Encode special characters to HTML entities, or decode entities back to text.
Loading tool…
The tool is loading its code on your device. This happens once and is cached for later visits.
Processed entirely on your device
Overview
Encode special characters into HTML entities, or decode entities back into readable text. Handles named, decimal and hexadecimal references, all in your browser.
HTML gives a handful of characters a special meaning: the angle brackets delimit tags, the ampersand starts an entity, and the quotes wrap attribute values. The moment you want to display one of those characters literally — to show a code sample, to echo back what a user typed — you have to represent it some other way. That other way is the HTML entity.
Encoding replaces the reserved characters with their entity form:
With those escaped, a snippet like <script>alert(1)</script> renders as visible text instead of executing, which is the whole basis of output encoding as a defence against cross-site scripting.
Decoding runs the other way and understands all three reference forms. A named entity such as © becomes ©, a decimal reference such as © becomes ©, and a hexadecimal reference such as © becomes © as well. Content copied from a page source, an email template or an exported CMS field is usually full of these, and decoding turns it back into something you can actually read.
It is easy to conflate the different text encodings, but they solve different problems:
HTML entities make reserved characters safe to display in markup.
URL (percent) encoding makes characters safe to carry in a web address, turning a space into %20.
Base64 turns arbitrary binary data into ASCII text so it can travel through text-only channels.
This tool handles the first. For the other two there are dedicated URL and Base64 converters, and picking the right one is what stops a string from being mangled on the way into — or out of — a page.
Step by step
Paste the text you want to encode, or the escaped markup you want to decode.
Choose the direction: Encode turns special characters into entities, Decode turns entities back into characters.
Read the result, which updates as you type.
Copy it or download it as a plain-text file.
Why use it
What this tool is good for, and what it deliberately does not try to do.
Encoding converts the five characters that are meaningful in HTML — ampersand, angle brackets and both quotes — into & < > " ', which is exactly what you need to display code or user text safely.
Decoding handles the named set (©, —, …), decimal references like © and hexadecimal references like ©, so escaped text from any source comes back readable.
A single direction switch flips between encoding and decoding, so you do not need separate pages for the forward and reverse operations.
Both directions run in the browser. Snippets, tokens and private copy are converted locally with no request and no logging.
Questions
Short, honest answers about quality, limits and privacy.