Developer

HTML Entity Encoder & Decoder

Escape characters that would otherwise be interpreted as markup, or turn entities back into readable text.

Developer

HTML entity encoder & decoder

Local only
Everything stays in your browser

Your text is processed on your device — nothing is uploaded to a server.

When you need entities

Any user-supplied text placed into HTML must have &, <, > and quotes escaped, otherwise the browser treats it as markup — the root cause of many injection bugs.

Named and numeric entities

Decoding understands the common named entities plus decimal (é) and hexadecimal (é) numeric references.

Good to know

Frequently asked questions

Which characters does basic encoding escape?

The five that matter for markup: ampersand, less-than, greater-than, double quote and apostrophe.

What does 'encode all non-ASCII' do?

It also converts accented and non-Latin characters into numeric entities, useful for legacy systems.

Is my text uploaded?

No. Encoding and decoding happen locally.

Does decoding handle every named entity?

It handles the common ones plus all numeric references; rare named entities may pass through unchanged.