HTML Entity Encode / Decode

Escape special characters to HTML entities or decode &, <, ' and numeric entities back to text. Free online HTML escape tool.

About this tool

Escape special characters as HTML entities or decode entities back to text. Useful when embedding user content in HTML or reading escaped API output.

How to use

Select Encode or Decode.
When encoding, optionally convert every non-ASCII character to a numeric entity.
Paste the text and copy the result.

Frequently asked questions

Which characters are escaped?

The five characters with special meaning in HTML: & < > " and '. With the non-ASCII option, characters like é or 한 become &#x…; entities.

Which entities can be decoded?

All numeric entities (', 😀) and common named ones such as &,  , © and —. Unknown names are left as they are.

Does escaping prevent XSS?

Escaping text before inserting it into HTML element content is one important step, but attributes, URLs and scripts need their own context-specific handling.

Related tools

HTML to JSX – Convert HTML markup into React JSX
HTML Preview – Render HTML in a sandboxed frame
URL Encode / Decode – Percent-encode or decode URL components
Backslash Escape / Unescape – Escape quotes, newlines and control characters

Format

JSON Format / Validate – Pretty-print, minify and validate JSON
Line Sort / Dedupe – Sort, dedupe, reverse and trim lines

Encode / Decode

Base64 Encode / Decode – Convert text to and from Base64 (UTF-8)
URL Encode / Decode – Percent-encode or decode URL components
HTML Entity Encode / Decode – Escape and unescape HTML entities
Base64 Image Encode / Decode – Turn images into data URIs and preview Base64 images
Backslash Escape / Unescape – Escape quotes, newlines and control characters
Hex ↔ ASCII – Convert text to hexadecimal bytes and back
JWT Debugger – Decode JSON Web Token header and payload

Generate

UUID / ULID Generate / Decode – Generate UUID v4 / v7 and ULID, and decode existing IDs
Hash Generator – MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests
Random String Generator – Cryptographically secure random strings
Lorem Ipsum Generator – Placeholder text in paragraphs, sentences or words
QR Code Generate / Read – Create QR codes and read them from images

Convert

World Time Converter – Convert a time between time zones; starts from this computer's current time
Unix Time Converter – Convert Unix timestamps and date strings
Number Base Converter – Convert between binary, octal, decimal and hex
YAML ↔ JSON – Convert YAML to JSON and back
CSV ↔ JSON – Convert CSV to JSON and back
HTML to JSX – Convert HTML markup into React JSX
Query String ↔ JSON – Convert URL query strings to JSON and back
URL Parser – Split a URL into its parts and query parameters
Color Converter – Convert between HEX, RGB, HSL, HWB and CMYK
SVG to CSS – Turn SVG markup into a CSS background data URI
JSON ↔ PHP Array – Convert JSON to PHP array syntax and back
PHP Serialize / Unserialize – Convert JSON to PHP serialize() format and back

Text

RegExp Tester – Test regular expressions and inspect matches
String Case Converter – camelCase, snake_case, kebab-case and more
String Inspector – Count characters, bytes, words and inspect code points
Text Diff Checker – Compare two texts by line, word or character

Inspect

Cron Job Parser – Explain cron expressions and list upcoming run times
cURL Analyzer – Break down a cURL command and convert it to fetch()
X.509 Certificate Decoder – Inspect PEM certificates and chains

Preview

Markdown Preview – Render GitHub-flavored Markdown
HTML Preview – Render HTML in a sandboxed frame