Cloudflare Email Decoder
Paste the data-cfemail value found in a page's HTML (or the entire tag) to reveal the e-mail address Cloudflare protected.
- Runs in your browser
- Free to use
About this tool
Cloudflare's e-mail protection hides addresses from scrapers by XOR-encoding them in the HTML. When you need the address and the decoding script is blocked or you are reading raw source, this decoder applies the same one-byte XOR locally and shows the result. Paste the hex value, the whole tag or the protection link; the tool extracts what it needs.
How to use it — quick steps
- 01
Enter the data-cfemail value or tag
Type or paste the data-cfemail value or tag in the field above. Use Ctrl + V to paste from the clipboard.
- 02
Press "Decode e-mail"
Press "Decode e-mail" or Ctrl + Enter. The result appears below in an instant. Results can be copied.
- 03
Read the result
It appears in the dark panel under the form instantly. Every block has [copy] and other actions.
Key features of this tool
Nothing leaves your browser
The processing is plain JavaScript that runs on your device: the text you paste is never uploaded to our servers or to anyone else.
Instant results
Results appear the moment you press the button, even for long inputs, and every block has copy and download actions.
Works everywhere
No installation, no account and no limits: the tool works on desktop and mobile, in any modern browser, as often as you like.
Frequently asked questions
How does Cloudflare e-mail protection work?
The address is XOR-encoded with a one-byte key (the first two hex characters) and restored by a script in the visitor's browser, so scrapers that do not run JavaScript cannot read it.
Where do I find the string?
In the page source, as data-cfemail="…" on a span or in the #fragment of /cdn-cgi/l/email-protection links.
Are my files or data uploaded?
No. The tool is plain JavaScript that runs in your browser; the files or data you provide here are never uploaded to our servers.