ToolJutsu
All tools
Web & SEO Tools

Email Obfuscator

Obfuscate email addresses to deter spam bots.

Obfuscation method

Every character becomes a numeric HTML entity. The browser renders it normally, but a scraper reading the raw HTML sees only entity codes. Capable bots that decode entities can still read it.

Obfuscated HTML
<a href="&#109;&#97;&#105;&#108;&#116;&#111;&#58;&#104;&#101;&#108;&#108;&#111;&#64;&#101;&#120;&#97;&#109;&#112;&#108;&#101;&#46;&#99;&#111;&#109;">&#104;&#101;&#108;&#108;&#111;&#64;&#101;&#120;&#97;&#109;&#112;&#108;&#101;&#46;&#99;&#111;&#109;</a>

Paste this into your page where the email link should appear.

Processed on your device. We never see your files.

How to use Email Obfuscator

What this tool does

The Email Obfuscator takes an email address and rewrites it so automated scrapers have a harder time harvesting it from your web page, while real visitors still see — and can click — a normal address. It offers four methods: numeric HTML entities, a small JavaScript assembler, a reversed-CSS trick, and plain at/dot text. You enter the address, pick a method, and copy the generated code straight into your page. For the methods that produce a clickable link, the tool emits the full <a href="mailto:…"> markup ready to paste.

All four techniques are applied in your browser. Nothing about the address is sent anywhere.

Why it matters for SEO

Publishing a contact email is good for users and good for trust signals — a genuine, reachable contact address is part of looking like a legitimate business, which matters for the experience and expertise signals search engines weigh. The problem is that the same plain mailto: link is a magnet for spam bots that crawl the web harvesting addresses. An inbox buried under spam is harder to monitor, and aggressive volumes can get your address flagged.

Obfuscation lets you keep a visible, clickable contact point without leaving an unprotected target in your HTML. It does not change rankings — email addresses are not a ranking factor — but it protects the usefulness of the contact you publish, so the page keeps doing its job rather than feeding a spam list.

How to use it

  1. Type the email address into the input. The tool validates the format and flags an obvious mistake inline.
  2. Choose a method with the segmented control. A short note explains the trade-off of each one as you switch.
  3. Read the explanation, then copy the generated code from the output box.
  4. Paste it into your page where the email link should appear. For the entity, JavaScript and CSS methods you get HTML to drop straight in; the text method gives plain text that is not clickable.

SEO best practices

Be honest with yourself about the threat level. For a low-traffic site, HTML entities stop most casual scrapers and cost nothing. For a heavily targeted page, the JavaScript method hides the address best because it never exists in the static HTML at all. Whichever you choose, keep the rendered result a normal, clickable mailto: link so visitors and screen readers are not inconvenienced. For maximum protection, pair obfuscation with a contact form so there is a path that exposes no address whatsoever, and rely on a good spam filter as the final line of defence.

Common mistakes to avoid

The biggest mistake is believing any single method makes you spam-proof — no obfuscation is perfect, and a scraper that renders JavaScript and decodes entities can defeat most of these tricks. Do not use the reversed-CSS method for an address a screen reader must announce, because the source order is backwards. Do not pick the plain at/dot text method when you need a clickable link, since it deliberately produces none. And do not obfuscate the address in a way that also hides it from legitimate uses such as structured data — keep your schema markup using the real address.

Privacy & your data

This tool is fully client-side. The email address you enter is encoded by JavaScript running on your own device — the entities are generated, the character codes are computed, and the markup is assembled locally. The address is never uploaded, never logged, and never stored; no copy survives once you close or refresh the page. Because the work happens in your browser, you can safely obfuscate a personal or internal address without it travelling across the internet. The only place the address appears afterwards is in the code you choose to copy and paste into your own page.

Frequently asked questions

Does email obfuscation actually stop spam?
It reduces it but does not eliminate it. Obfuscation defeats simple scrapers that pattern-match raw HTML for the @ symbol, and those make up a large share of harvesting bots. A determined scraper that renders JavaScript and decodes entities can still find the address. Treat obfuscation as one useful layer alongside a spam filter and a contact form, not a complete fix.
Which obfuscation method is the strongest?
The JavaScript method hides the address best, because the email never appears in the static HTML — it is assembled only when the script runs, and most scrapers do not execute JavaScript. The trade-off is that the link will not appear for the small number of visitors who block JavaScript. The plain at/dot text method is the most scraper-proof of all, but it is not a clickable link.
Why are HTML entities and the CSS trick weaker?
Both leave the real address recoverable from the page source. HTML entities are trivial for a capable bot to decode, since decoding entities is standard HTML parsing. The reversed-CSS trick stores the address backwards in the source, so a bot that reads the raw text and reverses it still gets the address. They stop basic scrapers but not sophisticated ones.
Will obfuscation hurt my SEO or accessibility?
Used sensibly, no. The rendered email still reads correctly for users and screen readers when you use entities or the JavaScript method, since both produce a normal mailto link. Avoid the reversed-CSS method for anything a screen reader must read aloud, as the source order is backwards. Email addresses are not a ranking factor, so obfuscation does not affect rankings.
Is my email address kept private by this tool?
Yes. The address you type is obfuscated entirely in your browser by JavaScript. It is never uploaded, logged or stored on a server, and no copy is kept after you close or refresh the page. The obfuscated code is produced locally and only you ever see the original address.

Related tools