Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Email Address Encoder
A lightweight plugin that protects email addresses from email-harvesting robots, by encoding them into decimal and hexadecimal entities.
The facts
- Rating
- 4.2★ from 160
- Active installs
- 100k+
- Price
- Free
- Last updated
- 12 Apr 2026
- Added
- Nov 2011
- Requires WP
- 2.0
- Tested up to
- WP 7.0.4
- Requires PHP
- 5.3
- Downloads
- 1,665,028
Our analysis
AI-assistedEmail Address Encoder is a WordPress plugin designed to protect email addresses and mailto links from being harvested by bots. It encodes these addresses into decimal and hexadecimal entities, ensuring they are not easily readable by automated tools. The plugin works across various content types, including posts, pages, comments, and text widgets, without relying on JavaScript.
This plugin is suitable for website owners who want to enhance their email security and reduce spam. It is particularly useful for those who display email addresses publicly on their sites and wish to protect them from email-harvesting robots.
Best for: Website owners looking to secure their email addresses from spam bots.
What it does well
- ✓Protects email addresses from email-harvesting robots
- ✓Works without JavaScript for simple spam protection
- ✓Compatible with various content types like posts and comments
- ✓Includes a shortcode for additional content protection
- ✓Free to use from the WordPress.org directory
Where it falls short
- •Premium features are not included in the free version
- •Limited information on the effectiveness of the protection
Verdict
Email Address Encoder offers a straightforward solution for protecting email addresses on WordPress sites. While it provides essential features for basic protection, users may need to consider the premium version for more advanced capabilities.
From the developer
Till Krüss's own description of Email Address Encoder, lightly tidied.
A lightweight plugin that protects plain email addresses and mailto links from email-harvesting robots, by encoding them into decimal and hexadecimal entities. Has an effect on the posts, pages, comments, excerpts, text widgets and other filtered content. Works without JavaScript — just simple spam protection.
To see whether all your email addresses are properly protected, use the free page scanner tool.
Other content (like phone numbers) can be protected using [encode] shortcode:
[encode]+1 (555) 123-4567[/encode]
[encode link="tel:+15551234567"]+1 (555) 123-4567[/encode]
Premium Features
- Full-page protection that catches all email addresses
- Hardened protection using JavaScript and CSS techniques
- Improved phone number protection
- Built-in plugin support for ACF, Jetpack, WooCommerce and many others
Check out the Premium version of Email Address Encoder.
Tagged as
purpose
Security & Malware Protection
feature
Speed Optimised
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)