JavaScript obfuscator
Paste up to 5 KB of JavaScript. Get it back with strings encoded, names mangled and control flow flattened.
- No account
- javascript-obfuscator inside
- Nothing stored
For your own code. Don't paste secrets: obfuscated code can still be read by someone determined. Snippets aren't stored. 10 runs a day per network. Terms
Whole files and project zips, TypeScript included, run in a free account.Create one
What obfuscation does, and what it doesn't
It does
- Make your code slow and painful to read, copy or edit
- Hide strings like messages, URLs and event names from a quick search
- Stop casual resellers from rebranding your work
It doesn't
- Stop someone sharing the file: anyone with a copy can run it
- Keep a secret safe: never put API keys or passwords in code you ship
- Make code impossible to reverse: it raises the effort, that's all
To stop sharing, check a license key when your script starts. Learn how
Questions, answered
Does the obfuscated JavaScript still work?
Yes: it does the same thing, it's just much harder to read. Global names are kept so other code can still call yours. Test it before you ship it, as with any build.
Which obfuscator does it use?
javascript-obfuscator, the widely used open-source tool, with its string array (base64-encoded), hexadecimal names and control-flow flattening.
Do you keep my code?
No. Your snippet is held in memory only while it's obfuscated and never written to disk or logs. Don't paste secrets anyway: obfuscated code can still be read by someone determined.
Can I obfuscate a whole Node.js or Electron project?
Yes, with a free account: upload a file or a zip of your project, TypeScript included, and get it back obfuscated with your imports intact. The Free plan includes 3 obfuscation runs a month.
Why only 5 KB, and 10 runs a day?
So the free tool stays fast for everyone. Whole files and projects run in your SunLicense account.
JavaScript obfuscation by javascript-obfuscator (BSD-2-Clause). How the free tools work
SunLicense