How does it hide my email from spam bots?

It gives you HTML that writes the address as character codes, builds it with JavaScript, reverses it with CSS, or spells it as [at] and [dot].

Will the email link still work for visitors?

Yes. The HTML entity and JavaScript methods produce a clickable mailto link, and you can set your own link text and email subject.

Does this fully stop spam?

No. It stops simple scrapers, but advanced bots can defeat all these methods. Combine it with other protection on contact forms.

Yes. Every tool is free to use, with no account and no credit card. The work runs on your device rather than on our servers, which is what keeps it free to run.

Does it work on mobile?

Yes. It runs in current mobile browsers on iOS and Android, with nothing to install.

✉️

Free Email Obfuscator

Hide email addresses from spam scrapers using HTML entities, JavaScript assembly, reversed text, or symbol substitution.

Runs in your browserNo sign-up, no pop-upsNo login requiredFree forever

Works offline once loaded

Email address

Obfuscation method

Link text (optional)

Mailto subject (optional)

CC (optional)

Message body (optional)

JavaScript, encoded (stronger, clickable)

The address is stored only inside a Base64 string in the script and assembled in the browser into a clickable link. A scraper has to run or decode the script to find it. Visitors need JavaScript enabled.

Limited protection: Obfuscation reduces simple scraping but does not stop determined bots. Sophisticated crawlers can defeat all of these methods.

No method here stops a determined scraper that runs JavaScript or renders the page. Published tests generally find that JavaScript-assembled and CSS-reversed addresses survive longer than plain entities, but results vary and nothing is guaranteed. For stronger protection, use a contact form with a hidden honeypot field and a CAPTCHA or rate limiting instead of showing the address at all.

Common uses

Hide Your Email on a Personal SiteFor personal portfolios and blogs, obfuscation cuts spam from contact-page scrapers.
Public Email for Authors / SpeakersPublic-facing professionals (authors, speakers, journalists) need contact emails. Obfuscate to reduce spam.
Professor and Research EmailUniversity faculty pages with public emails get heavy spam. Obfuscation is worth doing.
Business Contact Page EmailFor small businesses, obfuscating customer-facing emails helps cut spam volume.
Static Site Email ProtectionFor static sites (Hugo, Jekyll, 11ty) without backend, obfuscation is the main email protection option.

How It Works

The tool uses four hand-written encoding algorithms — HTML decimal entities, CSS bidi reversal, split-part JavaScript injection, and plain-text symbol substitution — to transform an email address into markup that is harder for scraper bots to parse while remaining functional in a real browser. All encoding happens in the browser with no server involved.

1
Email validation
A lightweight regex checks that the address has a local part, an @ symbol, and a domain with at least one dot. This catches obvious typos without running a full RFC 5321 parser.
2
Encoding method applied
Depending on which method you pick, the tool either converts every character to its HTML decimal entity (e.g. h -> h), reverses the string and wraps it in a CSS bidi-override span, splits the address at @ and reconstructs it via an inline script tag that builds the anchor at runtime, or replaces @ and dots with the plain-text tokens [at] and [dot].
3
HTML output rendered
The resulting HTML snippet is displayed in a syntax-highlighted code block. For the JavaScript method the preview is simulated directly (innerHTML does not execute script tags), so you see what the finished link looks like without needing to paste it into a real page.
4
Copy to clipboard
Clicking Copy writes the generated HTML to the clipboard via the browser's navigator.clipboard API, ready to paste into any HTML file or CMS.

Your email address never leaves the browser — all four encoding methods run entirely in client-side JavaScript with no network requests.

Related Tools

🕵️

Browser Fingerprint Auditor

See exactly what tracking scripts learn about your browser — canvas, WebGL, audio, fonts, screen, timezone and more — plus a SHA-256 composite hash. Run twice to confirm your privacy mitigations work. Nothing is uploaded.

Try it

✉️

EML Email Viewer

Open and read .eml email files online — view the message, headers and attachments without Outlook or any email client. Parsed locally in your browser; nothing is uploaded.

Try itFiles stay local

🔍

Duplicate Line Finder

Find, count, or remove duplicate lines from a list. Great for cleaning up email lists, audit logs, or finding repeat entries in data dumps.