HTML Entity Encoder / Decoder
Escape &, <, >, quotes (or all non-ASCII characters) as HTML entities, or decode entities back to text. Free and private: runs in your browser.
Paste text or HTML and choose encode or decode.
Runs entirely in your browser. Nothing you paste is uploaded or stored.
Use cases
- Answer a quick question without leaving the browser.
- Debug web and API behaviour faster.
- Share a precise result with a teammate.
Frequently asked questions
Does escaping HTML prevent XSS?
Escaping is the right fix when inserting text into HTML content or quoted attributes. URLs, scripts and CSS need context-specific encoding.
Is the HTML Entity Encoder / Decoder free?
Yes. It is free with no sign-up, and it runs entirely in your browser, so your input is never uploaded or stored.
Do I need an account?
No. The tool is free, needs no sign-up and runs in your browser.
Related tools
Checking one snippet is a start. Scan your whole repository for free with CodeInspector.