Hide (obfuscate) an email address on a web page
Hiding the address works against the simple robots that only read the page code, which is most of them. It does nothing against a robot that behaves like a real browser. Knowing which is which is the whole point of this page.
- Runs entirely in your browser
- Works offline
- No upload
- No sign-up
- No watermark
Loading the tool…
How it works
- Type the address and, optionally, the link text.
- Pick a method and read what it costs and what it protects against.
- Copy the code into your page; the live preview is the same code running here.
Why nothing is uploaded
Every operation on this page is done by code running inside your browser tab, using the same engine that renders web pages. The file is read from disk into your tab’s memory, transformed there, and written back out as a download. It is never sent anywhere — not to us, not to a third party.
Verify it yourself
- Open your browser’s developer tools (F12) and select the Network tab.
- Load your file and run the tool.
- The only requests you will see fetch the tool’s own code — and, for a few heavy tools, their open-source engine from a public CDN — plus one small page-view ping to loreatec.jp (page address and title, nothing more). None of them carry your file.
Frequently asked questions
Does obfuscation actually work?
Partly, and it is worth being precise. A robot that only downloads the page code and looks for addresses sees nothing useful in any of these four methods, and that is how most addresses are collected. A robot that runs a real browser sees exactly what a visitor sees, so the JavaScript methods do not stop it. Hiding raises the effort; it does not close the door. For an address that must never leak, use a contact form or an address you can throw away.
Why not write “info [at] example [dot] com”?
Because it fails everyone except the spammer. A screen reader reads it aloud as gibberish, someone on a phone cannot tap it, a customer has to retype it by hand and gets it wrong — and any collecting robot unscrambles it with one simple search pattern. It is the one approach that is worse than doing nothing.
Which method should I use?
HTML entities (each character written as a code), if you use only one. It needs no JavaScript, stays a normal clickable link, works with screen readers, and beats the simple robots. The JavaScript methods hide the address better, but for visitors with JavaScript switched off or blocked the address does not appear at all.
Is the CSS method safe to use for a link?
No. It reverses the text visually but stores it backwards, so it cannot be a working mailto link, and copying it gives the reversed string in some browsers. Use it only for an address displayed as text.