What's the difference between Personal and Studio?

Personal ($39) is for one person — unlimited use on one active device at a time. Activate on a new device and the old one signs out. Studio ($199) is for teams and commercial client work — unlimited team members, early access to new tools, and a commercial license.

Do I need an account?

No. Use any tool free up to 5 times per day on compute-heavier tools, and unlimited on lightweight ones. No card, no account, no signup required.

Where are my files processed?

Right on your device. Files never upload to any server. Everything runs in your browser — you can verify in DevTools → Network.

What happens if I use my Personal license on a second device?

The new device activates and the old device signs out. Your license key stays the same — you just move it between devices as needed. No limit on how often you switch.

Does this work on my phone?

Yes. Every tool works on iPhone, Android, tablet, and desktop.

What if I want a refund?

30-day money-back guarantee on both tiers. No questions asked. Email sales@cipherforces.com.

Will you add more tools?

Yes. New tools ship regularly. Your license includes every tool we ever release — Studio members get early access.

SecurityFree

Email Obfuscator

Hide your email address from spam scrapers using HTML entity, JavaScript, and reverse-string encoding.

By Daniel BeglaryanUpdated May 2026

PrivateWorks OfflineNo Account

100% Private Works Offline Instant

Your Email

Display Label (optional)

For JS-based strategies, this is the visible link text. Leave blank to show the address itself.

Enter a valid email above and we’ll generate five obfuscated forms you can paste into your site.

Obfuscation is not a magic shield. Modern scrapers run headless browsers and parse rendered DOM. Layered strategies (entity + JS + reverse) raise the cost enough that most scrapers move on. For higher-traffic sites, combine obfuscation with a server-side honeypot or a contact form.

Deep dive

About Email Obfuscator.

Hide Your Email From Spam Scrapers

If you put a plain mailto:you@yourdomain.com link on a public web page, harvesting bots will scrape it within hours. CipherForces Email Obfuscator transforms your address into formats that real browsers render as a normal clickable link but that naive scrapers can't parse. Choose the strategy that fits — or paste all of them as a layered defense.

Strategies Generated

HTML entity encoding: Every character becomes a numeric entity like john. Defeats the simplest regex-based scrapers; rendered identically by every browser.
Hex entity encoding: Same idea using hex form (jo...). Catches scrapers that strip decimal entities but not hex.
Reverse-string + CSS: The HTML contains the address backwards, with direction: rtl; unicode-bidi: bidi-override CSS to display it forwards. Bots see the reversed string; humans copy a usable address.
JavaScript obfuscation: A short script reconstructs and inserts the mailto: link at runtime. Bots without a JS engine see nothing; users see a normal link.
Base64 + JS decoder: The address is base64-encoded with a one-line decoder. Stronger than entity encoding because the literal characters never appear in the source.

Common Use Cases

Personal portfolio sites: Keep your contact email reachable but invisible to harvesters.
Open-source maintainer pages: Publish a contact address on README/about pages without it ending up in spam lists.
Small-business contact pages: Skip the contact-form bloat — a plain obfuscated mailto: works on every device.
Documentation sites: Author or support emails embedded in long-lived pages stay clean over time.

Limitations

No obfuscation is a perfect spam shield — modern scrapers run headless browsers and parse rendered DOM. Layered strategies (entity + JS + reverse) raise the cost enough that most scrapers move on to easier targets. For higher-traffic sites, combine obfuscation with a server-side honeypot or a contact form.

Privacy: The encoder runs entirely in your browser. The address you obfuscate is never sent to any server.

FAQ

Frequently asked questions.

How do I hide my email address from spam bots on my website?

Paste your email into the Email Obfuscator and pick an encoding method: HTML entities, JavaScript, or reverse-string. Copy the generated code and place it in your page's HTML. The address still displays and works for human visitors, but automated scrapers see only scrambled characters instead of a usable email.

Is my email address uploaded to a server when I use this tool?

No. The Email Obfuscator runs entirely in your browser using JavaScript, so your email is never sent to any server. All encoding happens locally on your device. There is no signup and nothing is logged, which keeps the address you are trying to protect completely private.

Does HTML entity encoding actually stop email harvesters?

It helps against basic scrapers that read raw HTML, since they see entity codes rather than a plain address. More advanced bots can decode entities, so combining methods like JavaScript or reverse-string encoding adds extra layers. No technique is perfect, but obfuscation reliably reduces the spam most simple harvesters generate.

Can I use the obfuscated email code for free without creating an account?

Yes. The Email Obfuscator is completely free and requires no account, login, or payment. You can encode as many addresses as you want and copy the output directly into your site. Because everything runs client-side in your browser, there are no usage limits tied to a server.

Three steps