Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Usage Milestone: Google Analytics Module google_analytics crossed 1,000 active installs. Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Release: GraphQL Compose Codegen 1.1.2 Minor update available for module graphql_compose_codegen (1.1.2). Release: Mapy.com 1.1.3 Minor update available for module mapycom (1.1.3). Release: Ckeditor5 entity browser 3.0.3 Minor update available for module ckeditor5_entity_browser (3.0.3). Release: Ckeditor5 entity browser 3.0.1 Minor update available for module ckeditor5_entity_browser (3.0.1). Release: Ckeditor5 entity browser 3.0.2 Minor update available for module ckeditor5_entity_browser (3.0.2). Release: Teamleader Integration 4.0.2 Minor update available for module teamleader (4.0.2). Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

Obfuscate Email

3,570 sites Security covered Drupal 9–11
View on drupal.org

This module protects email addresses from spam bots by rendering them unreadable on the server and decrypting them with JavaScript on the client. It can be used in field templates or as a text filter for content.

Protect email addresses from spam bots, in two situations:

  1. In a field template, or
  2. in a text filter for ckeditor output

Both situation utilize the same javascript.

Upgrading to 2.1.x

Ensure you have uninstalled the rot13 submodule prior to upgrading as it is no longer required. See Release Notes

How it works?

To hide your emails from bots, render a non readable email on the server and
decrypt it via vanilla JS in the client. No jQuery needed. The basic idea consists of three parts:

  • hide behind a data-attribute
  • substitute the @-sign and dots (.) with /at/, /dot/, then
  • shift everything via rot13
  • rebuild it via javascript

Notice: There is no non-javascript fallback to this method!

How to use the template

Have a look into template/field--email.html.twig to have a fully working
example. This template will be used when the module is enabled. Use the
drupal suggestion system to override this default template. The JS is attached
to the page.

<a data-mail-to="znvy/ng/znvy/qbg/pbz">Email</a>
<a data-mail-to="znvy/ng/znvy/qbg/pbz" data-replace-inner="">Email</a>
<span data-mail-to="znvy/ng/znvy/qbg/pbz" data-replace-inner="@mail">drop me a line at @mail</span>

will be converted to

<a href="mailto:[email protected]">Email</a>
<a href="mailto:[email protected]">[email protected]</a>
<span>drop me a line at [email protected]</span>

Note: Use the data-replace-inner attribute to replace the complete inner text,
or give it a string to only replace this very string.

How to use the text filter

In the backend go to admin/config/content/formats, e.g. Basic HTML, and under
the section "Enabled filters" check the box "Obfuscate Email". So now every
mailto-anchor written in the ckeditor will be preprocessed before rendering and
substituted on the client side.

Source

GitHub: https://www.github.com/WondrousLLC/obfuscate_email

Thanks

Thanks to b_sharpe for adding the text filter.

Depends on

Dependencies of the latest stable release

  • field Drupal core

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
2
Tracked since
Oct 2025
Latest release
1 month ago
Releases (12 mo)
2 ▲ from 0
Maintenance
Active

Releases

Version Type Core Release date
2.1.4 Stable 9–11 Jul 24, 2026
2.1.3 Stable 9–11 Oct 14, 2025