send.webforms.toRead the docs →

Email address obfuscator

Paste an address, get three versions that are harder for scrapers to harvest. Everything runs in your browser - the address is never sent anywhere.

Enter an address to generate the protected versions.

Honest limits of obfuscation

Entity encoding stops the laziest scrapers and nothing else - any crawler that renders HTML sees straight through it. JavaScript assembly is genuinely effective because most harvesters don't execute scripts, but it shows nothing to the small slice of visitors with JS disabled. The CSS trick displays fine and defeats copy-paste, including for the humans you actually want to reach. There is no version of this that a determined scraper with a headless browser cannot beat.

The only arrangement that keeps an address fully private is not publishing it: a contact form that delivers to your inbox means the address never appears in your HTML at all, and spam filtering happens before anything reaches you. That's the product we build, so weigh our bias accordingly - but it is also just true.