SEO Report Tools

Webmaster Utilities · Runs in your browser · Free

HTML Entity Encoder / Decoder

Escape or unescape HTML special characters and numeric entities.

What this tool does

Converts &, <, >, quotes and optionally non-ASCII characters to HTML entities, or decodes common named and numeric entities back to text.

Who should use it

Developers and editors working with HTML source.

How it works

Encoding replaces the five markup-significant characters and, if selected, every character above U+007F with a numeric entity. Decoding handles numeric entities and the most common named ones.

How to use it

  1. Enter or paste text in the form.
  2. Adjust the options below the main box if you need to; the defaults suit most cases. Use "Load example" to see how input should look.
  3. Press the run button. Processing happens instantly in your browser.
  4. Review the result panel, then copy or download the output if the tool offers it. Use Reset to start over.

Practical example

"<b>Tom & Jerry</b>" encodes to "&lt;b&gt;Tom &amp; Jerry&lt;/b&gt;".

Understanding the results

Always encode user-provided text before inserting it into HTML.

Limitations

Decoding supports a limited named-entity list; unknown names are left unchanged.

Accuracy and report transparency

Results are computed in your browser from exactly what you enter. Deterministic steps (counting, parsing, encoding, validation) are verified by an automated test-suite with known answers. Where a method is a heuristic, the result panel says "estimated". No external data is used and nothing is invented.

Privacy

Your input never leaves your device for this tool. We count anonymous events (tool opened, run, copied) without storing what you typed. See the Privacy Policy.

Try these next

URL Encoder / DecoderPercent-encode or decode text for use in URLs and query strings.Base64 Encoder / DecoderEncode text to Base64 (UTF-8 safe) or decode Base64 back to text.HTML to Text ConverterStrip tags, scripts and styles from HTML and keep the readable text.

Frequently asked questions

Is encoding enough to prevent XSS?

It is one required layer, but context matters (attributes, JavaScript, URLs). Use a framework's escaping.

Is my data sent to your server?

No. This tool runs entirely in your browser, so the text or files you enter stay on your device. We do record anonymous counts of how often each tool is opened or run (no input data) to see which tools are useful.

How accurate are the results?

Counting, parsing, encoding and validation steps are deterministic and covered by automated tests with known answers. Anything based on a heuristic is labelled "estimated" in the result panel.

Is this tool really free?

Yes. There is no account, limit or paid plan. The site is supported by advertising, which is disclosed on our Advertising Disclosure page.

References