How to Protect Your Email Address from Spam Bots on Your Website (2026)
Back in 2005 we warned that publishing your email address on a website was an open invitation to spam: bots crawl pages and harvest anything with an @ sign. Our tips then included contact forms, email images and writing “name at domain dot com”. Bots are smarter now, but you can still protect your email address effectively. Here’s how in 2026.
Quick answer: The best protection is not to show your real address at all: use a contact form with spam protection, or publish a forwarding alias you can switch off. If you must show an address, let Cloudflare’s Email Address Obfuscation or a WordPress obfuscation plugin hide it from bots, and rely on your email provider’s spam filter for the rest.
Table of Contents
Ways to protect your email address
1. Use a contact form
Forms keep your address out of the page source. Add Turnstile or a honeypot to stop form spam; see how to stop contact form spam in WordPress.
2. Publish an alias or forwarder
Create contact@yourdomain.com that forwards to your real inbox. Most registrars and hosts include email forwarding; if an alias gets flooded, replace it.
3. Obfuscate the address
- Cloudflare: Scrape Shield > Email Address Obfuscation hides addresses from bots automatically.
- WordPress plugins: email encoder plugins convert addresses into code bots can’t read.
- Built-in function: WordPress’s antispambot() encodes addresses in themes.
4. Avoid old tricks that no longer work well
- “name at domain dot com” is decoded by many bots and annoys readers.
- Email images hurt accessibility and still get read by OCR.
5. Use plus aliases and disposable addresses
Sign up for services with you+service@gmail.com, or a disposable email address, so you know who leaked your address.
Let your filter do the rest
Gmail, Outlook and others block most spam. Mark junk as spam rather than deleting it, so filters learn.
FAQ
Is it safe to put my email on my website?
It will attract spam. Use a form or a protected alias instead.
Does Cloudflare email obfuscation hurt SEO?
No. It only changes how the address is delivered in the page.
What’s the best free option?
A contact form plus a forwarding alias covers most sites. Cloudflare’s guide to email address obfuscation explains the free option.
Get our free weekly email: new tech guides and tools, no spam.
New and updated tech guides, a free tool worth bookmarking and one useful pick, once a week. No spam, unsubscribe anytime.
One email a week. Unsubscribe anytime. See our privacy policy.
Dear sir,
How to secure the E-mail ID please give idea to secure my Id
Proficient, thanks for sharing this information. Looks great on my iPhone, but on the Blackberry Pearl’s browser your site comes out a little erratic.
yeah what happens alot is they sell the email lists to marketing companies , they use a spiel like “look we have over N amount of active email adresses and we want to get rid of them for say.. N amount of dollars ”
good article though maybe with new spam technology well be able to defeat these kinds of things
Spam is a bad problem, i dont think the image protection will help as they have software that will scan and read it like as you would with a scanner converting to text, forms are a good option but then again they may just index forms with the form names and then send the spam.
Very good advice. Email harvesters can spam you hundreds of times in a day. Gmail is very good for filtering out spam – I’d recommend this as your displayed web email address.
Tom
hello sir,
could u tell me how i protect my email address from junkmails.
or maybe you should try
dynamic drive’s email riddler
i don’t actually know if it IS safe but i use it in my blog and other websites. it encrypts your email address and transforms it to a series of numbers when displaying it.
good ideas, thanks!
ps. surprised you don’t use something like haloscan for your comments.
SpamGourmet.com gives you FREE email disposable email addresses that can be setup to only receive x messages. Works great.
You can also use Spamproofer to change the email address to HTML characters in the code, which makes it difficult for Bots to figure out.
I was totally unaware of it though I use internet regularly.
I immediately changes my email link on my blog to image. Very very thanks.