Crypto Mailto Defender

Crypto Mailto Defender

Details
View on WordPress

Tired of spam bots scraping your email addresses? Standard obfuscation techniques (like ROT13 or Base64) are easily bypassed by modern crawlers.

Crypto Mailto Defender uses real cryptography to protect your links.

It intercepts your HTML server-side, encrypts your mailto: links using an automatically generated AES-256-CBC key, and replaces the email with a masked version (e.g., ********@domain.com). When a real human user clicks the link or the icon, the plugin executes a secure, nonce-protected Server-Side AJAX request to instantly decrypt the payload and seamlessly open their mail client. The encryption key never leaves your server.

  • Zero-Impact Performance: JavaScript and CSS are only loaded on pages that actually contain email links.
  • Forminator Compatible: Intercepts forms loaded via AJAX dynamically.
  • Smart UI: Text links are revealed on the first click, while icons/buttons instantly open the mail client.

Acknowledgements
The idea and the study behind this plugin were inspired by the article Email Obfuscation by Spencer Mortensen.

Details

Plugin code:
crypto-mailto-defender
Plugin version:
1.0.0
Outdated:
No
WP version:
5.6 or higher
PHP version:
7.4 or higher
Test up to WP version:
7.0.2
Total installations:
0
Last updated:
2026-07-25
Rating:
Times rated:
0
email
mailto
obfuscator
security
spam