Home › Developer Tools › Email Obfuscator
Email Obfuscator
Publish your email address on a website without handing it to spam harvesters. Choose HTML entities, a JavaScript-assembled mailto link, CSS reversed text or a readable [at] [dot] version, preview it live and copy the code.
Last updated:
Live previewRendered in a sandboxed frame
How the methods compare
| Method | Stops simple scrapers | Stops JS-running bots | Clickable | Works without JS | Copy-paste friendly |
|---|---|---|---|---|---|
| HTML entities | Most | No | Yes | Yes | Yes |
| JavaScript assembled | Yes | Some | Yes | No (fallback text) | Yes |
| CSS reversed text | Yes | Most | No | Yes | No (pastes reversed) |
| [at] [dot] text | Some | No | No | Yes | Needs editing |
Advertisement
Advertisement
How to use the Email Obfuscator
- Enter your email address and, if you like, link text and a subject.
- Pick a method: entities for no-JavaScript sites, JavaScript for the strongest protection.
- Check the live preview to see what visitors will get.
- Copy the code and paste it into your page's HTML where the address should appear.
How each method hides the address
| Method | What the page source contains |
|---|---|
| Plain (unprotected) | <a href="mailto:[email protected]">[email protected]</a> |
| HTML entities | jane@example.com |
| JavaScript assembled | var p=["moc.","elp","maxe","\u0040e","naj"]… joined and reversed at runtime |
| CSS reversed | <span style="unicode-bidi:bidi-override;direction:rtl">moc.elpmaxe@enaj</span> |
| [at] [dot] | jane [at] example [dot] com |
Tips for publishing an email address
- Use a separate public address (for example hello@ or contact@) so you can filter or replace it if spam grows.
- Don't put the plain address in other places on the same page, like meta tags, JSON-LD or image alt text, or the obfuscation is pointless.
- For the strongest protection, combine methods: a JavaScript-built link with an entities fallback inside the noscript area.
- Test the final page: click the link, copy the address and try it with a screen reader if accessibility matters to your audience.
Frequently asked questions
What is email obfuscation?
It is a way to write an email address in a web page so that people can still read and use it, while automated programs that scan pages for addresses (harvesters) fail to recognize it. It reduces the spam an address published online receives.
Which obfuscation method is the most effective?
Methods that need JavaScript or CSS to show the real address, such as the JavaScript-assembled link and reversed CSS text, stop most harvesters because many bots only read the raw HTML. HTML entities stop simple scrapers but are easy for a determined bot to decode. No method is perfect, so combine it with a good spam filter.
Will obfuscation hurt accessibility?
HTML entities and the JavaScript method produce a normal link, which screen readers announce correctly. Reversed CSS text may be read backwards by some assistive technology and pastes reversed, so add a visible note or prefer another method for important contact details.
Does the JavaScript method work if JavaScript is off?
No. Visitors without JavaScript see the fallback text inside the span instead. Write a helpful fallback, such as a link to your contact page, in the link text field or edit the snippet.
Is my email address sent anywhere?
No. All code is generated in your browser and the preview runs in a sandboxed frame on the same page. Nothing is uploaded or stored on a server.
Is a contact form better than an obfuscated address?
A contact form never reveals the address at all, so it is the strongest option against harvesting, but it needs a server or form service and some people prefer email. Many sites offer both.
Are all the tools on FreeToolCabin tested for quality and accuracy?
Yes! Every tool on our site undergoes automated Q/A testing in real browser environments to ensure high precision, correct output, and zero errors. If you happen to spot a bug or have a suggestion, please contact us at [email protected] and our team will review it right away.
Related tools
Mailto Link GeneratorBuild encoded mailto: links with cc, bcc, subject and body, plus HTML code and a QR code.HTML Entity Encoder / DecoderEscape and unescape HTML entities, named or numeric.Email ValidatorCheck email lists and spot disposable addresses.Email PermutatorGenerate every common business email format from a first name, last name and company domain.Website Down CheckerCheck if a website is down for everyone.Deep Link GeneratorCreate links that open directly in apps.URL ParserBreak a URL into its parts and edit query string parameters with a live rebuild.User Agent ParserSee your user agent and parse any UA string into browser, OS, engine and device.HTTP Status CodesSearch every HTTP status code with plain-English meanings, causes, fixes and RFC references.Subnet CalculatorCalculate IPv4 network, broadcast, host range, masks and host count, and split subnets.Bulk URL OpenerOpen a list of URLs in new tabs at once or in batches, with cleanup, dedupe and delay.DNS LookupLook up A, AAAA, MX, TXT, NS, CNAME, SOA and CAA records with TTLs over secure DNS.API Request TesterSend GET, POST, PUT and DELETE requests with headers and a body, then inspect the response.WebSocket TesterConnect to a ws:// or wss:// server, send messages and watch a timestamped live log.WHOIS LookupLook up who registered a domain or IP: registrar, creation and expiry dates, name servers, status.WhatsApp Link GeneratorCreate wa.me click-to-chat links with a pre-filled message, button HTML and a QR code.Basic Auth Header GeneratorCreate an Authorization: Basic header from a username and password, or decode one.Common Ports ListSearchable TCP/UDP port number list with service, protocol and description, filterable by range.DMARC CheckerLook up a domain's DMARC record, explain every tag, grade the policy and get fix suggestions.DMARC Record GeneratorCreate a DMARC TXT record with policy, reporting and alignment options, every tag explained.Email Header AnalyzerPaste raw email headers to trace every server hop, see delays and check SPF, DKIM and DMARC.IP Geolocation LookupFind the country, city, ISP, ASN and time zone of any IP address or domain, with a map.Reverse DNS LookupFind the PTR hostname of any IPv4 or IPv6 address, one at a time or hundreds in bulk.SPF Record CheckerLook up a domain's SPF record, count nested DNS lookups, find errors and test a sender IP.SPF Record GeneratorBuild a valid SPF TXT record from mail providers, IPs and includes, with a lookup-count check.CIDR to IP RangeConvert IPv4 or IPv6 CIDR blocks to first/last IP, mask and host count, and export IP lists.DNS Propagation CheckerCompare DNS answers and TTLs from Cloudflare, Google, Quad9, AdGuard and NextDNS side by side.Domain Availability CheckerCheck if domain names are available across .com, .io, .ai and more, with registrar and expiry.MAC Address LookupFind the vendor of a MAC address or OUI, check multicast and random bits, look up many at once.MX LookupFind a domain's mail servers: MX priority, host, IP addresses and the email provider.Uptime SLA CalculatorTurn 99.9% uptime into allowed downtime per day, month and year, or downtime into uptime %.Website Speed TestTest page speed with Lighthouse: performance score, Core Web Vitals and fixes, mobile or desktop.ASN LookupLook up an AS number or IP: network owner, country, registry, abuse contact and announced prefixes.Bandwidth CalculatorEstimate monthly website bandwidth (GB) and the Mbps you need from page views and page size.CNAME LookupFollow a hostname's full CNAME chain to its final IP addresses, with TTLs and CDN detection.CORS TesterSend GET, POST or OPTIONS from your browser to any API and see whether CORS allows it and why not.DKIM Record CheckerLook up a domain's DKIM key by selector (or auto-detect), check key type, bit length and tags.DKIM Record GeneratorCreate a DKIM RSA key pair in your browser with the TXT record, selector host and private key PEM.DMARC Report AnalyzerRead DMARC aggregate XML reports (.xml, .gz, .zip): sources, SPF/DKIM alignment and pass rates.Domain Age CheckerSee how old a domain is, when it was registered and when it expires. Bulk check up to 50.Email Deliverability CheckerGrade a domain's MX, SPF, DMARC, DKIM, BIMI and MTA-STS records in one report with fixes.HTTP Header ParserPaste raw HTTP headers to get a table explaining each one plus a security headers grade.IP Blacklist CheckerCheck an IPv4 address against 21 public spam blocklists (DNSBLs) and see listed or clean.IP Range to CIDRTurn a start and end IP into the shortest list of CIDR blocks, for IPv4 and IPv6.IPv6 Subnet CalculatorIPv6 prefix to network, range, address count and /64s, and split it into child subnets.Link in Bio Page GeneratorCreate a link-in-bio page with avatar, bio, links and theme, then download it as one HTML file.NS LookupFind a domain's authoritative nameservers with their IPs, SOA record and DNS hosting provider.Social Share Link GeneratorMake share links and buttons for Facebook, X, LinkedIn, Reddit, Pinterest, WhatsApp and email.Subnet Mask Cheat SheetInteractive /0 to /32 table of subnet masks, wildcards and host counts with details per prefix.TXT Record LookupLook up a domain’s DNS TXT records and see which are SPF, DMARC, DKIM or verification tokens.VLSM CalculatorSplit a network into variable-length subnets sized to the hosts each one needs.YouTube Timestamp Link GeneratorMake YouTube links that start at a set time, embed start/end codes and lists of timestamps.