Email Obfuscator
Convert email addresses into spam-proof forms: HTML entities, ROT13 document.write, and [at]/[dot] text with copy-paste snippets. 100% client-side, free, no upload.
Loading tool...
What is Email Obfuscator?
The Email Obfuscator is a free security tool that converts a readable email address into forms that spambots cannot easily harvest while remaining perfectly usable for humans. It generates HTML character-entity mailto links that need no JavaScript, a ROT13-encoded snippet decoded on the fly via document.write, and a human-readable [at]/[dot] format for places that strip markup. Everything is computed locally in your browser, so the address you are protecting never leaves your device.
Key Benefits
- Cuts the spam you receive by hiding addresses from the crawlers that build mailing lists
- Keeps mailto links fully clickable for real visitors with zero visible difference
- Offers both no-JavaScript and JavaScript-based strategies to fit any publishing platform
- Gives you copy-paste ready snippets with a live preview instead of hand-crafting encodings
- Runs 100% client-side and offline - your email is never uploaded, logged, or stored
Common Use Cases
- •Publishing a contact address on a portfolio or company website without inviting harvesters
- •Adding a mailto link to a blog post or documentation page while keeping the raw HTML clean
- •Sharing an email in a forum, comment, or PDF where HTML and scripts are stripped out
- •Preparing email links for a static site or landing page deployed from a CI pipeline
- •Teaching or demonstrating client-side anti-scraping techniques without any server code
How to Use the Email Obfuscator
- Enter the email address: Type or paste the email you want to protect. The tool validates the format instantly and warns you if it looks invalid.
- Optionally set display text: Leave the display field empty to show the email itself, or type a friendly label such as Contact Support that visitors will click instead.
- Pick an obfuscation method: Choose decimal or hex HTML entities for a no-JavaScript approach, ROT13 + document.write for stronger scraping resistance, or plain [at]/[dot] text for forums and PDFs.
- Copy the snippet: Copy the generated snippet and paste it into your HTML, CMS, or template. Check the human preview to confirm what visitors will actually see.
Key Features
- Four obfuscation strategies in one tool: decimal entities, hex entities, ROT13 with document.write, and plain-text [at]/[dot] munging.
- Optional display text lets you show a friendly label like Contact Support while the real address stays hidden in the markup.
- Copy-paste ready snippets with a live human-readable preview so you can verify exactly what visitors will see.
- Instant validation of the email format before generating anything, so broken addresses never make it into your pages.
- 100% client-side and offline - no server calls, no sign-up, and your email address is never uploaded or stored.
Frequently Asked Questions
Does email obfuscation really stop spam?
It significantly reduces it. Studies of harvested addresses show that plain-text emails receive the most spam, while entity-encoded and ROT13 addresses receive little to none. Determined attackers can decode anything a browser can render, but the bulk of harvesting is done by dumb crawlers, which obfuscation defeats.
Which method should I choose?
HTML entities are the safest default: no JavaScript required and the mailto link still works everywhere. Use ROT13 + document.write when you want stronger protection and can rely on JavaScript being enabled. Use plain [at]/[dot] text where HTML or scripts are not allowed, such as forums or PDF documents.
Will visitors still be able to click and email me?
Yes. With the entity and ROT13 methods, the browser decodes the address and renders a normal, clickable mailto link - humans see no difference. Only the plain-text method is not clickable, since forums and PDFs usually forbid links anyway.
Is this tool safe to use with my real address?
Yes. Everything runs locally in your browser with JavaScript - the address is never sent to a server, logged, or stored. You can even disconnect from the internet and keep using the tool offline.
Can I obfuscate several emails at once?
The tool processes one address at a time so each snippet gets its own preview and copy button. For a contact page with multiple addresses, run it once per address and paste each snippet where needed.