How does HTML entity obfuscation stop spam harvesters?

Most automated spam bots search raw HTML source code for standard email patterns like name@domain.com. Replacing characters with numeric character references (like co...) breaks basic regex patterns while standard web browsers render the text normally.

Will visitors still be able to click on my email address?

Yes. The Obfuscated Mailto Link format generates a fully interactive, clickable anchor tag that opens the visitor's default email client.

What is CSS reverse (unicode-bidi) obfuscation?

The email is written backwards in the HTML source code (e.g. moc.niamod@eman) but styled with CSS direction: rtl; unicode-bidi: bidi-override. The browser flips the visual display forward for human readers.

Which obfuscation technique provides the strongest protection?

JavaScript charCode injection provides the highest protection against traditional scrapers because the email does not exist in the raw HTML response until JavaScript executes.

Is my email address stored or logged on your servers?

No. The obfuscation code executes 100% locally in your web browser. Your contact information is never transmitted across the network.

Text & Email Obfuscator

Protect email addresses and sensitive text from web scraping bots using HTML entities, ROT13, and JavaScript document.write.

100% free
Private in browser
No signup
No watermarks

Email Address or Sensitive Text to Obfuscate

HTML Entity Obfuscation (Renders Identically to Humans)

Mixed Hex & Decimal Entities (Hardest for regex bots)

&#99;&#x6f;&#x6e;tact@&#x74;h&#101;&#x74;&#111;&#x6f;l&#x73;s&#46;&#99;&#x6f;&#109;

Clickable Obfuscated Mailto Link Tag

<a href="&#x6d;ai&#108;&#116;o&#x3a;&#99;&#x6f;&#x6e;tact@&#x74;h&#101;&#x74;&#111;&#x6f;l&#x73;s&#46;&#99;&#x6f;&#109;">&#99;&#x6f;&#x6e;tact@&#x74;h&#101;&#x74;&#111;&#x6f;l&#x73;s&#46;&#99;&#x6f;&#109;</a>

Decimal Entities (&#...)

&#99;&#111;&#110;&#116;&#97;&#99;&#116;&#64;&#116;&#104;&#101;&#116;&#111;&#111;&#108;&#115;&#115;&#46;&#99;&#111;&#109;

Hex Entities (&#x...)

&#x63;&#x6f;&#x6e;&#x74;&#x61;&#x63;&#x74;&#x40;&#x74;&#x68;&#x65;&#x74;&#x6f;&#x6f;&#x6c;&#x73;&#x73;&#x2e;&#x63;&#x6f;&#x6d;

Advanced Anti-Scraper Scripts (No Raw Text in HTML Source)

CSS RTL Bidi Override (Reversed in HTML source, forward on screen)

<span style="direction: rtl; unicode-bidi: bidi-override;">moc.sslooteht@tcatnoc</span>

JavaScript String.fromCharCode Injection

<script type="text/javascript">
  document.write(String.fromCharCode(99, 111, 110, 116, 97, 99, 116, 64, 116, 104, 101, 116, 111, 111, 108, 115, 115, 46, 99, 111, 109));
</script>

ROT13 Cipher Encoded Script

<script type="text/javascript">
  (function() {
    var r = "[email protected]".replace(/[a-zA-Z]/g, function(c) {
      return String.fromCharCode((c <= "Z" ? 90 : 122) >= (c = c.charCodeAt(0) + 13) ? c : c - 26);
    });
    document.write(r);
  })();
</script>

Rate this tool

Be the first to rate — helps others and improves this page.

About Text & Email Obfuscator

Posting your direct email address or phone number on a public website often triggers an avalanche of automated spam and phishing bots. The Text & Email Obfuscator transforms raw text into protected encodings — including mixed decimal and hexadecimal HTML entities, bidirectional CSS reversal, and JavaScript charCode encoders. Human visitors see a clickable email link, while web scrapers extract unreadable gibberish.

How to use Text & Email Obfuscator

Enter the email address, telephone number, or sensitive text you want to protect.
Review the generated obfuscation options: mixed HTML entities, CSS bidi-override, or JS charCode scripts.
Select the format that best fits your CMS or static site architecture.
Copy and paste the protected snippet directly into your HTML template or blog post.

Key features

Generates decimal, hex, and mixed HTML entities rendering identically to human eyes
Provides ready-to-use clickable obfuscated mailto: anchor links
CSS direction: rtl and unicode-bidi reversal tricking basic scraper regexes
JavaScript charCode injection leaving zero plain-text footprint in page source
100% private in-browser obfuscation without transmitting contact details

Frequently asked questions

How does HTML entity obfuscation stop spam harvesters?: Most automated spam bots search raw HTML source code for standard email patterns like [email protected]. Replacing characters with numeric character references (like co...) breaks basic regex patterns while standard web browsers render the text normally.
Will visitors still be able to click on my email address?: Yes. The Obfuscated Mailto Link format generates a fully interactive, clickable anchor tag that opens the visitor's default email client.
What is CSS reverse (unicode-bidi) obfuscation?: The email is written backwards in the HTML source code (e.g. moc.niamod@eman) but styled with CSS direction: rtl; unicode-bidi: bidi-override. The browser flips the visual display forward for human readers.
Which obfuscation technique provides the strongest protection?: JavaScript charCode injection provides the highest protection against traditional scrapers because the email does not exist in the raw HTML response until JavaScript executes.
Is my email address stored or logged on your servers?: No. The obfuscation code executes 100% locally in your web browser. Your contact information is never transmitted across the network.