Subgroups and Cyclic Groups

Study Sheet

Subgroups and Cyclic Groups

Subgroup tests, generators, and the complete structure of cyclic groups

Subgroups and the Subgroup Tests

Concept
Subgroups and the subgroup tests

A subset H⊆GH \subseteq G is a subgroup, written H≤GH \le G, when HH is itself a group under the operation of GG: it contains the identity, is closed under the operation, and is closed under inverses. The two-step test shortens this: a nonempty H⊆GH \subseteq G is a subgroup as soon as it is closed under the operation and closed under inverses. When GG is finite, the one-step test drops the inverse check entirely — closure under the operation alone forces HH to be a subgroup.

Associativity is inherited from GG for free, so only closure, the identity, and inverses can go wrong, and checking all three from the definition is more work than the tests need. Closure under inverses already forces the identity to appear: pick any h∈Hh \in H, then h−1∈Hh^{-1} \in H, so e=hh−1∈He = hh^{-1} \in H by closure. The one-step test works only for finite HH because closure traps every power h,h2,h3,…h, h^2, h^3, \ldots inside HH, and a finite set of powers must eventually repeat, which (as the final section proves) forces some power of hh to equal ee. Lose finiteness and the shortcut breaks, which is exactly the trap in "Where it goes wrong" below.

Example
The even integers, and why the odd integers fail

Let H=2Z={…,−4,−2,0,2,4,…}H = 2\mathbb Z = \{\ldots, -4, -2, 0, 2, 4, \ldots\} inside G=(Z,+)G = (\mathbb Z, +). HH is nonempty, the sum of two even numbers is even (closed), and the negative of an even number is even (closed under inverses) — so 2Z≤Z2\mathbb Z \le \mathbb Z by the two-step test. The odd integers fail immediately: 1+1=21 + 1 = 2 is not odd, so they are not even closed, and 0∉H0 \notin H confirms it is no subgroup.

Example
A finite subset of Z12\mathbb Z_{12}

Is H={0,4,8}H = \{0, 4, 8\} a subgroup of Z12\mathbb Z_{12} (addition mod 1212)? Since Z12\mathbb Z_{12} is finite, the one-step test applies: check closure alone. 4+4=84 + 4 = 8, 4+8=12≡04 + 8 = 12 \equiv 0, 8+8=16≡48 + 8 = 16 \equiv 4 — every sum lands back in HH. So H≤Z12H \le \mathbb Z_{12}, with no separate check needed for 00 or for inverses.

Example
A subset that is not even inside the group

Is H={1,4,7,10,13}H = \{1, 4, 7, 10, 13\} a subgroup of U(15)U(15)? Before testing closure, check that H⊆U(15)H \subseteq U(15) at all: U(15)U(15) consists of the residues coprime to 1515, but gcd⁡(10,15)=5\gcd(10, 15) = 5, so 1010 is not even a unit mod 1515. HH fails to be a subset of U(15)U(15), so the question of closure never arises — it cannot be a subgroup.

Example
{1,4,11,14}\{1, 4, 11, 14\} inside U(15)U(15)
·141114114111444114111111141414141141
Every element of this subgroup is its own inverse.

Is H={1,4,11,14}H = \{1, 4, 11, 14\} a subgroup of U(15)U(15) under multiplication mod 1515? Each element is coprime to 1515, so H⊆U(15)H \subseteq U(15). Squaring every element: 42=16≡14^2 = 16 \equiv 1, 112=121≡111^2 = 121 \equiv 1, 142=196≡114^2 = 196 \equiv 1 (all mod 1515) — so every non-identity element is its own inverse. The table below confirms closure: every product of two elements of HH lands in HH. By the two-step test, H≤U(15)H \le U(15).

Side note
Where it goes wrong

The one-step test needs GG finite (or at least HH finite); for an infinite group, closure under the operation alone is not enough. The positive integers N={1,2,3,…}\mathbb N = \{1, 2, 3, \ldots\} are closed under addition inside (Z,+)(\mathbb Z, +) — the sum of two positive integers is positive — yet N\mathbb N is not a subgroup: 0∉N0 \notin \mathbb N, and 11 has no inverse inside N\mathbb N (that inverse would have to be −1-1). Powers of 11 under addition, 1,2,3,…1, 2, 3, \ldots, never repeat and never return to 00, which is exactly what the one-step test relies on to fail.

Try it
Try it: a subgroup of Z12\mathbb Z_{12}

Is H={0,2,4,6,8,10}H = \{0, 2, 4, 6, 8, 10\} a subgroup of Z12\mathbb Z_{12}?

Show the answer

Yes. Z12\mathbb Z_{12} is finite, so closure alone suffices: the sum of two even residues is even, and reducing mod 1212 keeps it even, so every sum of two elements of HH stays in HH. HH has 6\mathbf{6} elements, half of Z12\mathbb Z_{12} — later this will follow from the theorem of Lagrange (Topic 5), but for now the one-step test alone settles it.

Cyclic Groups and Generators

Concept
Cyclic groups and generators

For a∈Ga \in G, the set of all integer powers ⟨a⟩={an:n∈Z}\langle a \rangle = \{a^n : n \in \mathbb Z\} (written {na:n∈Z}\{na : n \in \mathbb Z\} when the operation is addition) is always a subgroup of GG, the cyclic subgroup generated by aa. A group GG is cyclic if G=⟨a⟩G = \langle a \rangle for some single element aa, called a generator.

A cyclic subgroup is the smallest subgroup containing aa: it has to contain aa, so by closure it must contain every power of aa, and the two-step test (Section 1) confirms that the powers alone already form a subgroup, with nothing more to add. A cyclic group is therefore built from a single building block repeated over and over, which is why its structure turns out to be completely solvable — every subgroup, every element order, every count, as the rest of this topic shows. Not every element of a cyclic group is a generator, and a group can look cyclic from one element while being generated only partly by another.

Example
Z\mathbb Z is cyclic, but not every element generates it

⟨1⟩={n⋅1:n∈Z}=Z\langle 1 \rangle = \{n \cdot 1 : n \in \mathbb Z\} = \mathbb Z, so 11 generates all of Z\mathbb Z; so does −1-1. But ⟨2⟩={…,−4,−2,0,2,4,…}=2Z\langle 2 \rangle = \{\ldots, -4, -2, 0, 2, 4, \ldots\} = 2\mathbb Z, only the even integers — 22 generates a proper subgroup, not all of Z\mathbb Z. Z\mathbb Z is cyclic, but "cyclic" does not mean every element is a generator.

Example
Which residues generate Z12\mathbb Z_{12}?
01234567891011
Jumping by 5 around Z12\mathbb Z_{12} visits every residue before returning to 0.

Does 55 generate Z12\mathbb Z_{12}? List the multiples of 55 mod 1212: 0,5,10,3,8,1,6,11,4,9,2,70, 5, 10, 3, 8, 1, 6, 11, 4, 9, 2, 7, and then back to 00 — all twelve residues appear before the list repeats, so ⟨5⟩=Z12\langle 5 \rangle = \mathbb Z_{12} and 55 is a generator. Contrast 44: its multiples mod 1212 are only 0,4,80, 4, 8, then back to 00 — ⟨4⟩={0,4,8}\langle 4 \rangle = \{0, 4, 8\}, a proper subgroup. The difference is gcd⁡(5,12)=1\gcd(5, 12) = 1 but gcd⁡(4,12)=4\gcd(4, 12) = 4; Section 3 explains exactly why the gcd decides this.

Example
Is U(21)U(21) cyclic?

U(21)={1,2,4,5,8,10,11,13,16,17,19,20}U(21) = \{1, 2, 4, 5, 8, 10, 11, 13, 16, 17, 19, 20\} has 1212 elements (the numbers below 2121 coprime to both 33 and 77). If U(21)U(21) were cyclic, some element would have order 1212. Computing orders directly: 2,5,10,11,17,192, 5, 10, 11, 17, 19 each have order 66 (for instance 26=64=3⋅21+1≡12^6 = 64 = 3\cdot21+1 \equiv 1, while 22=42^2 = 4 and 23=82^3 = 8 are not 11), 44 and 1616 have order 33 (43=64≡14^3 = 64 \equiv 1), 8,13,208, 13, 20 have order 22 (82=64≡18^2 = 64 \equiv 1, 132=169≡113^2 = 169 \equiv 1, 202≡(−1)2=120^2 \equiv (-1)^2 = 1), and 11 has order 11. The largest order present is 66, not 1212 — no element generates the whole group, so U(21)U(21) is not cyclic.

Example
An element of infinite order

In (Z,+)(\mathbb Z, +), does any positive multiple of 11 ever equal 00? No — n⋅1=n≠0n \cdot 1 = n \ne 0 for every positive integer nn. So 11 has infinite order, and ⟨1⟩\langle 1 \rangle is an infinite cyclic subgroup (here, all of Z\mathbb Z). Every element of a finite group has finite order (Section 3), but a cyclic group itself need not be finite.

Side note
Where it goes wrong

A common slip is checking only a few powers and assuming they must eventually cover the whole group. Listing multiples of 33 mod 1212: 0,3,6,90, 3, 6, 9, and then 12≡012 \equiv 0 again — only four values, not twelve, so ⟨3⟩={0,3,6,9}≠Z12\langle 3 \rangle = \{0, 3, 6, 9\} \ne \mathbb Z_{12}, even though 33 "looks" like a fine candidate. A generator must be followed all the way back to 00; stopping early can hide that the orbit already closed up short.

Try it
Try it: a generator of Z10\mathbb Z_{10}

Does 77 generate Z10\mathbb Z_{10}?

Show the answer

List multiples of 77 mod 1010: 0,7,4,1,8,5,2,9,6,30, 7, 4, 1, 8, 5, 2, 9, 6, 3, then back to 00 — all ten residues appear, so ⟨7⟩=Z10\langle 7 \rangle = \mathbb Z_{10}: yes, 77 generates Z10\mathbb Z_{10} (as expected, since gcd⁡(7,10)=1\gcd(7, 10) = 1).

Orders in a Cyclic Group

Concept
The order of an element, and the order formula

The order of a∈Ga \in G is the smallest positive integer kk with ak=ea^k = e (additively, ka=0ka = 0); if no such kk exists, aa has infinite order. If G=⟨a⟩G = \langle a \rangle is cyclic of order nn, then for every integer kk,

∣ak∣=ngcd⁡(n,k).|a^k| = \dfrac{n}{\gcd(n, k)}.

The order of aka^k measures how far you have to run around the full cycle of nn elements before landing back on ee using steps of size kk; gcd⁡(n,k)\gcd(n,k) is exactly the amount of overlap between the step size and the cycle length, so dividing it out gives the number of distinct steps before a repeat. When kk and nn share no common factor, aka^k visits every element and generates the whole group, which is the gcd-criterion for generators used informally in Section 2. This single formula answers every question about element orders in a cyclic group without ever listing powers by hand.

Example
Order of 88 in Z12\mathbb Z_{12}

gcd⁡(12,8)=4\gcd(12, 8) = 4, so by the order formula ∣8∣=12/4=3|8| = 12/4 = 3. Checking directly: 8,8+8=16≡4,4+8=12≡08, 8+8=16\equiv4, 4+8=12\equiv0 — three steps to return to 00, confirming the order is 33.

Example
Order of 1818 in Z30\mathbb Z_{30}

gcd⁡(30,18)=6\gcd(30, 18) = 6, so ∣18∣=30/6=5|18| = 30/6 = 5. Directly: 18,36≡6,54≡24,72≡12,90≡018, 36\equiv6, 54\equiv24, 72\equiv12, 90\equiv0 — exactly five steps, matching the formula.

Example
How many elements of Z12\mathbb Z_{12} have order 66?

By the order formula, ∣k∣=6|k| = 6 exactly when 12/gcd⁡(12,k)=612/\gcd(12,k) = 6, i.e. gcd⁡(12,k)=2\gcd(12, k) = 2. Checking k=0,…,11k = 0, \ldots, 11: only k=2k = 2 and k=10k = 10 satisfy gcd⁡(12,k)=2\gcd(12, k) = 2. So Z12\mathbb Z_{12} has exactly 22 elements of order 66 — matching the totient φ(6)=2\varphi(6) = 2, since the generators of any cyclic group of order 66 (here, the subgroup {0,2,4,6,8,10}\{0,2,4,6,8,10\}) number φ(6)\varphi(6).

Example
Infinite order, revisited

The order formula assumes aa already sits inside a finite cyclic group. In (Z,+)(\mathbb Z, +) itself, 11 has infinite order (Section 2) — there is no finite nn to divide by. The formula only ever applies inside ⟨a⟩\langle a \rangle once that cyclic subgroup is known to be finite.

Side note
Where it goes wrong

The order of aka^k is n/gcd⁡(n,k)n/\gcd(n,k), never n/kn/k — those agree only when kk already divides nn. In Z6\mathbb Z_6, the order of 44 is 6/gcd⁡(6,4)=6/2=36/\gcd(6,4) = 6/2 = 3 (check: 4,8≡2,12≡04, 8\equiv2, 12\equiv0), not the meaningless 6/46/4. Always compute the gcd first; skipping straight to n/kn/k produces a number that is not even an integer as often as not.

Try it
Try it: order in Z18\mathbb Z_{18}

Find the order of 1515 in Z18\mathbb Z_{18}.

Show the answer

gcd⁡(18,15)=3\gcd(18, 15) = 3, so ∣15∣=18/3=6|15| = 18/3 = \mathbf{6}. Check: 15,30≡12,45≡9,60≡6,75≡3,90≡015, 30\equiv12, 45\equiv9, 60\equiv6, 75\equiv3, 90\equiv0 — six steps, as the formula predicts.

The Subgroups of a Cyclic Group

Concept
Every subgroup of a cyclic group, and how many there are

Every subgroup of a cyclic group is itself cyclic (proved in the final section). If G=⟨a⟩G = \langle a \rangle has order nn, then for each divisor dd of nn there is exactly one subgroup of order dd, namely ⟨an/d⟩\langle a^{n/d} \rangle — and these are all the subgroups GG has. So a cyclic group of order nn has exactly as many subgroups as nn has divisors.

This is the payoff of the order formula: plugging k=n/dk = n/d in gives ∣an/d∣=n/gcd⁡(n,n/d)=n/(n/d)=d|a^{n/d}| = n/\gcd(n, n/d) = n/(n/d) = d, so that single element already produces a subgroup of the right size. Uniqueness is the surprising half — a general group can have several different subgroups of the same order, but a cyclic group cannot, so once nn is known the entire subgroup lattice is known just from the divisors of nn, with no further work. This turns "find all subgroups" from a search into a counting problem.

Example
All subgroups of Z12\mathbb Z_{12}
1234612
The subgroup lattice of Z12\mathbb Z_{12}: one subgroup per divisor of 12.

The divisors of 1212 are 1,2,3,4,6,121, 2, 3, 4, 6, 12, so Z12\mathbb Z_{12} has exactly 66 subgroups, one per divisor: order 11: {0}\{0\}; order 22: ⟨6⟩={0,6}\langle 6\rangle = \{0,6\}; order 33: ⟨4⟩={0,4,8}\langle 4\rangle = \{0,4,8\}; order 44: ⟨3⟩={0,3,6,9}\langle 3\rangle = \{0,3,6,9\}; order 66: ⟨2⟩={0,2,4,6,8,10}\langle 2\rangle = \{0,2,4,6,8,10\}; order 1212: ⟨1⟩=Z12\langle 1\rangle = \mathbb Z_{12} itself.

Example
Just counting: how many subgroups does Z30\mathbb Z_{30} have?

The divisors of 3030 are 1,2,3,5,6,10,15,301, 2, 3, 5, 6, 10, 15, 30 — eight of them — so Z30\mathbb Z_{30} has exactly 88 subgroups, with those eight orders, no computation of any actual elements required.

Example
Building the order-44 subgroup of Z24\mathbb Z_{24} directly

Find the subgroup of Z24\mathbb Z_{24} of order 44. Here n=24n = 24, d=4d = 4, so the formula names the generator at once: an/d=6a^{n/d} = 6. Then ⟨6⟩={0,6,12,18}\langle 6 \rangle = \{0, 6, 12, 18\}, and indeed 6,12,18,24≡06, 12, 18, 24\equiv0 is four steps, so ∣6∣=4|6| = 4 as required — no guessing was needed to find it.

Example
The same subgroup, two generators

In Z12\mathbb Z_{12}, both ⟨4⟩\langle 4 \rangle and ⟨8⟩\langle 8 \rangle equal {0,4,8}\{0, 4, 8\}: multiples of 44 give 0,4,80,4,8, and multiples of 88 give 0,8,40,8,4, the same set in a different order. This is forced by uniqueness: both 44 and 88 have gcd⁡(12,⋅)=4\gcd(12, \cdot) = 4, so both have order 12/4=312/4 = 3 by the order formula, and a cyclic group of order 1212 has only one subgroup of order 33 for them to generate.

Side note
Where it goes wrong

It is tempting to think different-looking generators give different subgroups of the same size, but uniqueness rules this out completely: Z12\mathbb Z_{12} has only ONE subgroup of order 44, however it is named. ⟨3⟩={0,3,6,9}\langle 3\rangle = \{0,3,6,9\} and ⟨9⟩\langle 9\rangle: multiples of 99 mod 1212 are 9,18≡6,27≡3,36≡09, 18\equiv6, 27\equiv3, 36\equiv0, giving {0,3,6,9}\{0,3,6,9\} again — the exact same subgroup, not a second one. Two generators can coincide on the same subgroup even when the generators themselves look unrelated.

Try it
Try it: the subgroups of Z20\mathbb Z_{20}

List the orders of all subgroups of Z20\mathbb Z_{20}, and find the subgroup of order 55.

Show the answer

The divisors of 2020 are 1,2,4,5,10,201, 2, 4, 5, 10, 20, so Z20\mathbb Z_{20} has subgroups of exactly those six orders. For order 55: n/d=20/5=4n/d = 20/5 = 4, so the subgroup is ⟨4⟩={0,4,8,12,16}\langle 4\rangle = \mathbf{\{0, 4, 8, 12, 16\}}.

Why It Works

Let HH be a nonempty subset of GG, closed under the operation and closed under inverses (the two-step test). Associativity holds in HH because it holds in all of GG. Pick any h∈Hh \in H; closure under inverses puts h−1∈Hh^{-1} \in H, and closure under the operation then puts e=hh−1∈He = hh^{-1} \in H. So HH contains the identity, is closed, and every element has an inverse in HH — all four group axioms hold, and H≤GH \le G. Conversely a subgroup obviously satisfies both closures, so the two-step test is exactly equivalent to the definition. Now suppose GG is finite and HH is a nonempty subset closed under the operation only (the one-step test). Fix h∈Hh \in H; closure keeps every power h,h2,h3,…h, h^2, h^3, \ldots inside HH, and since H⊆GH \subseteq G is finite this list of powers must repeat: hi=hjh^i = h^j for some i<ji < j. Cancelling hih^i (valid in any group) gives hj−i=eh^{j-i} = e with j−i≥1j - i \ge 1, so HH contains the identity via a positive power of hh. Let m=j−im = j - i; if m=1m = 1 then h=eh = e is its own inverse, and if m≥2m \ge 2 then h⋅hm−1=hm=eh \cdot h^{m-1} = h^m = e shows hm−1h^{m-1} is the inverse of hh, and hm−1∈Hh^{m-1} \in H by closure. So HH is also closed under inverses, and the two-step test applies.

Let aa have order nn in GG, so ⟨a⟩\langle a\rangle has exactly nn elements and at=ea^t = e exactly when n∣tn \mid t. Fix kk, let d=gcd⁡(n,k)d = \gcd(n,k), and write n=dn1n = dn_1, k=dk1k = dk_1 with gcd⁡(n1,k1)=1\gcd(n_1, k_1) = 1. First, (ak)n1=akn1=ak1(dn1)=ak1n=(an)k1=e(a^k)^{n_1} = a^{kn_1} = a^{k_1 (dn_1)} = a^{k_1 n} = (a^n)^{k_1} = e, so the order of aka^k divides n1=n/dn_1 = n/d. Second, suppose (ak)m=e(a^k)^m = e for some 0<m<n10 < m < n_1. Then akm=ea^{km} = e, so n∣kmn \mid km, i.e. dn1∣dk1mdn_1 \mid dk_1 m, i.e. n1∣k1mn_1 \mid k_1 m; since gcd⁡(n1,k1)=1\gcd(n_1, k_1) = 1, this forces n1∣mn_1 \mid m, impossible for 0<m<n10 < m < n_1. So the order of aka^k is exactly n1=n/gcd⁡(n,k)n_1 = n/\gcd(n,k).

Let G=⟨a⟩G = \langle a\rangle be cyclic and let H≤GH \le G. If H={e}H = \{e\} it is cyclic, generated by ee. Otherwise HH contains some at≠ea^t \ne e, and closure under inverses puts a−t∈Ha^{-t} \in H too, so HH contains a positive power of aa; let mm be the smallest positive integer with am∈Ha^m \in H. Then ⟨am⟩⊆H\langle a^m\rangle \subseteq H. For the reverse inclusion, take any at∈Ha^t \in H (every element of GG is a power of aa) and divide: t=mq+rt = mq + r with 0≤r<m0 \le r < m. Then ar=at(am)−q∈Ha^r = a^t (a^m)^{-q} \in H, since both ata^t and ama^m lie in HH. By the minimality of mm, r=0r = 0 is forced, so at=(am)q∈⟨am⟩a^t = (a^m)^q \in \langle a^m\rangle. Hence H=⟨am⟩H = \langle a^m\rangle is cyclic. Now suppose GG is finite of order nn. A short lemma first: for any kk, ⟨ak⟩=⟨agcd⁡(n,k)⟩\langle a^k\rangle = \langle a^{\gcd(n,k)}\rangle. By Bezout, gcd⁡(n,k)=xk+yn\gcd(n,k) = xk + yn for some integers x,yx,y, so agcd⁡(n,k)=(ak)x(an)y=(ak)x∈⟨ak⟩a^{\gcd(n,k)} = (a^k)^x(a^n)^y = (a^k)^x \in \langle a^k\rangle; conversely gcd⁡(n,k)∣k\gcd(n,k) \mid k gives ak∈⟨agcd⁡(n,k)⟩a^k \in \langle a^{\gcd(n,k)}\rangle, so each subgroup contains the generator of the other, making ⟨ak⟩=⟨agcd⁡(n,k)⟩\langle a^k\rangle = \langle a^{\gcd(n,k)}\rangle. Now for each divisor dd of nn, the order formula gives ∣an/d∣=n/gcd⁡(n,n/d)=n/(n/d)=d|a^{n/d}| = n/\gcd(n, n/d) = n/(n/d) = d, so ⟨an/d⟩\langle a^{n/d}\rangle is a subgroup of order dd — existence is settled. For uniqueness, let K≤GK \le G have order dd; by the first paragraph K=⟨am⟩K = \langle a^m\rangle for some mm, and ∣K∣=n/gcd⁡(n,m)=d|K| = n/\gcd(n,m) = d forces gcd⁡(n,m)=n/d\gcd(n,m) = n/d. By the lemma, K=⟨am⟩=⟨agcd⁡(n,m)⟩=⟨an/d⟩K = \langle a^m\rangle = \langle a^{\gcd(n,m)}\rangle = \langle a^{n/d}\rangle — the same subgroup found above. So exactly one subgroup of order dd exists for each divisor dd of nn.