Encode & Decode
HTML Entities
Escape text for HTML and decode every named and numeric entity.
Loading the HTML Entities…
About the HTML Entities
Escape the characters that have special meaning in HTML (& < > " ') so text displays literally, or decode HTML entities back to characters. Optionally escape every non-ASCII character as a numeric entity for systems that only accept ASCII.
How to use it
- Choose Escape or Unescape.
- Paste your text or HTML.
- Copy the result.
Frequently asked questions
- Does escaping prevent XSS?
- Escaping these characters makes text safe inside HTML element content and quoted attributes. Other contexts, such as JavaScript or URLs, need their own escaping.
- Which entities can it decode?
- All of them: every named entity in the HTML standard plus decimal and hexadecimal numeric references.
- Is my text uploaded?
- No. Everything runs in your browser tab with JavaScript. Nothing you enter is uploaded, logged or stored, and the page works offline once loaded.