Encode & Decode
Unicode Inspector
Find hidden characters, zero-width spaces and Trojan Source bidi controls; see code points and bytes.
Loading the Unicode Inspector…
About the Unicode Inspector
Inspect text character by character: code point, UTF-8 and UTF-16 encoding and category. It flags invisible and dangerous characters, including zero-width spaces, byte order marks, bidirectional overrides used in "Trojan Source" attacks and tag characters, and gives you a cleaned copy without them.
How to use it
- Paste the suspicious text.
- Review the flagged characters and the per-character table.
- Copy the cleaned text if needed.
Frequently asked questions
- What is a Trojan Source attack?
- Bidirectional control characters (U+202A to U+202E, U+2066 to U+2069) can make source code display differently from how it is compiled. This tool finds them.
- Why is my string length wrong?
- JavaScript length counts UTF-16 units; an emoji can be 2 or more units and several code points. The inspector shows graphemes, code points, UTF-16 units and UTF-8 bytes.
- Is my text uploaded?
- No. Everything runs in your browser tab with JavaScript. Nothing you enter is uploaded, logged or stored, and the page works offline once loaded.