks everyone built.

This matters most when you have two or three people and a draft normally needs eight. Bots keep the pod moving instead of leaving you waiting in a lobby, and the page notes that Untap.in does not enforce game rules, so you and your friends still handle picks, passes, and any table talk yourselves.

If you want a human-only pod, the alternative is to invite more players or postpone, but the bot route is the intended fix on this platform. For a small group, a cube or sealed session is often a smoother fit than a full booster draft, since fewer seats need filling and deck building starts from a fixed pool.

Start by creating the draft table, then set bot seats before you begin picking so the pod is full from the first pack.

Which trading card games can I play-test on Untap.in?

Untap.in supports 40+ card games, with the best-known ones listed directly on the site.

Games named on the page

  • Magic: The Gathering
  • Pokémon TCG
  • Yu-Gi-Oh!
  • One Piece Card Game
  • Disney Lorcana
  • Flesh and Blood
  • Star Wars: Unlimited
  • Digimon Card Game
  • Dragon Ball Fusion World
  • Final Fantasy TCG
  • Cardfight!! Vanguard
  • Android: Netrunner

The page also says "and 30+ more," and points to a full supported-games list. So if your game isn't in the list above, check that index rather than assuming it's missing — the headline names are just the popular ones.

Two things that matter more than the list

Rules are not enforced. Untap.in is a virtual table, not an automated engine. You and your opponent track life totals, triggers, and timing yourselves, the way you would across a physical table. That's why the game list can be so broad: adding a game doesn't require coding its rules.

You can add your own. The page states you can upload custom cards with your own art, text, and fields, then build decks from them like any published game. If you're designing a game or testing a cube of custom cards, that puts Untap.in in a different category from rules-enforcing clients.

Which game should you pick?

Your situation Reasonable choice
You want to test a competitive constructed deck Any of the major listed games; expect opponents in the popular ones
You play a niche or older TCG Check the full supported-games index first
You're building a homebrew or custom set Upload your own cards and goldfish or play both sides
You mainly want to test opening hands and mulligans Goldfish solo against an empty seat, any supported game

Next step

Open the supported-games list on Untap.in and search for your exact game before you invest time building a list. If it's there, import an existing decklist by pasting plain text or a URL, then goldfish a few opening hands before you sit down against a live opponent.

Related questions

More questions →
What Is a Deck Builder and How Do You Use One for TCGs?

A deck builder is the part of a card-game platform where you search a card database and assemble a deck list. On Untap.in it sits next to a virtual table, so the same tool that lets you build also lets you import an existing list, share it by link, and immediately play-test it against live opponents or an empty seat. Use it when you want to construct, store, or iterate on a deck before or between matches; it is not a rules engine, so it will not stop you from building something illegal.

Deck builder vs. deck tester vs. play-testing table

These three get used interchangeably, but they do different jobs:

Tool What it does What it does not do
Deck builder Search card databases, add and cut cards, save a list Enforce format legality or rules
Deck tester / goldfish Draw opening hands, mulligan, run your lines against no opponent Simulate an opponent's decisions
Play-testing table Play a full game against a live opponent Auto-resolve rules or triggers

Untap.in combines all three. You build in the deck builder, goldfish solo to check opening hands and mulligans, then open a table or join from the public lobby for a real match. Because the platform does not enforce rules, you and your opponent track the game state the way you would across a physical table.

How to build a deck

  1. Pick the game you are building for. Untap.in hosts full card databases for 40+ games, including Magic: The Gathering, Pokémon TCG, Yu-Gi-Oh!, One Piece Card Game, Disney Lorcana, Flesh and Blood, Star Wars: Unlimited, Digimon Card Game, Dragon Ball Fusion World, Final Fantasy TCG, Cardfight!! Vanguard, and Android: Netrunner.
  2. Search the card database for the cards you want and add them to the list.
  3. Save the deck. You can share it with a link so others can view or copy it.
  4. Move to testing: goldfish it solo, or take it into a live game.

If you already have a list, skip the searching. Paste a plain-text decklist, or import one by URL from a popular deck-building site, and start play-testing straight away.

Building for a custom or homebrew game

Untap.in is not limited to published games. You can upload your own cards — art, text, and whatever fields your game needs — and build decks from them exactly like a published game. Since no rules are enforced, a homebrew set behaves the same as anything else on the table.

For fleshing out a prototype, solo play is the fastest route: goldfish a deck against an empty seat, or use Deck vs. Deck (a supporter mode) to sit on both sides and play two prototypes against each other.

Draft, cube, and sealed

The same platform covers limited formats. You can run booster drafts with friends, and bots fill any empty seats so a pod is always ready. That makes it usable for testing a cube or a sealed pool without coordinating a full group.

What to check before you commit

  • Rules enforcement: none. If you need the platform to catch illegal plays or auto-resolve triggers, this is not that kind of tool.
  • Cost: Untap.in states it is free to play-test — building, goldfishing, drafting, and live multiplayer at no cost — with optional supporter perks. Deck vs. Deck is listed as a supporter mode.
  • Install: none required. It runs in a browser on desktop, tablet, and phone, and can install as an app from the browser.
  • Affiliation: Untap.in describes itself as an independent, fan-built play-testing platform, not affiliated with or endorsed by the game publishers.

If your goal is to get a list out of your head, onto a table, and in front of an opponent quickly, the build-import-share-test loop is the whole workflow. If your goal is a rules-accurate simulation, look for a platform that enforces game rules instead.

What Is Untap.in and How Do You Play-Test Trading Card Games Online?

Untap.in is a free, browser-based virtual table for play-testing CCG and TCG decks. You build or import a deck, then test it against live opponents worldwide or against an empty seat — no download, install, or patching required. It's the right tool if you want to rehearse lines, test opening hands, or try a brew before buying cards, and you're comfortable managing the rules yourself: Untap.in does not enforce any game's rules, so you play the way you would across a real table.

How to start play-testing

  1. Build or import a deck. Search the full card database for any supported game, or paste a plain-text decklist or import one by URL from popular deck-building sites. You can also share your deck with a link.
  2. Choose how to test. Open a table or join a game from the public lobby for live multiplayer, or goldfish solo against an empty seat to check opening hands, mulligans, and your lines before a real match.
  3. Play and review. Watch live matches, undo a misclick, or play a finished game back turn by turn.

Because the platform doesn't enforce rules, both players track life totals, triggers, and state themselves — the same as sitting across a physical table.

What you can do on Untap.in

  • Build decks — full card databases for 40+ games, with plain-text or URL import and shareable links.
  • Play live — open a table or join from the public lobby on desktop, tablet, or phone.
  • Goldfish solo — test opening hands and mulligans against an empty seat.
  • Draft, cube, and sealed — run booster drafts with friends; bots fill empty seats so a pod is always ready.
  • Spectate and rewind — watch live matches, undo a misclick, or replay a finished game turn by turn.
  • Custom games — upload your own cards (art, text, and whatever fields your game needs) and build decks from them like any published game.

Supported card games

Untap.in supports 40+ games, including:

Magic: The Gathering Pokémon TCG Yu-Gi-Oh!
One Piece Card Game Disney Lorcana Flesh and Blood
Star Wars: Unlimited Digimon Card Game Dragon Ball Fusion World
Final Fantasy TCG Cardfight!! Vanguard Android: Netrunner

…and 30+ more.

Common questions

Is it free? Yes — building decks, goldfishing, drafting, and joining live multiplayer games are all free. Optional supporter perks help keep the servers running, and some modes (like Deck vs Deck) are supporter features.

Do I need to download anything? No. It runs in your web browser on desktop, tablet, and phone, and can install as an app straight from the browser.

Can I import a decklist I already have? Yes — paste plain text or import by URL from popular deck-building sites, then start testing immediately.

Can I play my own custom card game? Yes. Upload your own cards and build decks from them exactly like a published game. Since no rules are enforced, a homebrew set behaves the same as anything else on the table — goldfishing or Deck vs Deck is the fastest way to flesh one out.

Untap.in is an independent, fan-built play-testing platform and is not affiliated with, endorsed by, or sponsored by the game publishers whose cards it supports.

What Is a TCG (Trading Card Game)?

A TCG, or trading card game, is a card game played with cards that are sold in randomized packs, collected, traded between players, and assembled into custom decks before you sit down to play. The defining feature is the "trading" part: your collection is a resource you build up and swap, and deck construction is as much a part of the hobby as the matches themselves. If you want to try one without buying cards, browser-based tables like Untap.in let you build a deck and play-test it against live opponents for free.

TCG vs. CCG: what's the difference?

The two terms describe the same kind of game, and most players use them interchangeably.

Term Stands for Emphasis
TCG Trading Card Game Cards circulate between players — buying, collecting, trading
CCG Collectible Card Game Cards are collected, often from randomized packs

In practice, whether a game is called a TCG or a CCG usually comes down to branding rather than mechanics. Magic: The Gathering, Pokémon TCG, and Yu-Gi-Oh! are all commonly described both ways. The "collectible" side covers how cards are acquired; the "trading" side covers what you do with them afterward.

The core loop of a trading card game

Playing a TCG follows a repeating cycle:

  1. Acquire cards — through booster packs, starter decks, singles, or trades with other players.
  2. Build a deck — choose a format and a strategy, then select the specific cards that support it.
  3. Play matches — shuffle up and face an opponent, using the deck's rules to resolve what happens.
  4. Revise — after playing, swap cards in and out based on what worked and what didn't.

Step 4 is where most of the time goes. A deck is rarely finished; it's tuned against the opponents and formats you actually face.

What playing a match actually involves

A match is two players (sometimes more) using their constructed decks under a shared rule set. Each game has its own turn structure, resource system, and win condition, but the common shape is:

  • Draw an opening hand and decide whether to keep it (many games allow a mulligan).
  • Take turns playing cards, spending whatever resource the game uses.
  • Reduce the opponent's life total, deck them out, or hit some other defined win condition.

Rules enforcement varies by where you play. Official tournaments and digital clients apply the rules automatically; playing across a physical table — or on a rules-agnostic online table — means the players track the game state themselves.

Which games count as TCGs?

The category is large. Well-known examples include:

  • Magic: The Gathering
  • Pokémon TCG
  • Yu-Gi-Oh!
  • One Piece Card Game
  • Disney Lorcana
  • Flesh and Blood
  • Star Wars: Unlimited
  • Digimon Card Game
  • Final Fantasy TCG
  • Cardfight!! Vanguard
  • Android: Netrunner

Untap.in, a browser-based play-testing table, lists 40+ supported games including all of the above, and also lets you upload your own cards to build decks for a custom or homebrew game.

How to start without buying cards

If you want to learn a TCG or test a deck idea before committing money, you can play-test online in a browser. On Untap.in:

  1. Build a deck — search the card database for a supported game, or import an existing decklist as plain text or by URL from a deck-building site.
  2. Goldfish solo — play against an empty seat to check opening hands, mulligans, and your early turns before facing anyone.
  3. Play live — open a table or join a game from the public lobby on desktop, tablet, or phone.
  4. Draft or sealed — run a booster draft with friends; bots fill empty seats so a pod is always ready.
  5. Review — spectate live matches, undo a misclick, or replay a finished game turn by turn.

Two things to know before you start: Untap.in does not enforce any game's rules, so you and your opponent track the game state the way you would across a real table. And it runs in the browser with nothing to download or patch. The site describes itself as free to play-test, with optional supporter perks; check the site directly for current details on any paid features.

That rules-agnostic approach is a trade-off worth weighing. It's flexible enough to handle homebrew cards and casual play exactly like a published game, but it won't catch illegal plays for you — which makes it better suited to players who already know the game or are learning it alongside someone who does.

What Does CCG Mean in Card Games?

CCG stands for collectible card game: a card game where players build custom decks from a pool of individually collected cards and play them against opponents. In everyday use, CCG and TCG (trading card game) describe the same hobby — most games fit both labels, and the difference comes down to emphasis rather than rules. If you're searching for a game to play or a place to test a deck, treat the two terms as interchangeable.

CCG vs. TCG: What's the Actual Difference?

Both terms describe games with the same core loop: collect cards, build a deck, play matches. The distinction is mostly about which part of that loop the name highlights.

Term Full name Emphasis
CCG Collectible card game Collecting cards and building decks from your collection
TCG Trading card game Trading cards with other players to complete decks

In practice, publishers and players mix the terms freely. Magic: The Gathering, Pokémon TCG, and Yu-Gi-Oh! are all commonly called both CCGs and TCGs. If a game has booster packs, a secondary market, and deck construction, either label fits.

Why the Terms Get Used Interchangeably

The overlap is real, not just marketing. A game only works as a CCG if cards are collectible in randomized or limited quantities — which is exactly what makes them tradable. Conversely, a TCG needs deck building to be meaningful, or there'd be nothing to trade toward. The two concepts describe the same product from different angles.

What Defines a CCG?

Three mechanics show up in essentially every collectible card game:

  • Collection — cards are acquired in packs, starter decks, or singles, and rarity varies.
  • Deck building — you choose a subset of your cards, usually with size and copy limits, before playing.
  • Opponent play — matches are played against another player, not just solitaire-style puzzles.

Some games add draft and sealed formats, where you build a deck on the spot from freshly opened packs. Others support cube drafts, where a curated pool is reused. These formats still count as CCG play because collection and deck building remain central.

Examples of Well-Known CCGs

Games you'll see labeled as CCGs or TCGs include:

  • Magic: The Gathering
  • Pokémon TCG
  • Yu-Gi-Oh!
  • One Piece Card Game
  • Disney Lorcana
  • Flesh and Blood
  • Star Wars: Unlimited
  • Digimon Card Game
  • Dragon Ball Fusion World
  • Final Fantasy TCG
  • Cardfight!! Vanguard
  • Android: Netrunner

Beyond these, dozens of smaller and older titles follow the same structure.

Where to Play-Test CCG Decks Online

If you want to try a deck before buying cards or committing to a tournament, Untap.in is a browser-based table for play-testing CCG and TCG decks. It requires no download or install and runs on desktop, tablet, and phone.

What you can do there:

  • Build decks — search card databases for 40+ games, or import a decklist as plain text or by URL.
  • Play live — open a table or join a game from the public lobby against opponents worldwide.
  • Goldfish solo — test opening hands, mulligans, and your lines against an empty seat.
  • Draft, cube, and sealed — run booster drafts with friends, with bots filling empty seats.
  • Spectate and rewind — watch live matches, undo a misclick, or replay a finished game turn by turn.

Two things to know before you start: Untap.in does not enforce any game's rules, so you play the way you would across a real table — you're responsible for tracking life totals, triggers, and legality. And it supports custom card games: you can upload your own cards with art, text, and whatever fields your game needs, then build decks from them like any published game.

The site states that play-testing is free, including deck building, goldfishing, drafting, and live multiplayer, with optional supporter perks. If cost matters to you, confirm current terms on the site before relying on that.

How Multiplayer Works in Code Breaker's Mastermind-Style Game

Code Breaker is an online Mastermind-style logic game where you crack a hidden colour code using deduction and feedback. The site describes it as a single-player puzzle with a Top 10 Players list, and the available page evidence does not document a live two-player or head-to-head multiplayer mode. So if you are looking for "multiplayer" here, the practical answer is: treat it as you against the game's secret code, with the shared leaderboard as the competitive layer. The steps below cover how that works, how to set a code for someone else to try, and what to check if a session will not start.

What "multiplayer" means in Code Breaker

Interpretation Supported by the site? What it looks like in practice
Two players on one device, taking turns Not documented You would need to pass the device and agree on a secret code manually
Online matchmaking against another player Not documented No lobby, invite, or room system is described
You vs. the computer's hidden code Yes — this is the core game You make guesses, the game returns feedback until the code is cracked
Competition via a shared scoreboard Yes — the Top 10 Players list Your result is compared with other players' results over time

The site's own description — "the classic game of logic and deduction. Can you crack the code?" — frames the challenge as solver versus code, not solver versus solver. The Top 10 Players list is the only competitive element named in the source material.

How a round actually plays out

The game follows standard Mastermind rules:

  1. A secret code of coloured pegs is set (by the game, or by a friend if you are playing a manual two-player variant).
  2. The code breaker makes a guess by placing a row of coloured pegs.
  3. The game returns feedback, usually as black and white pegs:
    • Black peg — correct colour in the correct position.
    • White peg — correct colour in the wrong position.
  4. You use that feedback to narrow down the possibilities and guess again.
  5. You win by matching the code exactly within the allowed number of turns; you lose if you run out of guesses.

If you want to play against another person without an online mode, the workable approach is a shared screen: one player sets a code and keeps it hidden, the other guesses, and you swap roles after each round. The feedback logic stays the same — the person who set the code gives the black and white peg counts.

Setting up a code for an opponent

Because the site does not document an opponent-invite flow, setting a code for someone else is a manual arrangement:

  • Agree on the number of pegs in the code and the number of colours in play before you start.
  • The code setter writes the code down or memorises it and does not reveal it.
  • After each guess, the setter calculates black and white pegs and reports only the counts, never which peg is which.
  • Track turns so both players get the same number of attempts.

Winning, losing, and scores

  • Win condition: the guessed row matches the secret code exactly.
  • Lose condition: you exhaust your allowed guesses without matching the code.
  • Scoring: the site maintains a Master CodeBreaker Top 10 Players list, so results feed into a public ranking rather than a private match score.

If a multiplayer game won't start

Since no online multiplayer session is documented, most "it won't connect" problems come from expecting a feature that is not described. Check these in order:

  • Confirm you are on the correct game page and that the game itself loads and accepts guesses.
  • If you are attempting a two-player variant, confirm both players agree on code length and colour set — mismatched rules cause confusing feedback.
  • If you expected an invite or lobby, note that none is listed in the site's description; use the shared-screen method instead.
  • If the page will not load at all, that is a site or connection issue, not a multiplayer setup issue.

Bottom line

Code Breaker is a solo deduction game with a public Top 10 leaderboard, not a documented online multiplayer title. Play it as you versus the hidden code, and if you want a head-to-head game, run it manually with a friend on one screen using the same black-and-white peg feedback.

Website Overview

Limited stack disclosure and few obvious backend markers suggest a more restrained public footprint. That reduces easy fingerprinting clues but is not proof of overall security. An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality.

Domain and Registration

Registered in 2013, this domain has about 13 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is NAMECHEAP, a widely used domain service provider. Registration contact information is publicly available through RDAP. The domain uses the common .in extension, which is not an independent safety signal.

DNS and Email

The observed email authentication setup is incomplete: DMARC is missing. Nameservers are provided by linode.com, indicating managed DNS hosting. MX records point to the Google Workspace email service. No CNAME was found; the observed records resolve directly to addresses. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.

TLS and Certificates

The certificate uses an RSA 4096-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.

HTTP and Browser Security

X-Powered-By exposes backend information: Untap. The checked browser-security headers were not detected, leaving fewer explicit browser-side safeguards. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No obvious internal addresses or debug information were found in the headers. No explicit CDN or WAF marker was found in the response headers.

Technology Stack Analysis

No obvious technology stack is exposed. This may reflect restrained information disclosure, although the underlying technologies remain unknown.

Search and Social Sharing

Twitter Card metadata is configured. JSON-LD includes Product or Offer data, potentially supporting eligible product search features. The title has 46 characters, within a common display range. A meta description is present, with 126 characters. The observed directives allow indexing and link following.

Hosting and Email

DNSlinode.com
HostingAkamai Connected Cloud
EmailGoogle Workspace
Location United States flagFremont, California, United States 104.200.24.239

User reviews (0)

  • No reviews yet.

Pages, Search and Sharing

Meta descriptionPlay-test your CCG and TCG decks in the browser online live with opponents around the world. Untap the potential in your deck!
Canonical URLhttps://untap.in/
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 1 allowed · 0 disallowed
  • Allow/

Registration details RDAP / WHOIS

RegistrarNAMECHEAP
Registered2013-09-16
Expires2027-09-16
Domain statusclient transfer prohibited
Nameserversns1.linode.com、ns2.linode.com、ns3.linode.com、ns4.linode.com、ns5.linode.com
DNSSECunsigned

DNS records

TypeNameValueTTLPriority
Auntap.in104.200.24.2397200—
Auntap.in104.237.154.2087200—
Auntap.in173.255.241.267200—
MXuntap.inASPMX.L.GOOGLE.COM36001
MXuntap.inALT1.ASPMX.L.GOOGLE.COM36005
MXuntap.inALT2.ASPMX.L.GOOGLE.COM36005
MXuntap.inALT3.ASPMX.L.GOOGLE.COM360010
MXuntap.inALT4.ASPMX.L.GOOGLE.COM360010
NSuntap.inns1.linode.com3600—
NSuntap.inns2.linode.com3600—
NSuntap.inns3.linode.com3600—
NSuntap.inns4.linode.com3600—
NSuntap.inns5.linode.com3600—
TXTuntap.inv=spf1 include:_spf.google.com ~all3600—

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2
Negotiated protocolTLSv1.2
Certificate subjectuntap.in
IssuerLet's Encrypt
Valid until2026-11-13T00:14 · Remaining when checked: 43 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html; charset=UTF-8
cache-controlno-cache
access-control-allow-origin*

Identified technologies

Technology stack: Unknown