Can't disable email address obfuscation

General
1

What is the name of the domain?

What is the error message?

[email protected]

What is the issue you’re encountering

Email addresses being obfuscated and can’t turn it off

What steps have you taken to resolve the issue?

Tried switching off email address obfuscation in Scrape Shield but it just resets back to on every time

What are the steps to reproduce the issue?

This is intermittent, I haven’t been able to replicate myself but some people have seen [email protected] instead of the email address on the website. This is despite Cloudflare’s documentation saying that there should be no difference to human users and only robots will have the email address removed. I have found the setting for email address obfuscation in Scrape Shield and switched it off. However every time I go back to check, it has reverted back to on. It seems to be getting overwritten somewhere. Is there a way round this? Thanks.

2

That would suggest you have some automated system (maybe your host) accessing your account and resetting that. Check your API tokens and roll your API key to prevent that.

1 Like
3

Thanks, I don’t think we’re using API keys as we just set up by updating the nameservers. I will ask our hosting company if they can help.

4

Cloudflare won’t reset it, so it will be an associated service. Go through your audit log and reset the values as mentioned.

5

I can’t see anything in Manage Account > Audit Log but this only seems to be user login/API actions, is there another audit log that would show this?

6

No, the audit log contains all requests. If there is nothing, it shouldn’t be reset.

7

So it’s not API keys or hosting settings causing the problem. Could it be something in the WP code, is there anything else that would reset the email address obfuscation setting?

8

Do you have anything in the audit log?

Right now your address is not obfuscated.

9

Nothing in the log, I think I’ve fixed it with a configuration rule but I couldn’t see the issue before so waiting for someone else to confirm

10

To confirm for anyone else reading in future, I fixed this by setting up a configuration rule: in Rules, set up new rule, choose Configuration rule, named “Stop email address obfuscation”, select All incoming requests, scroll down to Email Obfuscation and click Add+, confirm it’s selected as ‘off’, then Deploy

11

You don’t need a rule for that. If the feature is off, it is off. If it turns on, that will be for a different reason.

12

I couldn’t work out what is turning the setting back on each time but the rule has fixed it.

13

Having the same problem here… i can click to disable it, it shows as off, but a page refresh shows it enabled again… seems like a bug?

14

Hey, I’m experiencing the exact same issue with the Email Address Obfuscation setting. No matter how many times I toggle it off, after refreshing the page it always reverts to “on”. It also incorrectly states “last changed 15 hours ago,” even though I’ve toggled it multiple times today.

Looks like a Cloudflare-side issue—anyone found a workaround yet?

Bild_2025-03-06_202916364
Bild_2025-03-06_2029163642066×811 56.5 KB

15

Hi everyone, thanks for the reports.

Cloudflare is currently looking into this issue.

Edit:

3 Likes
16

@ben79 @danielb7390 @david197

Should be solved now so that you can disable it.

4 Likes
17

They solved one thing and broke other thing… My Wordpress website which use cloudflare turnstile plugin doesn’t work anymore, even tho I’m passing verification it says that I need to pass verification… Few minutes later I couldn’t even load my website. Host Error 524…
It is literally going randomly offline and online because of cloudflare, I really don’t know what they did that they broke whole cloudflare. And I’m pretty sure the issue is on their side, because when it started to happen they were fixing problem mentioned in this thread and now it disappeared from cloudflare status page…

18

That really does not sound related to this incident at all. Please create your own topic.

2 Likes
19

Well it really is, It happened after 10 minutes after they said they are working on a fix for this, I wasn’t even doing anything on website, so I couldn’t break anything. I am not going to make thread, probably more people will discover this issue.
Edit: btw website is working smoothly (for now) after I woke up, it probably wasn’t issue with my hosting, I didn’t saw any crazy usage on it or something
Edit 2: I can also confirm that turnstile is working normally again and I and customers on my website can pass it without getting human verification error…