HTML Entity Encoder / Decoder
Escape &, <, > and quotes safely.
- 100% free
- No sign-up
- Runs in your browser
Show code as text, safely
To display <tags> on a web page instead of having the browser run them, special characters must be escaped as entities. This tool does it in one paste.
Decoding turns <, " and numeric entities back into the characters they represent.
- 1
Choose a direction
Encode or decode.
- 2
Paste text or HTML
Results update instantly.
- 3
Copy
Paste into your page or CMS.
Frequently asked questions
Which characters must be escaped?
& < > " and ' are the essential five. Encoding non-ASCII is optional with UTF-8 pages.
Does escaping stop XSS?
Escaping output is a key defence, but use your framework's built-in escaping for real applications.
Is my data uploaded anywhere?
No. Everything runs in your browser with JavaScript — nothing you type or open is sent to our servers.