No more SPAM by spiders scanning your site for email addresses. With CryptX you can hide all your email addresses, with and without a mailto-link, by converting them using javascript or UNICODE.
CryptX protects your email addresses from spambots while keeping them readable and functional for your visitors. The plugin automatically detects email addresses in your content and encrypts them using various methods including JavaScript encryption, Unicode conversion, and image replacement.
Key Features:
- Automatic Email Detection – Finds and encrypts email addresses in posts, pages, comments, and widgets
- Multiple Encryption Methods – JavaScript, Unicode, image replacement, and custom text options
- Widget Support – Works with text widgets and other widget content
- RSS Feed Control – Option to disable encryption in RSS feeds
- False-Positive List – Endings such as jpeg or png that keep file names like logo@2x.png from being read as addresses
- Exempt Addresses – Leave a single address, or a whole domain, exactly as written
- Per-Post Control – Enable/disable encryption on individual posts and pages
- Editor Block – “Protected email address”, with fields for link text, subject, cc and bcc
- WP-CLI –
wp cryptx settingsandwp cryptx scan, both per site on a network - Multisite – every site keeps its own settings; a network default decides what a new one starts with
- Shortcode Support – Use
[cryptx]email@example.com[/cryptx]for manual encryption - Site Health Check – Reports whether your addresses really are hidden, measured rather than described
- Template Functions – Developer-friendly functions for theme integration
Development
The settings screen is built with React and the WordPress component library. The
human-readable source ships with the plugin, so the compiled files can be
rebuilt and compared:
cdinto the plugin directorynpm installnpm run build
That reproduces build/index.js, build/index.css, build/index-rtl.css and
build/index.asset.php byte for byte from src/. The toolchain is
@wordpress/scripts; package.json and package-lock.json are included so the
exact dependency versions are pinned.
The front end script js/cryptx.min.js is produced from js/cryptx.js with
terser@5.50.0 -c -m.
js/admin-notice.js has no build step at all. It is twenty lines, it runs only
in the admin, and it ships exactly as written.
Screenshots
Protection: where CryptX looks for addresses, and how it hides them. Every option is explained where you set it.
A live preview shows what visitors see and what a spam bot finds in the source, and warns when a setting leaves an address readable.
Exceptions: single posts, file names that look like addresses, and feeds.
Advanced settings. The defaults are right for almost every site.
Help: shortcode, template functions, and what changed in each release.
The settings screen on a phone.
The "Protected email address" block in the editor, with its link text and prefilled message.