Browser processing Input is processed on your device. Privacy & storage

HTML Entities Encode / Decode

Escape text for safe embedding in HTML — or turn entities like &amp; back into characters.

Input

Also encode non-ASCII

Output

More encoding tools: Base64 Password Generator Hash Generator UUID Generator JWT Decoder AES Encrypt Unicode HMAC Generator Barcode Generator Password Strength TOTP Generator Certificate Decoder Base32 All encoding tools →

When to escape HTML

Any time user-supplied text is placed inside an HTML page — comments, titles, code samples — the characters & < > and quotes must become entities, or you risk broken markup and cross-site scripting (XSS). Decoding reverses the process: named entities (&amp; &lt; &nbsp; …) and numeric forms (&#169;, &#x27;) are resolved via the browser's own parser, so the full entity table is supported.

FAQ

Does the non-ASCII option help with old systems?

Yes — encoding every character above U+007F as a numeric entity makes the output safe for pipelines that assume ASCII-only input.

Is my data uploaded?

No. Encoding and parsing run locally.