Which method should I choose?

HTML entities are the safe default: the link stays clickable and works with JavaScript disabled. Choose ROT13 when you want the address absent from the raw HTML entirely; it needs JavaScript to appear. CSS reverse needs neither JavaScript nor a link, but the result is display-only text that copies out reversed, so reserve it for decorative uses.

Does obfuscation stop all spam?

No. Obfuscation raises the cost of scraping, and that filters out basic harvesters, but a determined crawler running a full browser reads the final page the way a person does. If an address keeps attracting spam, publish a contact form instead: the address stays private and every message can be filtered before it reaches your inbox.

Is my email address sent anywhere?

No. The encoding runs entirely in your browser. The address is not sent to a server, stored, or logged, and the page does not remember it between visits.

How do obfuscated emails work for screen readers?

The entity and ROT13 methods are safe: browsers decode them before assistive technology reads the page, so screen readers announce the real address. The CSS reverse method is the exception, because the underlying text is genuinely reversed and will be read out backwards.

When is a contact form the better choice?

Whenever you want replies without publishing an address at all. A form keeps the destination private, blocks spam server-side with honeypots and CAPTCHAs, and gives you a record of every message. Form Plume provides the receiving endpoint, so a static site can have a working form without any backend code.

Form Plume is a hosted form backend. You point any HTML form at one endpoint and it receives the submissions, so you never have to publish an email address or run a server. Start with the quickstart docs to see the whole setup.

Where do form submissions go in Form Plume?

Submissions are stored in your Form Plume dashboard, sent to your email, and can trigger integrations like webhooks, Slack, Discord, Google Sheets, Mailchimp, and ActiveCampaign. See the feature overview for the full flow.

Can I try Form Plume for free?

Yes. You can create an endpoint on the free plan, test it from localhost, preview, or a staging URL, and upgrade only when your form volume or team needs grow. Compare limits on pricing or ask a question on the contact page.

Free tools

Free email obfuscator

Turn a visible email address into markup that spam bots and scrapers miss. Everything runs in your browser, and the address is never sent or stored. No signup required.

Email address

Link text (optional)

Subject line (optional)

Method

A clickable mailto link encoded as mixed character entities. Works without JavaScript. The plain address never appears in the generated markup, not even in a comment.

Visitors see

Generated code

<a href="&#109;&#x61;&#105;&#x6c;&#116;&#x6f;&#58;&#x68;&#101;&#x6c;&#108;&#x6f;&#64;&#x65;&#120;&#x61;&#109;&#x70;&#108;&#x65;&#46;&#x63;&#111;&#x6d;">&#104;&#x65;&#108;&#x6c;&#111;&#x40;&#101;&#x78;&#97;&#x6d;&#112;&#x6c;&#101;&#x2e;&#99;&#x6f;&#109;</a>

The methods

Three ways to hide an address.

Each technique trades protection against convenience differently. Pick based on whether the address must stay clickable and whether you can rely on JavaScript.

HTML entities

Every character of the mailto link is written as an HTML entity, alternating decimal and hex forms. Browsers decode entities before rendering, so visitors see and click a normal link.

Works with JavaScript disabled and stays accessible, but harvesters that decode entities can still recover the address, so it is the dependable middle ground.

JavaScript (ROT13)

The address is stored with every letter shifted 13 places and a few lines of JavaScript shift it back in the visitor's browser. The raw HTML never contains the real address.

The strongest of the three against automated scraping, but visitors with JavaScript disabled see the fallback text instead of the address.

CSS reverse

The address is written backwards in the HTML and a two-line stylesheet flips it visually with a right-to-left override. No JavaScript is involved.

Simple and script-free, but the result is display-only: it cannot be a mailto link, copies out reversed, and screen readers announce it backwards.

How to use it

Hide your address in three steps.

An email obfuscator rewrites an address so harvesting bots reading your HTML come up empty while visitors see a normal address. This one runs entirely in your browser and shows exactly what visitors will get before you copy anything.

01
Enter the address
Type the address you want to protect, plus optional link text and a subject line. Nothing you type leaves this page or gets stored.
02
Pick a method
Choose HTML entities for a dependable clickable link, ROT13 JavaScript for the strongest hiding, or CSS reverse for display-only text.
03
Copy the snippet
Check the live preview, copy the markup, and paste it anywhere your site accepts HTML. Nothing to install, no account to create.

Need the link to prefill a body, CC, or BCC as well? Build it with the free mailto link generator first. Obfuscation reduces basic scraping, but it is not spam-proof. When a published address keeps attracting junk, replace it with the free HTML form generator and let server-side spam protection filter messages before they reach you.

FAQ

Questions before you hide
your address.

It rewrites an email address so the published HTML no longer contains the plain text that harvesting bots search for, while people still see a normal, usually clickable address. This tool offers three techniques: HTML entity encoding, ROT13 decoded by JavaScript, and CSS-reversed display text.

One line. Zero backend.

The form backend you don’t have to build.

Free foreverNo credit cardSet up in under a minute

Free email obfuscator

Three ways to hide an address.

HTML entities

JavaScript (ROT13)

CSS reverse

Hide your address in three steps.

Enter the address

Pick a method

Copy the snippet

Questions before you hideyour address.

The form backend you don’t have to build.

Questions before you hide
your address.