LocalToolsOffline browser tools collection

Category: Developer tools

Email Obfuscator

System ideaMissing a tool?

Hide a mailto link from basic scrapers, three ways

Turn an email address into HTML entities, a JavaScript snippet, or human-readable text, so simple scrapers scanning a page's raw HTML for mailto: links do not pick it up. Runs entirely in your browser.

Obfuscated output
<a href="&#109;&#97;&#105;&#108;&#116;&#111;&#58;&#104;&#101;&#108;&#108;&#111;&#64;&#101;&#120;&#97;&#109;&#112;&#108;&#101;&#46;&#99;&#111;&#109;">&#104;&#101;&#108;&#108;&#111;&#64;&#101;&#120;&#97;&#109;&#112;&#108;&#101;&#46;&#99;&#111;&#109;</a>

This only slows down simple scrapers scanning raw HTML for mailto: links. It will not stop a determined attacker or a human reading the page.

Everything on this page is processed in your browser. Nothing is uploaded.

What this tool does

Spam harvesters commonly scan a website's raw HTML for the mailto: pattern or an @ sign. Obfuscation rewrites the address so a human, or a real browser for the HTML entity and JavaScript methods, can still read or click it, while a plain-text scan of the source finds nothing recognizable. It is a deterrent against basic scraping, not encryption or a substitute for spam filtering.

How to use it

  1. Enter the email address you want to publish, and optional link text.
  2. Pick a method: HTML entities and the JavaScript snippet both stay clickable; human-readable text is for plain copy shown without a link.
  3. Copy the output and paste it into your page's HTML in place of a plain mailto: link.

Privacy

This tool runs entirely in your browser. Your input is never uploaded, stored or shared — closing the tab removes it.

Frequently asked questions

Does this stop all spam?
No. It only defeats scrapers that scan raw HTML text for an address or a mailto: link. It does not stop a human copying the address from the rendered page, nor a scraper sophisticated enough to run JavaScript or decode HTML entities.
Which method should I use?
HTML entities work everywhere HTML is rendered, including email clients and feed readers. The JavaScript snippet is a stronger deterrent but needs JavaScript enabled. Human-readable text is best when you just want to display an address without a clickable link.
Is my email address sent anywhere?
No. The obfuscated output is generated locally in your browser; nothing is uploaded.

Back to all tools