I built a small plugin that protects email addresses from scrapers. I originally wrote it for a specific client project, so it might not be fully refined for general use yet — but it
works and I figured it’s worth sharing.
Instead of putting a mailto: link in the markup, it encrypts each address into a token using sodium_crypto_secretbox. A small JS handler resolves the token on click via an API call
and opens the mail client. The address never appears in the HTML source.
It can be used for Email fields and on the writer fields.
Check it out: GitHub - kesabr/kirby-email-encrypt · GitHub
Feedback welcome