M
Mangling
Rename variables and functions to opaque ids (e.g. _0x4a2f). Simplest technique.
JavaScript obfuscator
Hex string encoding + console stripping · harder to read in the browser
Free No account required
Techniques
Input · JS
Output · obfuscated
This tool patches one problem at a time
The Security module in Insight does the same in every audit: TLS, headers, cookies and exposure — with a score breakdown and a remediation plan.
/ About the tool
Why obfuscation is not encryption
Obfuscation makes code harder to read, but it does not protect secrets or access credentials. Determined tooling can reverse most obfuscation — think door lock, not military cipher.
Sensible uses: business-logic friction (pricing, coupons), scraping friction. API keys still belong on the server.
Bad uses: hiding malware, dodging ad blockers, or hiding trackers from users.
/ Glossary
Obfuscation techniques
S
String encoding
Strings as \x6a\x61\x6e (hex) or Base64 so literals are less obvious.
D
Dead code injection
Inject never-run code to grow size and muddy control flow.
CF
Control flow flattening
Turn if/while into switch + state table. Can slow execution.
/ FAQ
Frequently asked questions
No. Keys belong on the backend or as short-lived session tokens.
Mangling is negligible. String encoding is small. Control-flow flattening can be much slower.
Mangling is irreversible without a map. Source maps help with lines, not names.
/ Related tools