HTML entities encoder and decoder
Escape special characters to HTML entities (< > & ") or turn entities back into text. Optional encoding of non-ASCII characters.
How it works
To show HTML code as text on a page, or insert user text safely, the characters < > & " and ' must become entities. Paste the text and choose encode or decode.
Turn on "Also encode non-ASCII characters" to convert accented letters and symbols to numeric entities (ñ), useful for emails and systems that do not handle UTF-8 well.
Frequently asked questions
What is an HTML entity?
A way to write a character as text, such as & for & or < for <. The browser displays it as the original character.
Does escaping HTML protect against XSS?
Correctly escaping output is the main defense against XSS in HTML, but each context (attributes, JavaScript, URLs) has its own rules.
Related tools
JSON validator and formatter online
Validate, beautify, minify and sort JSON online. Shows the exact error line and column. Free, and your data never leaves your browser.
Open toolBase64 encode and decode online
Encode and decode Base64 text with full UTF-8 support (accents, emojis), URL-safe variant, and file or image to Base64 conversion.
Open toolURL encode and decode online
Encode and decode URLs and query parameters (percent-encoding), and break a URL down into protocol, host, path and parameters.
Open toolUUID generator online (v4, v7 and ULID)
Generate UUID v4, time-ordered UUID v7 and ULID, one or thousands at a time. Uppercase, no hyphens and a UUID validator.
Open toolMD5, SHA-1, SHA-256 and SHA-512 hash generator
Compute the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hash of text or a file, in hex or Base64. Ideal for verifying downloads.
Open toolJWT decoder online
Decode a JSON Web Token and read its header, payload, and issued-at and expiry dates in a readable format. The token never leaves your browser.
Open toolNeed a custom tool for your business?
Tell us about your case and in 30 minutes we'll give you a clear diagnosis: what's going on, what to do first and what it might cost. No strings attached.