Skip to content
Toolew.com

Email Obfuscator

Convert a plain email address into scraper-resistant HTML (entities, JS document.write, CSS-reversed text) to publish without exposing it to bots.

Runs in your browser. Your data is not uploaded.
Loading tool…

This guide is not yet available in your language and is shown in English.

Tool guide

What this tool does

Email Obfuscator converts a plain email address into several scraper-resistant HTML forms, numeric HTML entities, a JavaScript document.write snippet, and CSS-reversed text with direction override, each of which renders normally to human visitors while defeating the simple regex-based scraping that drives most automated email harvesting.

Publishing a plain "name@domain.com" anywhere on a public web page is an open invitation to the simple regex-based scrapers that make up the vast majority of automated email-harvesting traffic, feeding directly into spam lists.

This tool converts a plain address into several forms that still display and work correctly for a human visitor (and in most cases, still function as a clickable mailto: link) while defeating naive text-scanning scrapers: numeric HTML entities, a JavaScript document.write snippet that only renders after JS executes, and CSS-reversed text that looks correct visually but is reversed in the raw HTML source.

How to use Email Obfuscator

  1. Enter the Email address to protect.
  2. Review the several generated obfuscated forms.
  3. Copy whichever version fits your page (plain HTML entity encoding is the simplest, broadly compatible option).
  4. Paste it into your page’s HTML in place of the plain address.

Tips for better results

  • HTML entity encoding is the simplest and most broadly compatible option, it works even with JavaScript disabled, since the browser decodes the entities automatically when rendering.
  • The JavaScript document.write version is the most resistant to simple scrapers, since most basic address-harvesting bots only fetch and scan raw HTML without executing JavaScript at all, but it requires JS to be enabled to display.
  • None of these methods is foolproof against a sophisticated, determined scraper; they specifically raise the cost of harvesting enough to deter the simple bots responsible for most spam collection.
  • For the strongest protection, consider using a contact form instead of publishing a raw address anywhere at all, removing the target completely rather than just obscuring it.

Common use cases

  • Publishing a contact email on a website’s "About" or "Contact" page without feeding spam-harvesting bots.
  • Protecting an email address in a forum post, comment, or public document.
  • Understanding the different common techniques used to obfuscate emails from scrapers.
  • Adding a lightweight layer of spam protection without building a full contact form.

Common mistakes to avoid

  • Treating obfuscation as complete, guaranteed protection; it raises the cost of automated harvesting but doesn’t stop a determined, sophisticated scraper specifically targeting your page.
  • Relying solely on the JavaScript-based method for a page where JS might be disabled or blocked; pair it with a fallback (like HTML entity encoding) if broad compatibility matters.
  • Forgetting that even an obfuscated address is still technically visible to a human who inspects the page source carefully; this deters automated bots, not a manually curious human reader.

Frequently asked questions

Does obfuscation completely stop spam?

No, it significantly reduces harvesting by the simple, high-volume regex-based scrapers responsible for most spam collection, but it doesn’t stop a determined, sophisticated attacker specifically targeting your page.

Which method should I use?

HTML entity encoding for simplicity and broad compatibility (including with JavaScript disabled); the JavaScript document.write version for stronger protection against basic scrapers, at the cost of requiring JavaScript to display.

Will the obfuscated version still work as a clickable email link?

The HTML entities (linked) and JavaScript versions both produce a working mailto: link; the plain HTML entities version (not pre-wrapped in a link) would need to be placed inside your own <a href="mailto:..."> tag if you want it clickable.

Is my email address sent anywhere when I use this?

No, all the obfuscated versions are generated entirely in your browser using plain JavaScript string operations; nothing is ever transmitted anywhere.

Feedback & suggestions

Help us improve Email Obfuscator. We read every message.

Rating (optional)
Necessary
Required for security, language and theme preferences. Always on.